
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier: KQT4mfIQy+0g3w//QlsDOmjDnj5l8hP6eozrW7IjSWc=
Subject key identifier: 08:65:3E:67:A3:CE:18:D7:67:D7:FD:41:53:34:EB:F2:1B:26:B6:AC
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number: 011E
Signing time: Thu 23 Jul 2026 07:34:09 +0000
Manifest this update: Thu 23 Jul 2026 07:34:08 +0000
Manifest next update: Thu 30 Jul 2026 07:34:08 +0000
Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: S6yjQrfExTszFBOFKPdRh7HiV3rbKSYnosnwnFVOFHk=)
2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: fhMnOOcqslyy9NxnX7zgTe3J3WzePSNlL2bH73cXkGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Validity
Not Before: Jul 23 07:34:08 2026 GMT
Not After : Jul 30 07:34:08 2026 GMT
Subject: CN=6a61c3f1-d1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:6b:51:a0:65:d5:83:09:82:c3:17:c2:11:
73:0f:45:b4:79:05:24:be:0d:7c:cb:53:4a:e6:88:
8f:e9:21:e5:df:16:e6:5c:0c:79:d0:1e:21:11:e2:
8b:06:b7:da:32:7a:52:dc:da:6e:5e:b5:f6:3b:2e:
e2:e8:ef:fb:e9:a3:f1:32:7c:4c:ce:f9:d0:9b:ff:
26:4b:11:5c:e4:5f:91:17:cf:96:df:d3:66:24:50:
54:53:7d:18:ac:bd:3b:cb:47:b3:51:42:4a:6d:68:
60:67:5d:39:0e:26:5b:f6:dd:06:e5:1f:a4:b9:26:
d4:61:b7:c7:3e:32:93:d3:8b:b2:69:9c:60:57:4e:
16:6f:6a:e9:5b:7c:15:ee:20:a6:26:2e:ae:0c:2e:
3e:4c:cc:ea:de:70:d2:5b:50:cc:b1:c0:b7:c9:c7:
d6:42:2f:32:b9:19:ef:9d:2f:f0:a2:a9:a7:24:6c:
6c:af:8c:11:23:fe:e6:5f:c2:cb:8f:d8:65:f1:1c:
59:56:6c:39:ac:5f:77:fa:25:f7:42:d9:19:26:d6:
bb:94:0f:b6:24:94:07:37:d9:34:e8:29:33:64:1a:
37:34:c5:4b:0a:18:09:89:c0:63:9a:27:d2:30:ae:
d2:fe:f4:09:cd:d6:50:6a:3e:a2:14:ad:11:1a:11:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:65:3E:67:A3:CE:18:D7:67:D7:FD:41:53:34:EB:F2:1B:26:B6:AC
X509v3 Authority Key Identifier:
keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3d:79:b5:1c:0e:2a:14:9f:c4:c9:25:57:e4:f9:80:f2:7a:
95:23:b6:21:c4:f1:09:74:6d:2e:f8:bd:69:be:b1:b6:db:1a:
56:a5:73:8a:61:c5:65:22:fc:f8:1f:29:0b:53:54:7c:12:90:
1a:3c:09:f4:34:1d:5b:a8:73:74:6a:40:50:95:b0:05:97:fd:
26:88:a7:fa:59:30:b2:62:58:13:90:f9:4d:35:89:31:7b:ca:
42:1d:dd:cf:63:91:aa:25:ac:b5:1a:b0:22:18:3f:6a:a4:5a:
aa:a4:b1:53:c4:ad:02:1c:86:39:57:ec:7d:9b:9f:80:7b:a1:
05:bf:12:73:76:77:a1:16:4a:95:7c:06:62:7f:b0:1c:74:1c:
5d:73:f5:8a:b2:32:a2:a9:83:93:5f:ef:c0:d7:95:76:30:a0:
08:a2:3b:1e:c7:7d:c6:f9:fb:74:5b:94:17:ed:9f:a8:7f:6a:
2b:e5:9e:99:c5:1f:41:44:7d:40:d1:c8:22:18:df:98:2d:77:
b8:de:62:a4:c5:e1:56:37:d5:01:26:a1:8f:24:fa:61:68:a2:
7c:14:22:ba:ac:44:a6:e8:a8:ed:4e:cf:22:91:b5:01:50:bc:
57:6f:1b:dd:56:b4:f0:d1:74:c5:1c:ab:4e:e6:56:d4:04:8a:
dd:9a:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:54 2026 by rpki-client