
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier: VOTWw+W5ymoqCxvCXeN/FIFvBOwR1YlW5bFhC+DQfKI=
Subject key identifier: E1:75:56:8F:49:86:81:7F:83:02:91:3E:F2:5E:29:84:F7:1B:A3:0E
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial: 066A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number: 0661
Signing time: Tue 12 May 2026 22:44:03 +0000
Manifest this update: Tue 12 May 2026 22:44:02 +0000
Manifest next update: Tue 19 May 2026 22:44:02 +0000
Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: xERoQ6H70m7mv1EJ/63pKEOvwA9qz/w+c29eujVv5Xw=)
2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Validity
Not Before: May 12 22:44:02 2026 GMT
Not After : May 19 22:44:02 2026 GMT
Subject: CN=6a03ad33-facc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:11:34:35:2d:59:c3:43:5d:7c:1f:cc:f0:
d0:eb:8b:5b:e0:23:6b:79:37:c7:a7:c5:52:d5:d4:
6f:01:0b:a9:b8:77:a3:81:08:31:f8:6b:f3:3c:f5:
27:3c:b7:18:98:12:8b:66:13:ab:a4:a0:50:e4:25:
ed:12:69:18:9c:d4:cc:94:00:97:13:62:c4:84:9d:
00:b0:ad:e7:6c:a8:d2:23:48:3e:e6:2b:12:32:a3:
e9:a1:a8:e2:b8:46:3e:a0:3d:16:56:15:74:8c:10:
32:28:d1:fa:b1:9d:96:a8:2e:a9:06:67:d1:60:00:
82:4e:23:53:b4:53:9f:50:df:47:88:1d:36:46:d3:
dd:37:44:d8:8c:35:bc:fb:87:b6:d7:4e:b9:d7:2d:
77:4d:2d:85:fe:4a:5e:0f:eb:f0:94:a3:d3:2e:7e:
b7:ce:2b:56:8d:67:4f:7e:99:60:f3:2f:4c:11:25:
df:b5:5d:cb:2b:21:06:1e:58:0f:5d:85:b5:f1:51:
52:27:5d:0d:02:c8:4a:3b:a7:af:28:a2:6b:a7:05:
a7:68:5b:67:fc:af:01:1f:24:08:cb:ba:c7:7c:ff:
b0:01:da:99:4c:03:c9:90:21:21:2e:a4:d0:56:28:
5c:e0:3a:7c:73:db:36:0f:24:b1:72:5e:5a:e2:6c:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:75:56:8F:49:86:81:7F:83:02:91:3E:F2:5E:29:84:F7:1B:A3:0E
X509v3 Authority Key Identifier:
keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9e:15:db:dd:9e:0a:36:22:2c:de:89:df:37:18:b0:78:4e:
4f:a2:fa:3b:6c:ca:7a:f9:10:3f:0c:41:d3:63:56:a2:3f:00:
83:1f:d1:53:96:5f:20:dd:49:26:77:86:28:bc:75:d1:12:4b:
b3:96:89:39:ea:54:92:35:36:76:8f:0f:e4:2d:9c:fb:aa:7d:
4b:0f:36:82:91:c0:68:4f:07:4d:92:c6:57:f3:11:54:cd:b4:
4a:e8:a3:4b:20:30:47:1a:33:68:f8:84:d1:4a:f3:1e:20:ad:
46:ea:61:fe:99:e7:a8:ed:ef:47:0b:76:f1:ff:b7:10:d7:ec:
d8:13:5f:43:0d:32:ac:65:c0:ef:ff:15:2f:81:08:64:ce:57:
c4:ee:c2:1a:a1:08:a7:36:5f:0b:3c:44:e7:f3:f6:7e:f6:97:
07:72:48:8c:e6:88:50:03:cd:cc:4c:93:de:b1:73:54:0f:6f:
68:34:aa:50:8d:c2:44:ec:e0:8b:5d:72:92:34:0e:cc:56:cf:
de:79:97:85:92:95:ba:e2:b4:e9:ae:ac:78:84:2c:c5:6f:b2:
bc:a0:c3:21:b1:64:98:0e:cf:8f:7c:36:0a:27:78:4d:cb:ba:
1a:84:06:c4:3c:44:bb:11:98:9d:25:10:e2:74:6b:ed:a4:8e:
3c:8e:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:19 2026 by rpki-client