
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json)
Hash identifier: nJNN2VyIWKMb+ZshnKapbATD3H5It5IENBkTgFLNVFY=
Subject key identifier: 2F:CB:30:C8:B8:4D:7D:D5:DD:15:C0:00:AD:FC:97:DE:8D:2B:F9:A4
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
Manifest number: 0110
Signing time: Sat 13 Jun 2026 06:07:28 +0000
Manifest this update: Sat 13 Jun 2026 06:07:28 +0000
Manifest next update: Sat 20 Jun 2026 06:07:28 +0000
Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: qohOZ/o1t5dfsBE67nSvPPoHNPfHyfzKMZrG/1bAa6M=)
2: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: wuMfV4Prav1vTN6DDOAaG6aXaeJ/i3o0GNDpEUWZL6g=)
3: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: TnUIMsTLLUWLq6RKFJvvlaICGc8yJRHnp3bZVmKD+K8=)
4: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: VHWzuR8NTDaBmGYmSm5ZS2QGGvm+Hb7NngfwNUpxxQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Validity
Not Before: Jun 13 06:07:28 2026 GMT
Not After : Jun 20 06:07:28 2026 GMT
Subject: CN=6a2cf3a0-a9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:61:33:66:dc:ef:11:74:3d:84:1d:c9:9c:
19:da:b7:fe:7a:bc:ff:6c:86:f9:0a:49:af:df:aa:
f8:cb:c0:71:ae:8f:81:03:09:2c:45:77:da:1c:84:
cf:3c:74:89:10:c6:28:8e:af:93:69:53:be:be:42:
aa:1e:a0:71:ba:15:b3:29:65:55:a0:f6:0d:e4:cf:
d4:58:a1:7c:bb:af:bc:5b:02:85:63:3d:e2:74:32:
8b:05:71:62:61:67:36:f7:cb:d4:fb:5f:e6:80:54:
ba:95:5c:40:24:f1:e9:31:51:3d:19:64:fc:61:be:
85:30:60:6d:ae:36:2d:f9:da:52:78:43:f6:9f:0c:
0d:97:ce:4b:99:cc:94:1f:67:22:41:36:c9:ef:08:
74:fb:a2:b6:f3:66:38:f7:a3:8e:4b:97:36:90:d4:
5b:36:76:f8:53:c4:70:8a:33:fe:d3:c5:3c:16:fc:
2a:8f:10:ba:2b:d1:1f:51:c2:f8:de:eb:13:5e:7c:
7c:18:25:3c:64:64:a2:65:de:ad:9b:d0:de:73:fe:
ce:20:d6:36:b9:28:81:e6:c4:c9:ab:8b:92:99:6e:
1e:e4:30:e8:6d:e9:11:3a:49:e2:32:77:c6:3f:28:
4b:63:00:a6:83:18:d0:99:2c:27:59:e2:95:bd:a6:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:30:C8:B8:4D:7D:D5:DD:15:C0:00:AD:FC:97:DE:8D:2B:F9:A4
X509v3 Authority Key Identifier:
keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:3f:00:98:b0:e3:ff:26:a3:92:ae:0e:b3:ef:4b:dd:c5:
9c:a7:cc:94:20:34:0e:52:b0:7f:08:e5:06:de:20:b1:02:c9:
29:5c:eb:c1:6f:6b:a9:f5:02:d0:5a:2e:93:ef:39:a3:f3:e7:
46:fd:37:1d:ca:3d:96:ff:e7:48:85:30:a4:12:ba:5a:36:26:
b8:29:fc:1d:d6:10:8a:bf:07:d1:de:78:66:da:47:c9:55:30:
65:19:29:3c:f1:68:23:92:14:3c:7e:3e:8f:ee:f6:7c:d0:c4:
48:d7:af:41:9f:37:74:4d:19:8c:92:c8:b1:8c:a9:c6:4b:b4:
34:b3:87:8a:e8:38:c3:5f:28:5f:83:a4:81:87:22:81:0d:95:
b9:aa:b0:4f:ac:f5:2a:4f:be:fe:4c:15:13:27:3c:13:78:b0:
36:f9:06:a3:29:c2:4f:04:50:3d:8b:23:fa:c2:41:ec:42:bb:
26:5c:45:38:76:a6:1b:3c:4b:02:b8:44:72:a5:ac:72:c6:1a:
d5:49:80:1a:13:6f:43:70:9f:ad:59:7e:15:a8:94:b7:52:c4:
be:6c:e7:10:e3:9a:d4:05:10:9d:f3:5f:4a:33:b1:5b:88:8c:
55:7b:75:43:fd:e4:ff:a0:1c:22:22:a0:dc:79:ab:1f:82:3f:
74:ce:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:51 2026 by rpki-client