
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier: F/GEFHDJJaVUNMEV4g+JCJxNbKGGS+t2G5lCjZ4m3CI=
Subject key identifier: 65:79:88:F1:FC:18:AC:CE:C5:F1:3E:6B:C0:64:C8:17:BF:8E:86:0F
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 086B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number: 085D
Signing time: Fri 12 Jun 2026 20:52:28 +0000
Manifest this update: Fri 12 Jun 2026 20:52:28 +0000
Manifest next update: Fri 19 Jun 2026 20:52:28 +0000
Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: edeSN604YKFvNBAJ1tSd30AfxzOyN5ntJm+g36nH1Rg=)
2: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
3: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: Jun 12 20:52:28 2026 GMT
Not After : Jun 19 20:52:28 2026 GMT
Subject: CN=6a2c718c-907d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:56:42:95:a6:4b:a7:8e:ea:09:69:68:61:
d8:85:cc:4f:a4:66:d1:d3:b6:f3:1d:ba:de:27:42:
76:d3:0f:14:66:40:6a:47:43:b9:61:8e:1e:ef:c1:
1b:9f:99:87:fa:79:30:8d:06:f2:8c:c1:90:3d:87:
1b:4e:63:81:a3:6e:8e:52:0e:4f:da:ab:51:5c:1a:
58:8a:77:61:87:10:8d:2e:81:5f:27:be:e0:45:3c:
0a:f6:e9:83:95:55:b5:f3:fc:03:03:85:35:5e:08:
b0:2f:9e:2f:a4:50:ce:a3:ac:0e:be:f0:15:86:6e:
ad:c4:88:a8:c0:be:e7:01:0c:31:bf:b1:a2:f8:88:
d2:d3:24:1a:43:a3:13:29:65:95:81:80:6d:12:fc:
c1:e1:38:3d:0a:49:1d:e5:d3:24:e3:2b:ae:9f:b2:
98:f7:1f:c3:70:59:76:39:be:3f:82:fb:5d:dd:5b:
c2:31:8c:01:5a:ed:6b:66:11:0a:bc:dd:5a:02:8c:
23:47:9a:57:46:fa:d4:c0:e7:3d:21:28:30:fc:b1:
c5:7c:54:57:c2:e3:ac:8b:77:33:7c:8f:24:0e:95:
90:40:ee:77:4b:a0:dc:53:fd:6b:cb:41:fe:5e:6a:
55:2f:de:c7:b3:af:e1:6a:b9:c5:e9:4b:2e:e1:1a:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:88:F1:FC:18:AC:CE:C5:F1:3E:6B:C0:64:C8:17:BF:8E:86:0F
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:e6:0d:6c:d4:68:00:66:03:76:20:51:7e:09:37:31:4e:6d:
a4:ff:75:df:ce:54:b4:c1:6f:d6:2e:4d:39:16:4d:16:19:c1:
9f:b0:34:6c:5c:49:24:f5:e5:a3:b2:50:84:21:2a:ba:54:7a:
62:91:32:c3:a0:24:4e:11:d1:ce:34:39:ee:df:03:75:11:cd:
88:c3:c7:ff:e6:c3:ba:a2:0c:43:82:9a:4d:3f:28:a3:81:ef:
c7:83:c4:b7:ef:4d:b0:6c:95:fa:a3:0b:66:18:dd:ae:7d:e9:
1e:9f:eb:5e:06:11:3c:6e:09:86:de:7d:aa:61:7f:63:f6:fe:
75:fc:f0:df:7b:e1:91:81:b3:63:ce:da:94:e8:87:2b:08:1c:
bb:3e:c9:de:8d:bc:75:d7:10:3e:aa:7d:05:85:79:1b:2c:43:
aa:8a:e9:a4:71:db:2b:19:a3:d6:37:6b:32:82:ad:e9:29:8c:
77:ea:fc:b3:b2:70:85:1a:c9:69:96:95:83:a2:5e:88:17:2d:
c3:f6:27:cd:a2:59:45:e1:48:84:07:83:35:5b:ba:44:22:29:
b0:3f:46:ca:d8:84:94:04:25:23:39:60:57:08:6a:fe:2e:e5:
e6:a3:ff:24:b3:d4:0b:b8:57:ea:38:d4:5e:f4:73:85:52:4e:
3e:ec:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:22:21 2026 by rpki-client