
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier: plHQud2k+ipw3gpGDnMKUC81tqYw1d2iFHJA34YuO6w=
Subject key identifier: C2:5D:94:86:99:BE:88:34:35:F6:99:48:55:3B:3E:2D:BB:EA:0F:59
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial: 06AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number: 06A6
Signing time: Tue 22 Sep 2026 22:08:46 +0000
Manifest this update: Tue 22 Sep 2026 22:08:45 +0000
Manifest next update: Tue 29 Sep 2026 22:08:45 +0000
Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: 2hKfVeJKFj52qJEfEa8DnP0GIbm9MzKqnmCWARU6Aao=)
2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1711 (0x6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Validity
Not Before: Sep 22 22:08:45 2026 GMT
Not After : Sep 29 22:08:45 2026 GMT
Subject: CN=6ab2fc6d-21b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:16:8a:2b:b0:f5:0e:22:4a:f2:ce:d5:fb:
3e:1f:8d:92:9b:a0:de:9f:3c:0a:87:01:0c:f8:d7:
cd:bc:18:8f:71:81:6e:f2:de:65:17:f0:55:47:f9:
a6:14:30:db:21:ac:e8:b7:6c:07:d4:ff:30:7e:99:
d0:1d:6e:dd:8d:48:81:c1:a0:72:ab:44:ef:e8:72:
bc:b4:af:77:68:64:9b:39:50:bd:f4:29:bf:3b:9b:
f9:2f:7f:87:86:a7:e7:7c:98:27:c6:65:bf:3c:6b:
8c:88:df:18:49:3c:9e:9d:bd:f9:ae:3e:3b:8a:ec:
34:13:b9:62:3c:c9:35:ed:85:1b:d2:76:ad:22:87:
04:8c:b4:21:e6:dd:28:4d:b4:a4:62:3b:a0:df:40:
86:60:96:4f:4d:b9:af:ad:c0:be:03:d9:04:79:79:
b9:6b:18:f5:3b:39:75:d3:d2:84:6e:a5:df:1e:64:
cb:09:f0:a3:d3:a3:22:c2:d5:97:77:1c:42:89:e1:
0a:19:91:c8:b8:48:2d:ba:5f:aa:00:64:7c:75:69:
2e:b0:2f:7c:37:77:e0:f3:73:82:1b:9a:0a:27:94:
1e:c8:0e:bc:01:0c:39:da:23:e1:9e:d1:4f:da:74:
2c:4f:28:e0:43:b9:15:b1:3d:22:01:f8:61:f4:c7:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5D:94:86:99:BE:88:34:35:F6:99:48:55:3B:3E:2D:BB:EA:0F:59
X509v3 Authority Key Identifier:
keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6d:82:9d:ac:a3:75:96:45:7f:5b:5d:8f:d6:65:92:54:9a:
75:d8:fd:1b:25:a5:c6:20:d8:be:03:51:4c:69:c3:34:6c:00:
f9:aa:e4:d6:e7:4c:d6:64:4a:87:76:2e:84:e6:0b:cc:6c:0a:
bf:ac:cc:8c:b4:ba:55:a9:d3:df:c2:1b:78:70:15:dc:47:cd:
06:f7:29:a6:5d:01:86:7c:56:85:80:b4:f8:94:0c:f7:fe:2b:
dc:32:63:b1:33:e3:c7:0c:d1:99:90:cb:8a:67:c3:7c:17:06:
c3:98:74:31:16:01:b8:46:68:c5:06:c2:16:e3:ca:9a:75:5c:
46:cb:2e:2f:78:1d:0d:da:65:4f:10:80:c2:38:ce:01:90:ef:
5f:6c:48:f4:7c:f5:b2:a4:d2:00:cb:c6:ab:4c:c2:5c:6a:35:
ab:70:1e:2e:06:b3:5c:86:cb:70:bf:73:fd:45:a1:97:f4:02:
e9:1c:ac:ee:f0:d5:21:8b:12:c0:c2:46:57:c4:d9:5d:0f:d8:
94:c6:a0:03:5a:46:aa:d3:42:fe:23:57:f1:06:59:49:20:58:
5b:6d:9f:e8:a1:27:4d:2a:37:02:da:c0:ff:86:bf:6c:e3:03:
3b:b4:45:78:fd:17:04:0c:69:2d:e2:6c:94:5c:9e:2a:65:74:
09:b4:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:35 2026 by rpki-client