
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier: d6dge6h4tZMAn1HMsDvp/Q6ExsXRplT9SdnY72YjY3c=
Subject key identifier: F7:70:95:E2:06:00:C7:28:61:4E:39:D1:C4:4E:27:7F:A6:68:40:F4
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number: 97
Signing time: Thu 23 Jul 2026 08:54:25 +0000
Manifest this update: Thu 23 Jul 2026 08:54:25 +0000
Manifest next update: Thu 30 Jul 2026 08:54:25 +0000
Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: twZFmRZdXut8obE9Tln28fxz3KHMzJZ1mixiLfq1K/A=)
2: 9D1F5AC82F1211F1B693ACC09B833773.roa (hash: p36Ed7xsZwcv9rGoTKmCe4vZ8WUDfq/0PpZBbk95ipk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Validity
Not Before: Jul 23 08:54:25 2026 GMT
Not After : Jul 30 08:54:25 2026 GMT
Subject: CN=6a61d6c1-dc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:1b:ee:45:4d:84:1b:72:68:8d:0e:8b:9a:
de:7e:15:20:d1:6c:25:77:d5:e2:fc:2e:54:64:6e:
b8:73:03:c7:0f:b3:3f:38:cd:79:ff:f8:32:a1:1b:
ea:40:f1:19:39:6d:43:3d:7c:fe:ce:3a:48:ea:f7:
66:41:4e:b3:d3:39:ab:39:68:2f:e2:c4:d2:c5:c8:
b6:86:7f:5e:4f:37:19:74:7b:81:67:43:13:2e:ee:
d7:0f:bd:c5:22:26:8f:72:01:1f:23:78:26:dd:84:
8c:8d:74:ee:12:8f:b6:fb:0a:c5:8a:ca:96:39:bf:
38:dd:87:70:cd:ff:d2:b9:e7:25:5a:af:44:fa:1a:
ee:b3:e0:e8:7a:99:94:e6:af:9f:db:f6:96:f1:23:
60:d2:ab:16:1a:6f:f9:23:c3:cf:ce:4d:ad:af:6c:
da:98:47:ef:a3:e5:0f:78:60:19:02:7b:87:57:7c:
0b:aa:2f:fd:a2:63:9c:c3:65:d3:69:a5:1a:8d:22:
50:5d:53:b5:b7:8b:4f:a7:b3:1a:43:2f:d6:dd:ae:
c4:df:03:88:e0:63:df:0f:0a:d1:22:e2:97:04:c3:
86:ea:20:6c:2b:11:c7:a6:db:73:a9:2c:8f:0c:eb:
59:23:d4:1d:72:4a:24:e2:9e:39:db:78:d4:aa:a0:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:95:E2:06:00:C7:28:61:4E:39:D1:C4:4E:27:7F:A6:68:40:F4
X509v3 Authority Key Identifier:
keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:66:89:e9:cc:96:d1:c5:e9:e7:02:b7:c9:80:be:47:18:82:
c7:d9:c4:2a:4c:5e:9e:f6:24:5f:29:8d:d2:ae:3c:ad:11:2a:
46:73:8e:71:c2:cf:97:ff:f0:ac:5c:f3:ca:f6:a7:39:cb:b6:
00:a6:65:22:00:bb:96:ad:b6:e4:af:3d:29:e1:8c:8a:35:72:
0e:6d:9e:9b:2d:22:3f:9a:22:22:96:79:56:76:42:61:63:67:
03:6d:6d:2f:12:07:d8:a3:06:31:4c:97:6a:43:a4:fb:9a:ed:
c1:b1:d8:a2:59:01:1d:8f:b4:b0:ed:55:be:47:72:df:c8:39:
27:33:b3:92:c3:32:45:26:60:f1:86:32:e4:5c:23:00:58:5c:
50:52:d4:8c:14:9b:e9:b4:9e:d6:ee:5c:83:1e:25:27:4e:6c:
6a:6e:8a:d4:f5:2e:44:8d:7a:a5:84:4a:6c:12:af:30:fc:a4:
65:73:a9:16:b6:e0:3b:c1:21:ce:0c:0e:3e:fa:fe:e6:26:83:
3f:3b:7b:b7:e8:7e:90:ed:54:29:e7:b8:15:c3:83:c0:85:18:
c2:8e:29:a2:41:b6:46:c6:7b:5d:20:19:f4:48:84:20:58:0d:
82:bd:3f:a2:f2:5a:48:65:c6:9b:62:78:8d:7e:41:b9:4c:93:
36:8e:f1:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDQTgxMTAvBgNVBAUTKDMxODhENDFEMEMwNkVGQTJDOTZBODcwNzM1NjlFOEUx
MDM0NEUyQ0QwHhcNMjYwNzIzMDg1NDI1WhcNMjYwNzMwMDg1NDI1WjAYMRYwFAYD
VQQDEw02YTYxZDZjMS1kYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Mob7kVNhBtyaI0Oi5refhUg0Wwld9Xi/C5UZG64cwPHD7M/OM15//gyoRvq
QPEZOW1DPXz+zjpI6vdmQU6z0zmrOWgv4sTSxci2hn9eTzcZdHuBZ0MTLu7XD73F
IiaPcgEfI3gm3YSMjXTuEo+2+wrFisqWOb843Ydwzf/SueclWq9E+hrus+DoepmU
5q+f2/aW8SNg0qsWGm/5I8PPzk2tr2zamEfvo+UPeGAZAnuHV3wLqi/9omOcw2XT
aaUajSJQXVO1t4tPp7MaQy/W3a7E3wOI4GPfDwrRIuKXBMOG6iBsKxHHpttzqSyP
DOtZI9Qdckok4p4523jUqqDpCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdwleIG
AMcoYU450cROJ3+maED0MB8GA1UdIwQYMBaAFDGI1B0MBu+iyWqHBzVp6OEDROLN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC8yRDk4Q0M1QUM1
MDYxMUYwOEM2QkEzMkJDNEY5QUUwMi9NWWpVSFF3Rzc2TEphb2NITldubzRRTkU0
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0NBOC8yRDk4Q0M1QUM1MDYxMUYwOEM2QkEzMkJDNEY5QUUwMi9NWWpVSFF3Rzc2
TEphb2NITldubzRRTkU0czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAWaJ6cyW0cXp5wK3yYC+RxiCx9nEKkxenvYkXymN0q48rREqRnOOccLPl//w
rFzzyvanOcu2AKZlIgC7lq225K89KeGMijVyDm2emy0iP5oiIpZ5VnZCYWNnA21t
LxIH2KMGMUyXakOk+5rtwbHYolkBHY+0sO1Vvkdy38g5JzOzksMyRSZg8YYy5Fwj
AFhcUFLUjBSb6bSe1u5cgx4lJ05sam6K1PUuRI16pYRKbBKvMPykZXOpFrbgO8Eh
zgwOPvr+5iaDPzt7t+h+kO1UKee4FcODwIUYwo4pokG2RsZ7XSAZ9EiEIFgNgr0/
ovJaSGXGm2J4jX5BuUyTNo7xxQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:11 2026 by rpki-client