
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File: YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier: VAAqA2rHVXC897xlFwfy/EDFlz3O7XbF25Z0R49PYws=
Subject key identifier: F7:9F:FE:90:B1:BC:ED:6E:0F:B1:58:BF:DE:68:12:EE:15:D9:26:23
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer: /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number: 8C
Signing time: Tue 29 Sep 2026 08:08:30 +0000
Manifest this update: Tue 29 Sep 2026 08:08:30 +0000
Manifest next update: Tue 06 Oct 2026 08:08:30 +0000
Files and hashes: 1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: 3vFXvEOVHq34MirKPAyZSBzMfdUgkqLS6ai6HqrWdT4=)
2: 7C0561D8F10111F088AEA117476F56BC.roa (hash: bvjE5gKi0dnMwElXsvOJv3B2jZW9VC7vW+lIUb5fRcU=)
3: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: oXPncN+3aYpFsSF2Bg4m0rRfBQEaHOJ4BwB2L4dJwpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 08:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Validity
Not Before: Sep 29 08:08:30 2026 GMT
Not After : Oct 6 08:08:30 2026 GMT
Subject: CN=6abb71fe-012a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:e1:4f:f6:99:2b:12:36:b4:ab:48:ce:7d:
f7:a6:d6:aa:6c:25:c0:76:6e:aa:63:ed:ac:0d:20:
de:12:a3:b8:c2:fe:2b:81:f2:d2:60:5f:de:88:2a:
36:fa:3e:f3:8c:bf:74:fd:7c:57:42:24:cb:56:66:
3c:5d:51:b5:ae:57:1f:12:1e:78:3b:2c:d7:b1:5f:
14:0f:4c:6a:1e:c5:ea:c4:86:91:b8:27:c7:cd:99:
76:d7:f6:df:35:0a:c3:25:20:0e:b1:f7:ba:a1:ed:
9b:0f:ec:12:04:1a:53:27:e6:5b:04:b2:d6:96:a2:
fe:26:eb:74:58:eb:65:19:87:c8:2d:6a:85:1f:7a:
d1:bc:af:fd:51:cc:43:59:2f:03:33:ab:d9:f7:fc:
9a:32:97:3d:0f:8b:0c:4f:93:34:ce:42:a0:0a:8a:
4e:05:b0:11:df:72:71:8d:87:3e:62:54:03:3d:a8:
9e:ae:22:e6:fb:7d:ab:3b:c0:98:a4:75:f5:a1:6b:
03:f0:24:75:08:0d:6e:ab:91:fc:dc:97:91:8d:84:
6f:09:42:72:93:b0:0d:46:c7:f4:81:0f:e4:3f:30:
1d:de:44:04:4e:8b:08:cd:8e:3a:da:f1:eb:20:a2:
68:b3:55:75:e3:64:5a:3f:8d:5b:e7:bb:de:29:70:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:FE:90:B1:BC:ED:6E:0F:B1:58:BF:DE:68:12:EE:15:D9:26:23
X509v3 Authority Key Identifier:
keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d3:53:8b:a2:7a:82:86:ce:44:df:50:24:cc:83:16:49:78:
e5:c2:05:03:5d:44:4a:ff:88:90:f2:c4:1c:77:9c:53:f0:ab:
cd:fa:9f:f3:87:57:5a:a0:c4:c1:92:16:61:09:37:88:0e:b6:
dd:a1:2e:05:60:08:07:c3:d2:56:05:31:4f:38:d4:5c:2d:db:
d2:32:dc:e5:da:b2:08:d5:e4:24:ed:0a:1b:cd:e3:2e:4f:a4:
7c:db:ed:f6:c9:d5:a7:7c:c9:03:74:87:3a:4c:b9:72:b1:c9:
dd:e3:42:5c:25:cf:fa:cf:d0:02:b0:ea:1c:3f:1a:a8:01:62:
65:64:37:15:08:5f:5d:16:4b:70:dc:90:2e:e5:1e:f5:ea:c0:
88:01:32:bf:08:9b:ba:b8:e5:a2:3e:c0:62:b3:01:da:3c:60:
32:d5:e2:a3:38:a3:a3:70:d7:16:92:31:95:eb:e2:0f:8e:6b:
e0:30:87:92:19:d2:bc:6e:e1:cf:24:c8:29:13:cb:9f:f3:04:
2a:18:c7:e6:ed:82:6b:1f:f6:e1:22:df:dd:06:bf:4f:fc:02:
2b:57:19:d7:14:8d:85:e2:88:17:b3:fe:2b:c7:4a:9e:b0:78:
8a:21:e1:ed:58:c5:a3:c1:82:e2:ae:eb:01:88:58:9c:a8:ab:
bc:64:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:18:14 2026 by rpki-client