
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json)
Hash identifier: eg1/cfRIpPAZe+AEbbkepY2VZaHCw/vfZDAirBsive8=
Subject key identifier: 08:79:92:20:C6:95:7B:B5:C8:A0:7E:64:E2:0D:8D:C0:46:41:D9:86
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
Manifest number: 014E
Signing time: Fri 09 Oct 2026 05:59:35 +0000
Manifest this update: Fri 09 Oct 2026 05:59:34 +0000
Manifest next update: Fri 16 Oct 2026 05:59:34 +0000
Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: XhFlJmiInKwOjgriV3E1l70ztzb/bF+cAj9tdF9f/Jw=)
2: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: yNjcbXSQe954tG4iPQoh2HGC3/zMHGuxKNsySG8+1DI=)
3: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: XFH0Q1KpeOYZLCrrHNLmbgTNMLaKVPfV4xztcVnCyR8=)
4: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: Otxavzn9wqai7bz3j2wOAOhJHM7zPHSQjLLYM4IbP1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Validity
Not Before: Oct 9 05:59:34 2026 GMT
Not After : Oct 16 05:59:34 2026 GMT
Subject: CN=6ac882c7-f90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:be:ad:d5:b8:a3:86:77:43:6c:ea:13:f5:
9b:27:8e:8e:e9:1f:87:9c:f2:06:c7:64:1c:50:99:
70:10:65:cb:c0:58:58:d8:12:21:f6:3b:70:47:c0:
d7:0f:e5:4e:77:bb:eb:17:36:5a:dd:8e:92:60:f2:
22:ef:51:c0:86:00:eb:46:66:b5:08:8e:f0:f6:4b:
59:b3:8c:0f:ef:b2:e9:11:03:18:a0:ad:e9:84:80:
9d:b8:87:c0:12:a7:e8:7c:bc:c0:b4:77:dd:b6:a3:
1c:94:f4:f6:26:d1:f8:43:d0:97:31:d2:3d:38:87:
e4:4a:71:be:3b:d2:5b:e3:3d:80:4a:f2:87:2a:c6:
18:73:29:e8:b3:16:58:b8:1c:db:9a:5e:91:8c:2b:
42:6a:a4:31:88:6e:75:86:33:55:55:0c:f1:66:af:
60:f7:10:91:00:63:8b:e3:1c:d8:8b:f8:bb:19:44:
a8:18:e9:0c:db:ff:7e:43:f8:91:f7:86:c2:55:22:
d6:a9:66:3c:2e:ad:48:66:7f:4b:d2:2b:e9:28:e8:
bd:eb:1b:d5:e1:ab:e5:04:f7:87:db:88:e5:8f:7e:
59:1b:59:59:44:25:ee:30:e1:4c:a8:46:63:7c:58:
a4:28:a3:0e:05:4a:7f:93:a6:0a:12:4f:37:0c:dd:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:92:20:C6:95:7B:B5:C8:A0:7E:64:E2:0D:8D:C0:46:41:D9:86
X509v3 Authority Key Identifier:
keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:3c:08:98:1e:08:50:5a:64:8c:5b:56:69:59:8f:0f:c7:
25:63:17:32:c3:73:95:71:b8:25:62:db:b7:fe:d6:9b:c1:a6:
98:83:2e:2b:7b:75:11:59:18:cf:98:4e:73:5f:d1:8d:de:2c:
53:b6:d4:28:19:51:ad:60:c2:2e:24:52:4b:83:f4:ce:77:4c:
66:40:2d:b4:99:0f:fa:72:ef:6e:dd:d1:aa:a8:c3:07:e1:35:
e7:01:96:5a:b5:a7:18:46:ea:9d:ae:7a:9b:7c:54:93:53:e0:
2e:70:0f:46:f4:3e:0f:4b:69:be:60:12:d3:68:33:09:ba:52:
1e:7f:fa:80:bd:6f:75:c4:23:0f:3d:e6:8e:27:1a:9b:fe:80:
75:51:51:37:45:19:c3:65:ad:15:8f:82:34:ac:9f:c9:32:80:
3b:c0:75:cb:0e:61:c6:7f:9d:f5:b4:d6:5b:1f:b3:bc:7b:78:
50:f5:60:7a:4b:43:f7:5a:7f:e1:97:68:49:cc:8f:70:b3:dc:
5d:0a:5b:ef:cb:7f:54:23:30:3a:83:7f:14:75:a2:f6:b2:b1:
63:dc:d9:4b:36:8e:40:36:6f:b1:ac:27:45:c5:f3:65:a9:c7:
13:3c:31:e0:d9:08:1b:5f:bc:68:52:1b:dc:d1:d2:75:34:82:
27:2c:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:24 2026 by rpki-client