
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier: ubMxzY1eEHITe85jSAZei2v2wamf/AT1zYNtaGAN7Qs=
Subject key identifier: 6E:BA:E3:2E:6A:7B:9C:F8:19:68:0C:62:60:B5:0A:F4:3E:AD:52:5D
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial: 06AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number: 06A5
Signing time: Sun 20 Sep 2026 22:19:33 +0000
Manifest this update: Sun 20 Sep 2026 22:19:33 +0000
Manifest next update: Sun 27 Sep 2026 22:19:33 +0000
Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: wYqFMc11+Mcp7q0JqfRFcyQqI1xA4OUfjBKJW19b4s8=)
2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Validity
Not Before: Sep 20 22:19:33 2026 GMT
Not After : Sep 27 22:19:33 2026 GMT
Subject: CN=6ab05bf5-a584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:52:f0:db:f9:70:bc:2b:eb:14:54:f4:08:
e6:e9:d5:fd:07:8c:fc:b6:ae:2f:22:39:93:18:2f:
e7:bc:9d:ca:02:6c:0c:3b:24:cc:d9:a1:97:2d:57:
a6:9d:94:de:8b:e8:68:a2:da:14:9c:0c:82:4a:c8:
61:ae:6d:fe:69:83:e8:b7:17:f9:ba:44:d1:6d:c5:
ea:f4:dd:88:59:1f:43:12:a9:60:35:9b:07:f0:93:
b0:ae:95:ed:85:1d:5c:dd:68:08:26:61:3a:1f:c8:
7d:25:e9:3d:da:ee:18:3c:6e:1b:ff:b7:1e:4b:20:
f2:b0:6c:90:48:24:04:0b:09:48:0c:24:f3:96:0b:
95:a9:00:aa:a3:d5:f7:fc:1b:eb:7f:53:52:f3:24:
42:d0:03:fd:f8:da:cf:d9:71:4a:47:bb:c3:8c:1a:
29:83:0c:89:e9:5f:54:74:7c:16:2d:aa:e4:da:07:
ef:20:97:6e:98:18:d8:88:3c:37:30:c0:a8:48:64:
1f:5b:ec:c8:4d:23:2e:a8:8d:0a:b7:79:00:64:e5:
c8:62:a1:a7:32:15:de:a2:e8:ae:4e:f2:30:04:54:
95:0a:aa:0d:a3:d7:21:d9:5e:f9:0d:55:2e:31:92:
bd:e2:d4:66:33:8d:53:65:ac:69:90:17:91:e8:cb:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:E3:2E:6A:7B:9C:F8:19:68:0C:62:60:B5:0A:F4:3E:AD:52:5D
X509v3 Authority Key Identifier:
keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:4d:49:5c:f6:41:10:86:e0:67:f6:ae:34:70:76:26:42:61:
28:d3:6e:89:6a:37:b6:b0:f1:da:f8:e1:5b:b4:23:a5:4d:a7:
1b:b6:f3:3e:c4:5d:33:79:9c:c5:68:5e:86:ad:97:4d:9f:66:
9d:a1:10:17:2c:fd:8b:9d:9f:98:e1:9a:33:51:3b:05:40:9f:
52:01:35:ff:61:8f:73:2e:d1:0d:52:55:0f:f9:e3:3d:40:8b:
46:9a:c9:bd:0c:be:db:19:63:0a:7b:3c:80:43:bc:f6:5c:66:
17:2e:e3:fb:84:53:99:b1:c9:dc:2c:b1:96:6c:d9:26:e4:d7:
4b:29:12:1f:66:5f:22:93:df:7a:42:ba:1e:2f:2f:46:f7:f8:
46:85:67:3a:90:b9:cc:24:d8:e0:08:6c:e3:11:b5:9c:8a:92:
a5:c8:e6:48:2e:91:28:e6:04:81:97:63:52:19:81:e7:f1:6f:
f6:bc:60:a0:41:73:9f:1a:5d:8e:79:d6:34:cf:21:9a:47:75:
75:c4:e7:3f:ed:ad:62:1f:f1:29:9e:ca:f9:04:f5:73:b8:af:
25:3d:93:0f:e3:02:24:e9:88:9c:42:7e:2e:cf:3f:47:a8:1b:
67:30:18:fa:ba:24:f4:db:78:0b:9c:68:68:c0:91:a0:70:c4:
46:72:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:35 2026 by rpki-client