
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json)
Hash identifier: fRhBal8Y6e2e/a73jyj2EzEiURa5f/rUPQkFrRlFHVg=
Subject key identifier: FD:4E:75:D0:ED:AE:61:00:6B:29:6B:B4:0F:AD:A3:1B:50:F9:F3:8C
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
Manifest number: E8
Signing time: Wed 25 Mar 2026 05:42:28 +0000
Manifest this update: Wed 25 Mar 2026 05:42:28 +0000
Manifest next update: Wed 01 Apr 2026 05:42:28 +0000
Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: qgzHfdVIXCffzZDTV7pM5VSq34DF1oWWoTNTHCddVFk=)
2: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: VHWzuR8NTDaBmGYmSm5ZS2QGGvm+Hb7NngfwNUpxxQc=)
3: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: TnUIMsTLLUWLq6RKFJvvlaICGc8yJRHnp3bZVmKD+K8=)
4: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: wuMfV4Prav1vTN6DDOAaG6aXaeJ/i3o0GNDpEUWZL6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Validity
Not Before: Mar 25 05:42:28 2026 GMT
Not After : Apr 1 05:42:28 2026 GMT
Subject: CN=69c375c4-7206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:ea:13:92:f0:cf:70:3d:85:ba:9e:09:ae:
65:67:77:97:77:fe:e7:b7:81:45:7e:6e:25:88:3a:
6b:90:44:1b:dc:c1:13:30:f1:52:68:66:47:d1:88:
02:a8:16:e1:fa:2f:eb:12:83:7e:6f:19:c4:ea:21:
4c:a4:87:44:38:05:db:c8:10:5d:6c:0e:b1:22:cf:
ea:f4:d7:da:40:41:53:74:6d:59:f3:ee:44:3d:5e:
30:62:7c:34:2b:04:7a:65:f1:d8:66:3a:5c:e9:07:
ae:f8:7c:48:70:dd:3f:1e:4c:86:f4:b6:c1:20:28:
32:cc:39:db:3b:e4:cc:f4:8b:92:a2:9c:ba:46:d0:
72:14:59:6a:c8:a4:ef:67:ae:24:96:ce:ad:23:48:
67:d4:08:61:c8:70:ce:f1:a9:2e:9a:1b:b1:c5:cb:
89:fa:52:3b:0a:90:58:e7:b5:05:a9:c8:c3:2d:45:
0c:32:c9:09:65:d5:ac:0e:f2:e5:0d:02:eb:a6:2a:
56:d8:9f:be:f4:27:be:ae:62:66:34:23:0c:1e:28:
9b:61:cf:63:4b:8f:3f:ff:cc:77:ab:b8:ab:2c:d3:
9f:91:ab:3d:f9:e9:a3:4a:be:0b:72:49:b9:8f:e8:
07:a3:71:9b:73:52:89:b4:45:a3:df:d4:ed:29:ef:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:75:D0:ED:AE:61:00:6B:29:6B:B4:0F:AD:A3:1B:50:F9:F3:8C
X509v3 Authority Key Identifier:
keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:89:5b:66:c3:97:2d:5d:48:f2:df:41:ca:ce:4a:f0:69:c8:
45:62:0c:92:31:67:a5:42:94:a0:3a:91:06:0b:28:fe:38:da:
70:e2:8a:2a:d3:68:61:17:21:ae:9b:8b:84:79:7c:14:4b:6f:
28:2b:a7:80:67:29:3a:27:46:69:79:10:3a:cf:75:ec:3a:52:
88:66:36:a8:f6:7c:41:83:12:12:30:60:44:ad:9d:c9:db:32:
16:6e:72:59:ed:3b:5c:be:ad:d7:48:de:f3:e2:34:3d:17:1d:
4c:80:5b:e6:6f:f4:39:da:af:69:45:3f:cf:c5:83:a3:1b:65:
3f:b1:f5:12:a0:5d:98:a0:f6:ad:24:7b:5c:18:96:39:fe:b8:
eb:ef:3a:32:1c:c8:6c:dd:7b:bc:8d:75:d9:aa:6d:23:b1:0a:
55:91:d5:e9:45:7a:df:82:fb:64:4e:73:6d:53:71:91:ff:60:
1c:8f:eb:c4:b3:e0:3a:67:98:0f:3b:ef:31:c9:f5:47:e1:6e:
4f:77:62:da:7a:24:d7:93:be:fb:04:25:eb:de:6f:de:49:f7:
52:f1:71:65:7f:7a:6c:5a:ee:8d:ae:fc:dc:50:56:94:28:27:
e9:73:ef:a6:f9:a6:28:f4:22:4d:fc:4c:73:4a:a8:07:4f:8d:
aa:2f:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:28 2026 by rpki-client