
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier: iaNiJJ/Gj4lH2oxzhHHL9kLbpdxVwea+KPvOyGZLNHQ=
Subject key identifier: 97:77:51:BD:24:60:51:72:2B:35:8A:1A:EB:8C:41:97:73:25:E4:F7
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number: 66
Signing time: Wed 15 Apr 2026 07:13:04 +0000
Manifest this update: Wed 15 Apr 2026 07:13:03 +0000
Manifest next update: Wed 22 Apr 2026 07:13:03 +0000
Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: W2/WyIafAlUNUkVqUAp4b3viGIPNZXSgUP1K7urZf0w=)
2: 9D1F5AC82F1211F1B693ACC09B833773.roa (hash: p36Ed7xsZwcv9rGoTKmCe4vZ8WUDfq/0PpZBbk95ipk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Validity
Not Before: Apr 15 07:13:03 2026 GMT
Not After : Apr 22 07:13:03 2026 GMT
Subject: CN=69df3a7f-0ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:40:92:b8:2b:90:19:ec:88:45:1b:36:48:
dd:06:6f:41:cb:4b:27:0d:85:db:34:c0:fd:7c:f2:
a1:ba:b3:5a:3a:3b:0a:ff:2b:d5:81:37:36:01:65:
29:2a:a1:21:d7:6c:7c:33:7a:03:69:fd:93:2d:1a:
cd:4f:7b:04:93:d2:00:79:02:7b:41:40:e4:8d:08:
67:11:ec:95:3b:4c:be:7d:7f:c4:47:33:63:57:b3:
56:66:fd:25:14:bb:42:7f:51:d1:7b:2c:48:a3:d6:
94:70:84:23:c8:49:0d:aa:33:6c:1e:00:a0:41:ea:
c5:7a:3c:ee:63:d6:ff:3f:68:9c:61:81:59:15:4b:
10:3a:76:78:79:18:27:41:16:03:e5:02:2d:ab:4c:
76:79:48:ae:5c:03:a8:f8:9f:b8:30:29:80:7c:49:
40:15:d8:8d:0e:0c:d8:5f:7e:7c:76:cc:1c:1e:c0:
0b:45:de:53:d2:a7:f3:d1:47:0c:15:5c:5e:d8:09:
4e:e6:35:ad:cb:11:1e:7c:93:a2:2c:fd:e0:dd:77:
40:00:f1:e0:3b:c4:49:75:bd:a8:6d:43:a0:94:f2:
b5:ad:12:4b:15:c8:45:5d:75:ea:04:60:5b:f0:95:
05:92:a2:48:83:84:cd:e3:f4:b2:75:a2:98:e8:39:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:51:BD:24:60:51:72:2B:35:8A:1A:EB:8C:41:97:73:25:E4:F7
X509v3 Authority Key Identifier:
keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e6:ba:76:c5:56:1c:39:01:2c:01:24:4e:62:a4:0c:e4:49:
16:f5:d2:0e:df:ea:8a:3e:7f:28:2d:7e:18:5d:e4:85:80:98:
ef:36:2e:a0:47:e0:d6:5b:fc:33:8a:2a:d4:4f:48:22:74:2c:
57:7b:2a:b1:81:12:3d:42:86:54:58:82:96:8f:71:94:37:a2:
a8:43:42:df:dc:38:2c:ec:cf:01:b1:07:92:70:3e:53:ff:97:
a5:96:22:dc:fc:13:32:96:94:2f:72:34:ca:74:f6:b4:1b:d5:
7a:11:81:7e:d5:a6:13:2a:5d:c9:c8:aa:78:07:8d:3a:23:96:
dc:71:cb:71:73:49:7b:94:8b:06:f7:9c:d4:78:af:9a:ba:e4:
a6:9d:93:72:aa:2f:93:94:54:90:e2:a0:da:e1:29:ef:4f:e7:
65:5a:c7:21:18:72:9c:02:7e:4a:72:2d:09:ec:89:f3:97:7c:
9d:4d:1b:be:66:49:f2:db:d0:17:ee:c1:34:f6:67:55:dd:e5:
09:3d:94:b2:91:72:9d:03:5b:18:0b:8c:4d:c0:da:32:93:bb:
4a:5f:ab:49:1a:83:ce:46:89:16:c4:42:87:c0:3d:27:0a:bf:
a7:44:ae:3a:6f:65:66:ce:f4:3a:27:9c:bd:ea:9b:b8:8e:df:
b2:3c:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:32 2026 by rpki-client