
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier: ovXXzLjx/lsBZx3A48NkjzbSoucBi9iUus69ndqOoNU=
Subject key identifier: 7B:65:66:4C:AF:10:32:86:75:C5:59:EE:12:A6:03:4D:3C:25:E3:FB
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number: 99
Signing time: Mon 27 Jul 2026 09:10:55 +0000
Manifest this update: Mon 27 Jul 2026 09:10:54 +0000
Manifest next update: Mon 03 Aug 2026 09:10:54 +0000
Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: 289X6HK6a9hbKoEkUzMBfjYIfOaY1NeqSF9MX8dXLb0=)
2: 9D1F5AC82F1211F1B693ACC09B833773.roa (hash: p36Ed7xsZwcv9rGoTKmCe4vZ8WUDfq/0PpZBbk95ipk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Validity
Not Before: Jul 27 09:10:54 2026 GMT
Not After : Aug 3 09:10:54 2026 GMT
Subject: CN=6a67209f-9ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:58:60:4e:78:e7:83:f6:0f:7b:dc:6e:5c:
08:0a:99:1b:eb:f8:aa:a9:27:9c:56:08:87:f4:91:
b7:a0:6d:e9:e4:2d:fb:8d:47:b2:43:ff:4b:cf:c8:
b3:4d:d5:cb:e4:3d:52:cc:be:fb:19:1f:89:2b:a3:
13:09:55:9f:e6:fd:cc:f3:89:b5:fe:8d:4a:d8:5e:
e6:b4:1c:5e:76:dd:85:1e:e3:95:38:da:a1:c3:4e:
ed:9a:4a:dc:6d:ab:9e:b9:e4:6d:93:5c:49:65:69:
3b:96:b7:9d:1d:1c:0e:2b:b0:da:05:27:89:79:08:
46:72:57:c1:6b:aa:ae:b1:51:cf:ef:12:05:66:dc:
ad:63:09:65:31:a9:86:4c:29:40:7f:50:ce:c7:e2:
79:0e:88:5e:66:b0:2a:e7:65:c3:01:1f:4c:c0:3b:
61:68:7c:ab:72:b0:1d:16:6e:82:4a:e0:25:0f:dd:
82:2d:76:5f:1e:fd:c4:5f:26:de:0a:56:f6:21:b2:
64:9c:70:56:d4:74:21:f5:69:5e:40:59:d3:7c:92:
ad:ff:0b:e4:2d:23:69:17:ea:68:51:f7:33:01:f4:
b7:bb:25:c1:fc:00:c3:a9:4e:d4:1f:f9:37:6e:70:
0c:41:20:1b:52:30:8a:f2:16:01:41:06:08:65:a2:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:66:4C:AF:10:32:86:75:C5:59:EE:12:A6:03:4D:3C:25:E3:FB
X509v3 Authority Key Identifier:
keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:59:43:cd:d4:46:05:68:fc:27:0b:ab:6b:f2:f1:50:9d:8d:
2e:cd:80:e0:35:3a:34:be:3e:82:de:73:c5:75:3a:18:83:57:
ce:7d:ae:7d:bc:99:f4:17:3a:0c:19:fc:5f:17:50:e2:01:fb:
39:1b:67:7c:df:da:59:9a:a8:00:63:95:ce:05:2f:3b:e3:d2:
03:21:5d:2f:12:e5:34:60:ac:18:4f:38:a8:b1:8a:7f:8e:a6:
47:69:60:70:fe:2b:83:1e:a9:8f:86:52:7d:36:c8:e3:37:de:
a8:06:48:9b:8e:a8:a3:79:17:cd:f6:41:40:ac:85:c2:bf:ea:
ef:a8:15:36:30:0d:58:e3:e9:9f:54:bb:38:27:46:f8:ed:56:
b1:15:f0:b6:11:6d:06:be:16:20:ea:c4:b5:f5:dc:5c:27:ae:
72:6a:d0:71:9f:f6:b8:ef:48:cb:1d:19:6d:92:c1:b8:cb:5e:
81:84:63:76:f1:e7:c4:1a:73:55:23:db:0b:a3:29:bc:17:44:
e5:90:21:c4:c4:48:22:04:f4:53:67:8b:e1:fe:60:77:04:da:
2d:c2:c4:df:52:07:28:af:a7:47:6d:89:2a:b0:1b:8b:a3:66:
05:db:ad:29:95:74:d3:e7:fd:1f:52:93:ab:be:4d:4f:ea:cb:
35:cc:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:23 2026 by rpki-client