
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier: bEG6lkgAoY0fpw+r9476ME98699vx0Bl0v1AM70qOkk=
Subject key identifier: 6B:62:E6:91:41:7A:F7:ED:3B:65:16:91:66:6A:CE:F0:0B:F6:4B:52
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial: 0641
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number: 063A
Signing time: Sat 28 Feb 2026 23:17:09 +0000
Manifest this update: Sat 28 Feb 2026 23:17:09 +0000
Manifest next update: Sat 07 Mar 2026 23:17:09 +0000
Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: Ntp5IVxEC+drJ8AXdJVhLWZE0QikrRU9O8ta8flJsy0=)
2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: W1fkw/mYSuTpBkq23h73Gt2ZtwtQaM95I1fyF0uTlto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Validity
Not Before: Feb 28 23:17:09 2026 GMT
Not After : Mar 7 23:17:09 2026 GMT
Subject: CN=69a37775-9c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:ec:f6:6c:55:c0:e0:bb:69:ae:61:48:73:
87:9c:e1:55:f1:dc:69:a5:e9:e7:49:49:24:7a:a1:
ae:bb:28:00:f5:1b:42:f6:4c:00:a3:18:37:d4:5d:
00:4d:be:40:b8:fa:cf:eb:06:e2:78:51:b8:e9:75:
6b:3e:25:e2:1c:d0:04:d0:89:48:2b:38:63:84:d6:
d3:a0:24:60:63:c2:fa:42:e3:7f:8e:0d:47:fc:72:
eb:d1:da:50:a5:6c:fb:f9:a3:45:bb:c7:5e:21:3f:
f5:2b:27:95:72:1e:20:68:ef:61:b2:0b:b1:32:7e:
54:0c:1b:d5:58:f3:22:32:f6:53:df:26:bb:35:d9:
f7:8d:6e:37:af:86:de:a0:0d:14:b7:89:ed:9d:15:
3f:45:de:e6:9a:a2:4b:d7:16:1d:bd:1b:8e:07:30:
47:f7:b6:ff:e3:af:c8:ca:65:a3:65:5c:ca:18:c9:
5c:9d:f4:e3:a6:52:c4:6f:97:37:29:03:4c:32:bc:
7d:e0:f5:3f:72:75:be:60:15:53:1a:c5:7e:87:17:
ac:43:b1:52:07:93:22:fa:b5:1e:29:d1:54:b5:b1:
f9:4e:6e:d8:1b:fd:dd:71:31:4f:cc:47:7e:20:3d:
bd:b5:5b:71:86:70:0d:40:29:78:ed:36:af:d1:ca:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:62:E6:91:41:7A:F7:ED:3B:65:16:91:66:6A:CE:F0:0B:F6:4B:52
X509v3 Authority Key Identifier:
keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d1:05:93:17:77:af:bc:21:d7:79:ca:b1:b2:44:a9:34:ff:
35:99:4c:a3:93:40:f9:50:2a:c0:b6:db:78:26:c5:34:53:29:
ff:09:41:00:3f:97:79:38:a4:a9:fc:b2:6d:c8:c3:be:1c:3c:
53:cb:80:2f:7f:d4:05:2e:28:32:49:69:4d:02:31:37:0e:1e:
e8:dd:ae:bf:4b:5c:58:b1:32:8f:90:8c:af:a2:a7:73:f4:b7:
da:d9:89:a7:04:b6:a7:6c:b5:fb:51:e8:16:53:9b:41:aa:ba:
a0:03:c2:b4:90:ab:bc:b6:9a:49:88:a1:ef:9c:b0:cb:0d:f8:
a9:97:a1:65:c6:37:33:40:2f:5c:53:a4:b4:08:48:41:d6:40:
25:3b:e1:cf:3a:7b:94:46:ca:de:fb:59:bf:04:aa:28:97:18:
d1:36:ce:34:4c:ee:a3:ba:c1:02:65:3f:e1:6b:db:3f:49:8e:
9b:fd:7f:b8:d3:b2:48:52:06:66:68:b2:f3:8e:ac:b0:a8:9c:
a7:00:c5:2d:7d:f6:93:70:d0:89:5b:cf:22:da:27:b2:9a:3a:
cb:5e:a1:1a:f1:92:ca:b1:14:27:3b:7b:07:42:df:df:78:c5:
38:4f:d3:89:84:a5:f7:83:7b:9a:86:70:ca:22:25:17:9e:77:
44:1c:65:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCNTgxMTAvBgNVBAUTKDYzRTQ4NzYyQTg5MzA4MDk2NzczRDlFMUM5RDFBOTk5
ODAzNTY3MEQwHhcNMjYwMjI4MjMxNzA5WhcNMjYwMzA3MjMxNzA5WjAYMRYwFAYD
VQQDDA02OWEzNzc3NS05Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu37s9mxVwOC7aa5hSHOHnOFV8dxppennSUkkeqGuuygA9RtC9kwAoxg31F0A
Tb5AuPrP6wbieFG46XVrPiXiHNAE0IlIKzhjhNbToCRgY8L6QuN/jg1H/HLr0dpQ
pWz7+aNFu8deIT/1KyeVch4gaO9hsguxMn5UDBvVWPMiMvZT3ya7Ndn3jW43r4be
oA0Ut4ntnRU/Rd7mmqJL1xYdvRuOBzBH97b/46/IymWjZVzKGMlcnfTjplLEb5c3
KQNMMrx94PU/cnW+YBVTGsV+hxesQ7FSB5Mi+rUeKdFUtbH5Tm7YG/3dcTFPzEd+
ID29tVtxhnANQCl47Tav0cqt7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGti5pFB
evftO2UWkWZqzvAL9ktSMB8GA1UdIwQYMBaAFGPkh2KokwgJZ3PZ4cnRqZmANWcN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I1OC9BQUMyMUM3RUNB
QjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENBbG5jOW5oeWRHcG1ZQTFa
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ktU0hZcWlUQ0FsbmM5bmh5ZEdwbVlBMVp3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0I1OC9BQUMyMUM3RUNBQjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENB
bG5jOW5oeWRHcG1ZQTFadzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHNEFkxd3r7wh13nKsbJEqTT/NZlMo5NA+VAqwLbbeCbFNFMp/wlBAD+XeTik
qfyybcjDvhw8U8uAL3/UBS4oMklpTQIxNw4e6N2uv0tcWLEyj5CMr6Knc/S32tmJ
pwS2p2y1+1HoFlObQaq6oAPCtJCrvLaaSYih75ywyw34qZehZcY3M0AvXFOktAhI
QdZAJTvhzzp7lEbK3vtZvwSqKJcY0TbONEzuo7rBAmU/4WvbP0mOm/1/uNOySFIG
Zmiy846ssKicpwDFLX32k3DQiVvPItonspo6y16hGvGSyrEUJzt7B0Lf33jFOE/T
iYSl94N7moZwyiIlF553RBxlXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:08 2026 by rpki-client