
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier: A54wj4Jphk8bXFDLXcBT6CQTboBJRmrjg+IDrpZQ/o8=
Subject key identifier: 77:13:D8:61:9E:9E:95:E8:0B:2B:E8:A9:82:B6:1E:99:4C:AA:77:D7
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 08A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number: 089B
Signing time: Mon 12 Oct 2026 20:50:27 +0000
Manifest this update: Mon 12 Oct 2026 20:50:27 +0000
Manifest next update: Mon 19 Oct 2026 20:50:27 +0000
Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: ZUfusRXbRX19YW+m6HBiVZjWEqszqSn10FR+jpQmC8U=)
2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
3: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 20:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217 (0x8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: Oct 12 20:50:27 2026 GMT
Not After : Oct 19 20:50:27 2026 GMT
Subject: CN=6acd4813-5a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:d8:72:7b:ca:12:b9:6e:60:ff:14:d7:06:
2e:fa:7a:b3:dd:70:9f:81:7f:c9:ea:f2:16:d9:d8:
4c:d7:da:11:61:d9:5c:3a:8f:13:de:b8:ab:3a:19:
95:15:36:e0:66:74:84:c9:72:13:a1:fc:e5:82:9f:
c1:a7:b7:92:9c:e0:a6:51:11:51:36:9e:c4:72:ff:
84:86:94:14:ad:bc:e1:14:3a:73:cb:ab:d9:c0:a2:
b4:3e:34:1e:d0:3f:7e:3c:a3:5e:e8:fd:78:c4:7f:
aa:a2:94:9c:fb:9a:ac:df:22:85:a0:e6:ae:cb:53:
f9:5f:4f:aa:9f:d5:2b:72:b4:55:ad:54:97:41:8b:
35:06:69:22:f8:46:b1:5e:c2:d6:d4:67:30:b9:cd:
e9:f4:31:89:2b:93:1c:8c:76:3d:6e:41:2a:44:11:
73:56:dc:bb:2e:a3:f5:65:2a:b3:ea:f5:1b:fa:03:
cc:13:d8:36:05:60:17:77:90:4a:27:bd:a7:b2:2f:
fe:3a:92:10:0f:e0:6f:35:9e:b6:75:00:05:0a:58:
78:b5:f6:db:14:1e:e7:25:29:b9:33:3e:ee:f0:3d:
a2:1d:ca:77:6e:bb:33:29:6d:9d:e3:0d:85:9d:06:
fd:55:70:38:cb:52:ea:63:6a:26:06:6a:25:61:5e:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:D8:61:9E:9E:95:E8:0B:2B:E8:A9:82:B6:1E:99:4C:AA:77:D7
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b0:68:5a:f5:bf:49:5e:8b:da:5d:90:dd:05:7c:41:f7:64:
cd:6e:c7:ad:53:78:f5:13:57:62:7e:c2:0c:93:0e:52:3b:bb:
2b:17:2b:d6:06:88:72:1e:7e:1c:2e:4a:28:e7:aa:f6:d4:de:
eb:32:97:f6:5b:1f:dc:29:74:a5:f1:f0:1e:2a:cc:72:1f:71:
6a:5e:c2:99:78:99:49:12:04:f9:f2:96:e1:56:e2:01:8a:0e:
22:60:ad:eb:96:09:51:cb:d1:33:b4:9e:b7:ce:ee:da:d7:da:
85:ef:0c:dc:c5:f8:a3:3e:ed:e5:b3:ba:62:f6:7a:40:a4:d8:
90:70:ee:72:1d:e4:18:98:55:21:08:f7:ad:f3:dd:73:d9:bc:
51:f8:40:66:dc:a7:9e:68:30:8c:34:86:4b:e5:1b:df:af:45:
fb:65:ab:1a:32:3c:1d:34:ec:e6:84:ef:cb:c1:5e:05:9b:d2:
91:e2:42:2f:ff:ca:c7:d9:c8:7c:67:00:45:3e:3b:11:51:eb:
65:c3:41:94:b5:31:09:1e:d5:ed:50:e2:4a:2a:23:3c:d5:d7:
d5:e6:85:79:76:e6:3e:27:13:fb:48:50:2e:c9:3b:0b:c8:04:
70:37:ba:4f:a4:32:b1:3f:7a:9a:46:7c:08:cd:89:ae:dd:65:
a1:14:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:54:27 2026 by rpki-client