
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File: YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier: uESwy4FOcIAGD6pYXt2ekIyYYUX9mH5dECYkUs2OVCw=
Subject key identifier: 08:54:00:EE:1B:A9:1B:86:3D:7C:FC:F4:92:C2:82:BC:70:5F:58:B9
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer: /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number: 45
Signing time: Mon 11 May 2026 08:35:28 +0000
Manifest this update: Mon 11 May 2026 08:35:27 +0000
Manifest next update: Mon 18 May 2026 08:35:27 +0000
Files and hashes: 1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: AonT80kIufIR3tswgX9sbJKpxxPazZj3DXlKmjXLidY=)
2: 7C0561D8F10111F088AEA117476F56BC.roa (hash: bvjE5gKi0dnMwElXsvOJv3B2jZW9VC7vW+lIUb5fRcU=)
3: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: oXPncN+3aYpFsSF2Bg4m0rRfBQEaHOJ4BwB2L4dJwpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Validity
Not Before: May 11 08:35:27 2026 GMT
Not After : May 18 08:35:27 2026 GMT
Subject: CN=6a0194d0-c9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:60:4d:59:59:d1:de:2e:fc:f1:bd:a5:80:
8f:f6:48:77:17:48:3b:c1:e4:f8:88:2a:e2:51:13:
ff:28:5d:ef:19:9b:ed:08:8b:0a:49:3f:de:4b:38:
bf:2e:cf:36:2c:0d:10:92:64:71:8f:bb:d5:15:5a:
e8:8d:a9:6f:c4:09:66:a3:50:96:1e:87:1e:69:01:
b2:96:86:4e:ae:60:44:a5:d2:9d:64:90:c4:96:ba:
cd:ed:8d:98:42:2d:a2:26:34:df:77:08:a7:ef:4a:
d9:bb:57:b4:88:ca:f8:32:ac:38:9c:37:08:ab:e5:
db:9e:fe:1f:ab:aa:0c:5b:02:f2:7d:70:ff:1a:d1:
d4:d1:88:47:95:31:6e:a4:07:8c:00:9d:0b:b5:b9:
b8:5a:9e:80:c4:a9:f7:dc:4e:54:72:29:36:6e:e9:
53:d5:61:95:41:7d:37:20:58:0b:36:84:ac:ff:49:
e1:a0:39:2e:a6:c5:67:6e:62:20:39:94:a3:fa:ba:
40:b6:44:7f:cf:d3:b6:00:e1:09:26:fb:e9:03:c8:
90:81:64:28:8a:3e:b9:1b:f9:0d:e3:59:d5:05:45:
2f:80:f7:0b:b8:ef:ff:9d:a4:4b:17:bd:a1:5e:01:
0a:98:9a:5d:00:fc:40:9a:b4:eb:c9:fe:ea:77:5e:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:00:EE:1B:A9:1B:86:3D:7C:FC:F4:92:C2:82:BC:70:5F:58:B9
X509v3 Authority Key Identifier:
keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:aa:1f:75:1f:9d:33:9c:26:d5:53:87:49:8c:06:61:24:5c:
48:50:95:77:9e:43:1d:04:b3:54:96:82:34:02:2a:7c:ed:30:
1d:ae:83:99:b4:2a:e6:36:de:c8:47:db:c5:c5:a2:7f:15:7b:
b8:c1:72:18:64:c4:8f:b6:7c:4a:b9:c2:15:f6:98:56:b8:85:
ff:26:dc:8f:ac:8a:e2:2b:55:71:79:8d:78:f4:35:d0:c8:70:
60:f9:b9:1f:9f:99:eb:d2:59:da:89:65:75:f9:48:f8:d4:f9:
8e:96:57:40:fe:9e:f0:14:bb:56:86:97:ae:c1:c1:da:fd:4e:
7c:8f:37:b1:fe:d1:2a:31:bb:4b:af:ab:b3:0c:4a:88:8d:f0:
28:38:05:25:33:61:99:75:9c:6a:f3:f7:9b:30:6a:fb:c7:32:
41:01:ba:43:b8:4e:ae:75:32:a7:b3:60:9c:30:e5:30:3c:57:
7c:43:51:e7:a8:4a:fa:88:86:d2:2a:95:0c:44:3f:37:c1:f2:
af:f8:3e:b1:c2:93:9d:2e:82:ad:2a:9b:3c:38:c8:67:50:bf:
19:75:0a:6d:35:9a:34:17:1b:69:00:87:21:38:97:df:e7:7e:
ba:99:5e:84:20:85:9c:c6:96:db:9f:c6:f8:6b:dd:63:cf:f8:
fd:11:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:05 2026 by rpki-client