
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier: U6RAIY7iAa5shfVhl1j6yap1lil3BvJfpj1y8TPvaZI=
Subject key identifier: FA:E0:1F:0E:B1:38:AB:83:EA:9B:03:B2:71:AE:1B:AD:36:08:55:A6
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number: B6
Signing time: Mon 21 Sep 2026 06:39:37 +0000
Manifest this update: Mon 21 Sep 2026 06:39:36 +0000
Manifest next update: Mon 28 Sep 2026 06:39:36 +0000
Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: Uh5i4172Of658eQSMxmYrBFS85IkREqJj+Ys9qIoIK4=)
2: 9D1F5AC82F1211F1B693ACC09B833773.roa (hash: p36Ed7xsZwcv9rGoTKmCe4vZ8WUDfq/0PpZBbk95ipk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Validity
Not Before: Sep 21 06:39:36 2026 GMT
Not After : Sep 28 06:39:36 2026 GMT
Subject: CN=6ab0d128-9d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:b0:8d:e0:80:e4:8f:e5:d1:76:cc:af:27:
aa:57:0d:e8:7a:c7:76:2d:6f:3e:79:b1:87:99:79:
cb:d4:dc:41:ff:e0:ca:df:d8:c6:96:0b:ab:ce:75:
3b:15:2d:ea:6b:26:fd:fa:d6:8f:11:94:40:7a:e0:
83:0b:8c:b4:5b:92:04:c8:cd:c4:06:89:c0:1b:57:
a5:40:92:4b:f6:20:e2:5a:d7:3a:d4:1b:86:0a:5a:
bc:24:5c:72:37:1b:ba:b9:8d:da:c3:eb:f8:be:a6:
b0:58:76:4f:12:23:a5:ea:a1:b4:9d:9b:20:a4:95:
51:59:65:5c:8d:8d:7d:fa:43:d3:59:5d:2f:18:4e:
9b:a2:9d:45:e1:08:f7:e4:98:28:7b:70:b6:f5:35:
79:e8:14:e7:c1:ec:95:19:5f:79:be:30:c6:4d:94:
0a:9f:b4:21:d6:1d:89:3f:b1:71:83:4a:e4:7c:a3:
b6:2c:7e:cc:63:5f:c0:e6:a8:83:29:3d:52:1c:36:
2c:8d:58:67:e7:c0:ac:ed:96:de:45:e6:8e:1a:cd:
a3:c0:81:6e:b7:a5:a2:78:4b:f9:40:3f:88:72:9d:
80:d7:fa:11:b3:d9:aa:27:bb:4f:77:35:7a:64:3c:
c2:95:f2:66:82:0f:43:56:ae:2f:04:60:3e:9b:ef:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:1F:0E:B1:38:AB:83:EA:9B:03:B2:71:AE:1B:AD:36:08:55:A6
X509v3 Authority Key Identifier:
keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a4:3b:08:f9:ce:e6:61:bf:a3:f6:b9:25:71:47:d7:ff:72:
77:b6:34:61:61:4c:90:b7:0e:4b:9c:06:f4:a7:0a:fb:9e:72:
87:33:8b:dc:4e:3b:a8:7d:ad:7b:38:05:1b:bd:bb:a5:b3:82:
cf:42:0a:ce:6f:18:4b:90:38:c3:4c:a6:bf:83:38:b7:e5:7c:
7c:48:30:21:b6:61:7f:33:30:8a:42:7d:fd:2b:85:3c:fc:ac:
99:b3:ac:70:e2:83:a8:15:df:69:ea:e3:3d:1d:5a:ea:0d:2a:
92:d5:70:e7:f6:1a:7d:b2:72:e4:05:59:60:28:20:e7:76:42:
8d:6b:fa:48:82:02:1b:d7:ff:1f:c7:53:23:f8:96:d3:0e:95:
8d:cf:dd:c6:1f:d2:3d:e7:6f:49:98:6a:4a:9d:df:87:41:61:
1a:49:de:9e:09:52:35:c7:bb:7b:a9:c4:4f:ec:a7:cc:24:6f:
9c:13:b7:fb:ca:d4:13:53:67:44:6f:77:b9:2c:c4:41:da:85:
f6:6f:64:66:a2:45:f6:58:04:db:e2:aa:dc:d3:97:e2:d9:0f:
0b:8d:ab:98:84:a3:90:c5:41:fe:16:e6:25:eb:9f:94:38:3d:
48:25:43:bb:f0:70:25:a7:59:91:3f:31:fd:6f:a5:6e:46:2b:
08:aa:e6:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDQTgxMTAvBgNVBAUTKDMxODhENDFEMEMwNkVGQTJDOTZBODcwNzM1NjlFOEUx
MDM0NEUyQ0QwHhcNMjYwOTIxMDYzOTM2WhcNMjYwOTI4MDYzOTM2WjAYMRYwFAYD
VQQDEw02YWIwZDEyOC05ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA092wjeCA5I/l0XbMryeqVw3oesd2LW8+ebGHmXnL1NxB/+DK39jGlgurznU7
FS3qayb9+taPEZRAeuCDC4y0W5IEyM3EBonAG1elQJJL9iDiWtc61BuGClq8JFxy
Nxu6uY3aw+v4vqawWHZPEiOl6qG0nZsgpJVRWWVcjY19+kPTWV0vGE6bop1F4Qj3
5Jgoe3C29TV56BTnweyVGV95vjDGTZQKn7Qh1h2JP7Fxg0rkfKO2LH7MY1/A5qiD
KT1SHDYsjVhn58Cs7ZbeReaOGs2jwIFut6WieEv5QD+Icp2A1/oRs9mqJ7tPdzV6
ZDzClfJmgg9DVq4vBGA+m++ABQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrgHw6x
OKuD6psDsnGuG602CFWmMB8GA1UdIwQYMBaAFDGI1B0MBu+iyWqHBzVp6OEDROLN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC8yRDk4Q0M1QUM1
MDYxMUYwOEM2QkEzMkJDNEY5QUUwMi9NWWpVSFF3Rzc2TEphb2NITldubzRRTkU0
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0NBOC8yRDk4Q0M1QUM1MDYxMUYwOEM2QkEzMkJDNEY5QUUwMi9NWWpVSFF3Rzc2
TEphb2NITldubzRRTkU0czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc6Q7CPnO5mG/o/a5JXFH1/9yd7Y0YWFMkLcOS5wG9KcK+55yhzOL3E47qH2t
ezgFG727pbOCz0IKzm8YS5A4w0ymv4M4t+V8fEgwIbZhfzMwikJ9/SuFPPysmbOs
cOKDqBXfaerjPR1a6g0qktVw5/YafbJy5AVZYCgg53ZCjWv6SIICG9f/H8dTI/iW
0w6Vjc/dxh/SPedvSZhqSp3fh0FhGknenglSNce7e6nET+ynzCRvnBO3+8rUE1Nn
RG93uSzEQdqF9m9kZqJF9lgE2+Kq3NOX4tkPC42rmISjkMVB/hbmJeuflDg9SCVD
u/BwJadZkT8x/W+lbkYrCKrmuw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:08:39 2026 by rpki-client