
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
File: Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json)
Hash identifier: PLDcfdwkAOsw66EJozWZFoXkFwUp04CNK/UjtKjTp00=
Subject key identifier: 7A:22:B2:B9:36:8B:00:EC:46:3A:2C:AE:42:2B:20:89:1D:AD:DD:C8
Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
Certificate issuer: /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
Manifest number: 45
Signing time: Thu 23 Jul 2026 10:25:59 +0000
Manifest this update: Thu 23 Jul 2026 10:25:58 +0000
Manifest next update: Thu 30 Jul 2026 10:25:58 +0000
Files and hashes: 1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: mxenwQp0AiDQwY0BOxc9G6hk0xyIOKC0AcI6LEjf+88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Validity
Not Before: Jul 23 10:25:58 2026 GMT
Not After : Jul 30 10:25:58 2026 GMT
Subject: CN=6a61ec37-8f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:df:72:57:bb:13:23:47:6f:bd:dc:70:50:
98:9f:58:c9:31:49:aa:f9:84:f9:5e:a9:c1:53:ec:
68:6d:5d:2b:09:c2:b9:cc:dd:ee:e3:bd:b4:d9:13:
e1:61:b7:bf:46:85:5c:cc:19:7d:c5:9e:53:6c:6a:
00:97:b3:d0:7b:99:b5:ff:0f:77:d2:9d:ea:fb:cc:
9c:68:02:1f:02:93:6a:82:43:9b:45:12:86:c4:a7:
20:94:2d:c8:bc:3c:1c:c2:6c:73:82:36:db:6d:33:
06:e5:a7:86:b8:ae:01:72:d0:98:72:a4:d6:03:43:
fc:86:ee:83:2d:c3:3c:f2:60:8d:c1:8d:51:98:f8:
65:31:d6:de:5f:0d:6c:73:df:2f:e9:0f:e5:2d:a2:
7e:c2:dc:54:af:7f:15:1a:b7:27:e4:af:66:e4:77:
38:bf:e1:fb:e0:54:c1:0d:a1:b3:a9:0f:7f:cc:9f:
72:b8:3e:e9:b5:c5:b4:b3:b1:06:77:19:1e:fe:85:
e2:76:1e:10:19:45:45:f0:98:42:2d:de:1f:61:d3:
ff:6d:61:75:41:a0:aa:ee:c2:59:d3:74:ba:00:80:
32:ce:85:3c:1e:98:2c:ad:52:25:55:dc:1e:56:ae:
75:a4:22:77:f8:41:29:31:43:39:45:6b:87:b6:f4:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:B2:B9:36:8B:00:EC:46:3A:2C:AE:42:2B:20:89:1D:AD:DD:C8
X509v3 Authority Key Identifier:
keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:fe:6e:de:ec:a7:5b:21:b9:b2:19:8a:42:93:9f:ac:d9:85:
8d:f2:63:cb:d2:3a:8a:b7:3c:10:2d:bd:99:59:25:9d:b9:25:
cd:8c:e1:99:e9:bd:4f:0a:c6:ed:d3:46:6d:de:12:1e:36:f8:
f0:6c:9e:35:08:54:a7:4a:18:70:a4:c9:70:2c:e0:83:8f:23:
a9:31:32:b1:8e:fa:10:99:1c:e6:8d:f3:c8:6f:6c:82:fc:a4:
30:4f:d5:28:80:4e:e6:c2:83:81:fc:a8:b6:1d:6c:76:bf:d2:
bf:5f:13:de:67:86:83:a9:15:67:22:d5:e9:56:83:fe:5b:db:
57:64:58:ff:1d:bc:f3:6a:79:fc:ec:a2:5f:01:ad:ae:91:5f:
c1:91:96:57:c5:0d:33:ba:d6:11:b2:d3:49:ff:c6:51:1c:52:
1d:3e:a6:90:ce:6f:c8:ea:57:13:38:e8:9e:52:19:82:af:b7:
ca:c1:55:35:52:3e:2d:2f:07:9a:a3:e0:8b:fd:74:54:9e:0c:
58:0f:42:6a:62:76:b8:e9:0c:56:61:2d:80:aa:95:92:25:fc:
33:37:f8:65:9d:45:ef:8e:04:d3:e3:20:58:53:42:d6:12:1a:
fa:0e:82:8e:34:cf:7b:a6:26:bc:e9:fb:47:27:b1:47:12:2c:
fa:3a:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:30 2026 by rpki-client