
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier: Y20lcZIzkQkWib9bvkYEMMZH+stG/DLdlQO8p0ku78k=
Subject key identifier: D4:F7:E7:2B:64:7E:C1:E2:43:4E:7C:68:06:3F:F3:A6:3B:1C:EE:B0
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number: 0871
Signing time: Wed 22 Jul 2026 21:18:42 +0000
Manifest this update: Wed 22 Jul 2026 21:18:41 +0000
Manifest next update: Wed 29 Jul 2026 21:18:41 +0000
Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: aOX3iHi8cNZrsYjnGNeJd/yXjxpUkj7ieiAOU0f3Kq8=)
2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
3: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: Jul 22 21:18:41 2026 GMT
Not After : Jul 29 21:18:41 2026 GMT
Subject: CN=6a6133b2-bb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:11:b9:45:26:17:41:f7:14:ce:b5:4d:c3:
6f:de:b4:8b:df:7b:db:9e:fb:3a:62:8b:a5:53:39:
24:e5:b0:d8:9c:ea:ea:f2:a1:fe:09:c7:7e:2b:0b:
a1:0a:9c:2f:0f:bb:ef:79:b3:a4:75:75:57:3f:57:
57:2c:e4:80:cf:8f:4f:a7:5b:73:30:cb:12:21:78:
d6:d9:e0:77:ff:f4:36:55:2f:c3:19:c6:29:ee:ec:
74:da:95:cc:55:30:16:b2:87:ac:48:43:99:83:f1:
e1:b8:d9:75:b9:39:0f:87:02:fc:3c:5d:3e:e0:9a:
c5:89:ea:2b:93:14:6a:81:dd:54:13:44:1d:49:93:
5e:03:55:05:c3:7b:ab:e8:66:79:9e:a2:5e:48:e6:
32:0d:a5:4a:1b:b6:a7:81:a8:8b:74:0a:81:aa:cd:
e9:cb:85:7a:0b:19:45:f2:2a:1a:4e:de:6c:56:b4:
00:47:0d:46:c7:05:fc:aa:8c:ec:9b:4e:81:3f:ee:
b1:36:ae:1e:66:96:26:78:35:6d:a2:0e:bc:b0:99:
b8:f4:6b:6f:42:7c:2b:46:80:8e:c4:33:44:eb:39:
99:c6:3c:76:5d:44:4f:28:6e:1d:c8:e1:32:b5:e5:
8d:aa:bb:a9:c5:f9:e7:70:14:6c:5d:92:07:c6:2c:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:E7:2B:64:7E:C1:E2:43:4E:7C:68:06:3F:F3:A6:3B:1C:EE:B0
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:05:5c:cf:d3:6a:97:99:52:55:23:b2:ae:8c:02:ff:5e:6a:
19:b5:d4:71:a7:2b:eb:bc:cb:03:e5:ac:21:22:c0:45:9f:eb:
a6:ac:9f:c0:42:99:9f:34:14:7f:11:84:65:44:24:4d:45:5d:
92:0c:f2:a1:aa:d4:3b:1a:43:05:3c:74:61:5f:2a:7f:e3:33:
2e:30:88:72:e1:23:b4:c1:d4:48:14:42:fa:ea:e5:f6:9d:a8:
91:67:32:84:4a:3a:eb:08:b3:bc:4a:ee:28:3a:69:86:0a:d2:
33:cc:32:d9:cc:58:e1:b7:c8:85:f0:46:47:56:a9:60:0a:28:
b2:93:cc:07:7d:5e:2c:a8:b8:85:c6:6c:64:bc:0c:ab:f6:c0:
10:6d:b5:d7:75:9b:9b:79:36:bb:cf:4d:ec:83:59:78:93:f9:
7b:9a:d7:06:51:0e:c6:84:fb:d9:24:4c:aa:a7:b3:90:2b:81:
a5:1e:81:4a:a9:66:92:36:4b:6e:ca:1e:e6:4f:14:42:f8:72:
b7:41:dd:9b:2d:b2:31:22:95:70:da:09:a2:33:19:9a:c3:53:
28:c8:b3:46:32:9c:0b:7a:a7:a3:42:9d:95:78:90:4e:e9:ce:
d3:b0:5f:97:8a:4e:9b:51:3c:15:9c:55:99:f3:8b:86:7d:7b:
ea:40:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:09 2026 by rpki-client