
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File: YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier: mM/CXzYYJJpKOBD49cIlokm08b1/EIdt1meFjIXiNwQ=
Subject key identifier: C6:F5:0B:33:F8:E0:20:FB:3D:A0:F8:3A:A5:A1:F5:6E:5A:DE:A5:CA
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer: /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number: 36
Signing time: Wed 15 Apr 2026 08:09:16 +0000
Manifest this update: Wed 15 Apr 2026 08:09:15 +0000
Manifest next update: Wed 22 Apr 2026 08:09:15 +0000
Files and hashes: 1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: kLUTUH38AEePTc0TlPOv/IvW/uUfB8RZ7hDnAK4inBQ=)
2: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: B9wwelihVNbWqG3EWwGK+ZW8jF7M6pX43MoH5Y0lk+Y=)
3: 7C0561D8F10111F088AEA117476F56BC.roa (hash: tZCMHU0FsD0B7efnDx5vqTfypD0ywjof7SVcOsAh5iE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Validity
Not Before: Apr 15 08:09:15 2026 GMT
Not After : Apr 22 08:09:15 2026 GMT
Subject: CN=69df47ab-180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:95:78:6f:a2:71:35:df:1d:b7:ac:b4:22:
6d:3d:96:cd:68:12:57:c8:58:2f:2c:f1:94:a4:c4:
73:0d:4e:78:15:40:ca:47:79:8a:3b:11:3f:d6:8d:
fb:b9:09:13:10:79:02:0f:31:6b:7e:88:23:23:da:
29:4c:35:17:b0:d5:87:0e:8a:f2:15:8b:54:98:a7:
a5:f8:58:a9:52:73:71:82:01:ec:d6:18:7b:52:34:
aa:7f:6c:c6:0b:ed:6f:f2:1c:42:63:38:2b:b8:3d:
7e:88:0b:f5:6d:75:60:54:5f:12:5f:59:77:0f:a6:
3d:19:e1:ec:01:ed:be:22:1b:e9:43:76:7b:d7:17:
40:44:13:a0:46:1d:db:4f:9c:90:cd:1d:32:12:f5:
8e:84:a7:5a:1e:1e:83:20:24:80:36:1a:e8:3f:b3:
d1:2e:c5:1b:73:7a:9a:76:f5:70:aa:0e:af:eb:ba:
46:91:14:54:32:17:cc:91:71:2f:c9:d4:33:73:8c:
91:11:ff:f6:74:52:4c:42:9c:ab:56:b2:60:98:d2:
c0:a6:df:9e:91:15:b8:32:21:50:c7:1d:7b:b1:8d:
48:89:cb:68:14:a1:82:9c:9d:7c:54:84:a4:6c:3f:
2c:74:1e:89:c3:ab:1b:cb:b1:c0:3d:8a:ef:44:f0:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:0B:33:F8:E0:20:FB:3D:A0:F8:3A:A5:A1:F5:6E:5A:DE:A5:CA
X509v3 Authority Key Identifier:
keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:21:ef:14:cd:94:c3:b4:d9:ca:32:ce:cc:7d:12:52:b9:6b:
15:a9:1a:46:86:76:60:c6:17:68:1a:33:bb:bd:c7:95:77:ce:
00:04:e8:6c:3c:fd:f9:17:7d:0a:dc:7b:95:5e:ae:5f:ab:70:
ba:f5:5f:d0:98:d9:fa:28:81:f5:dd:5a:d5:97:c8:0f:95:9a:
ea:19:30:65:24:bf:71:f3:55:60:fc:cf:05:d6:3a:f9:2e:99:
53:6c:59:da:a8:85:59:fa:e4:7e:e2:63:78:a8:4f:a0:fd:8a:
88:16:21:90:6a:cc:d6:da:ce:f8:b9:4c:ef:f1:cb:00:f0:7e:
97:1d:8c:8a:1c:22:8a:e6:2e:6c:47:30:6a:0c:30:13:f9:4f:
b5:93:4d:56:ac:ca:1a:51:20:79:64:9f:e1:da:ae:b8:80:0b:
b3:1e:1d:dd:0f:4a:8f:b2:4c:2b:7b:bd:22:43:8d:75:df:f9:
2f:0e:17:57:bd:d4:da:80:e4:e0:d9:2a:17:40:b4:5e:52:7e:
2b:50:8b:00:53:03:24:be:0d:5e:c4:f1:d7:04:41:cf:f8:0a:
35:b2:47:5a:cf:4c:89:c1:56:29:63:98:fc:8a:28:b9:1d:dd:
17:da:ec:4b:b9:2b:03:ae:50:fb:7a:ea:aa:5c:8e:fc:cf:87:
b5:7d:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:55 2026 by rpki-client