
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier: 4r5Lelx3k5qNiCuRdTWNrD6ucKHUqBqBd8G3Ro4+DB4=
Subject key identifier: 55:4F:6F:27:28:B2:0B:B6:AE:18:49:9D:3C:F8:CC:B3:1B:F1:F9:8F
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number: 39
Signing time: Sun 01 Mar 2026 09:15:32 +0000
Manifest this update: Sun 01 Mar 2026 09:15:32 +0000
Manifest next update: Sun 08 Mar 2026 09:15:32 +0000
Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: H1ay7w3ri8Y3RMyBCJ8y7E5lOkepZ2YZOM92dBnKmT8=)
2: 195EB36402A311F188F4114D3A3D8C67.roa (hash: Q3+7Q8tqgx2V6iG8FYJMHBqK1bLLDXUDmAQGrTWfi6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Validity
Not Before: Mar 1 09:15:32 2026 GMT
Not After : Mar 8 09:15:32 2026 GMT
Subject: CN=69a403b4-03eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:46:84:f0:07:ca:0f:4d:ba:d5:ca:42:6f:8a:
44:2c:2f:35:98:95:0c:7c:09:33:0c:32:b0:90:62:
40:8f:08:03:06:26:c8:65:93:a9:d0:97:72:42:3e:
13:55:33:fd:21:10:8f:bd:f2:dc:f1:94:0e:ed:ca:
18:21:08:95:36:c9:e4:c6:0a:a4:f8:5b:c3:3b:42:
30:2d:11:37:8a:b0:71:70:ca:0c:d3:80:94:ab:98:
24:30:b8:b6:59:52:81:ca:3c:3a:61:18:57:e6:58:
6b:81:a4:e8:54:79:51:12:56:ec:9f:94:57:21:67:
e9:4b:d6:b2:89:18:2c:8a:ce:d5:eb:f6:5d:25:2b:
85:0c:ac:78:f0:06:5a:63:04:9d:ae:d4:40:0c:8b:
a8:ea:59:c3:e2:2b:26:f6:41:6c:c3:b5:be:12:9c:
99:67:9a:21:27:32:d1:b0:7a:42:eb:b0:27:f8:22:
4d:64:6b:cf:01:5a:9a:36:3b:16:30:ff:d8:cb:fe:
b0:4b:b3:97:28:2c:06:c7:91:f1:0f:e7:b8:94:b4:
28:7b:fd:d9:cb:c4:66:04:6a:d8:b7:1b:e6:68:2b:
ca:95:4e:cf:b5:37:e9:50:10:a0:e4:19:b2:d7:b3:
e1:5a:c1:a9:4e:4e:49:46:c0:47:09:ac:a5:8c:52:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:6F:27:28:B2:0B:B6:AE:18:49:9D:3C:F8:CC:B3:1B:F1:F9:8F
X509v3 Authority Key Identifier:
keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:df:9f:59:64:50:d7:de:d3:e6:f9:c1:5e:bc:7e:d8:8e:7c:
18:e0:69:05:9a:39:52:32:7d:a3:8c:c2:8c:c3:9e:37:48:b6:
a7:37:f6:d4:f9:cc:c8:3f:d0:2b:ee:3a:55:a9:03:24:31:f5:
5c:d6:d3:fa:70:a9:23:53:fe:b8:6b:72:a0:a7:b2:13:47:03:
89:6b:8e:d1:19:d1:56:34:76:d2:89:d7:1b:a7:2a:b3:ee:8c:
3f:03:57:18:d9:d1:8b:83:36:b6:44:d2:0d:8d:cc:90:92:fd:
ec:56:ec:99:6b:a2:30:6e:89:0a:6a:25:0b:d3:f0:1a:0c:26:
86:ba:84:de:08:c1:b5:fe:35:b9:cc:a2:1d:e2:ed:d7:76:7d:
fb:9d:cf:e3:43:fd:c9:70:06:0a:d1:fd:91:63:eb:aa:43:43:
8f:e4:bf:4e:9e:aa:95:70:59:b3:54:d6:30:65:74:01:14:f6:
cd:fa:2c:92:9d:16:45:ac:d7:eb:e5:eb:0d:b8:06:8e:a8:ef:
71:af:d1:aa:46:55:78:6d:a0:58:5d:22:40:c0:95:c8:22:50:
2e:e2:af:34:dc:e0:be:07:7c:f8:2b:4b:61:27:9e:78:54:4a:
e6:2e:5d:ff:4b:1a:15:7b:b2:51:b9:49:51:93:9c:37:5f:39:
0a:db:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:35 2026 by rpki-client