
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier: e4Ov6BtUpg2Ssr9FeILlAy04RArS4j9rvwy2BzOt8wA=
Subject key identifier: CB:7A:CD:C3:1F:D3:8E:01:E2:73:0A:E6:8C:90:9D:F5:33:90:6C:B9
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number: D4
Signing time: Sun 01 Mar 2026 22:46:42 +0000
Manifest this update: Sun 01 Mar 2026 22:46:41 +0000
Manifest next update: Sun 08 Mar 2026 22:46:41 +0000
Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: nsI0XsdiFUV/5X+oFIGzypeOg5FawrK6nRf39alboGU=)
2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: h3Oxx5N9hnP5kzs3FjufA/TMLG+2ZY4lW89dn+znNCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Validity
Not Before: Mar 1 22:46:41 2026 GMT
Not After : Mar 8 22:46:41 2026 GMT
Subject: CN=69a4c1d2-18cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:f1:92:57:01:ee:ee:57:1e:11:10:56:90:
f3:db:9a:59:14:a0:58:25:7e:e8:97:e9:6c:ba:a3:
fc:6e:d5:06:f1:f4:7b:0c:ff:8c:b1:2b:05:58:44:
8b:cd:7c:e6:c5:73:ec:56:93:03:df:70:25:b7:4a:
87:28:96:95:b1:d8:b7:0b:8a:af:4a:78:d6:5c:18:
2c:00:8a:1f:23:43:80:10:a6:63:86:68:be:88:26:
73:14:42:70:e0:a4:d0:1f:e7:35:1b:f7:0b:2d:61:
a4:0a:fd:16:84:30:c1:2f:a8:40:77:b1:fc:8a:61:
84:d4:f7:f8:e7:1d:2c:81:2d:06:28:80:80:9a:89:
aa:f5:fb:79:97:22:56:54:70:ab:e1:09:90:a2:c3:
f9:2c:1b:0f:fc:5f:2d:02:a8:d1:cd:4e:8d:d0:7d:
2b:17:ac:69:00:15:95:24:34:04:8b:33:70:2d:7c:
ad:be:a0:cf:fd:59:98:ea:b8:16:f6:3c:23:fa:0a:
71:7a:3c:84:91:6a:a6:14:87:52:b9:53:c8:c5:1e:
57:4f:c2:d2:a5:b8:83:ae:b6:58:8a:08:b0:72:db:
48:df:bd:93:fd:f5:de:38:25:3e:72:2a:1d:87:bb:
22:7d:cd:2d:06:05:a3:62:0b:a6:8f:a2:37:1b:e3:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7A:CD:C3:1F:D3:8E:01:E2:73:0A:E6:8C:90:9D:F5:33:90:6C:B9
X509v3 Authority Key Identifier:
keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:05:37:55:aa:5b:d2:d0:3e:7f:61:e0:59:8a:c2:a4:b4:ee:
5e:ba:e4:57:f9:6d:19:54:56:68:51:44:3b:f5:c5:ad:a3:12:
00:ce:29:84:e8:03:e8:ce:72:ce:d2:f5:c4:68:05:7e:ad:96:
f4:fa:08:2f:db:c2:df:46:05:5a:3b:d1:61:80:f8:3c:cb:ed:
a2:c4:3c:9d:af:ff:d0:8a:df:97:b2:18:1f:c7:2e:b5:31:d8:
27:ef:e8:2e:03:fb:4b:d1:11:85:ef:0a:5a:6c:56:8f:1c:31:
5e:3f:58:d6:ce:56:ea:ca:3a:1b:3d:5e:da:c4:c8:d6:d3:b9:
a5:66:2f:e5:6b:24:8b:af:79:de:aa:96:ef:92:d4:52:7f:3d:
ca:05:34:b7:21:40:96:ee:94:4e:61:e0:a4:cd:ae:4a:15:a1:
ea:42:44:69:63:03:c1:b9:20:26:f1:c7:cd:5f:ba:4e:f2:7d:
d1:e8:d5:ea:4d:75:e7:3e:ee:87:c0:91:47:b0:c3:b9:06:ad:
4b:1d:63:e8:43:cd:a0:36:b0:91:e1:d2:19:be:5f:7d:b4:78:
64:b7:62:c8:85:16:8a:35:6b:1a:d9:1c:f6:40:0f:bd:c4:c0:
05:9f:33:e8:ec:ed:32:84:51:19:d5:72:7e:f4:69:4d:45:22:
05:af:ec:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDQkUxMTAvBgNVBAUTKDlBMTYyNEY0NjA4MkY1NEFDNTc3ODg1OUUyMjZCRDNC
QTY5MDIzRjQwHhcNMjYwMzAxMjI0NjQxWhcNMjYwMzA4MjI0NjQxWjAYMRYwFAYD
VQQDEw02OWE0YzFkMi0xOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA77DxklcB7u5XHhEQVpDz25pZFKBYJX7ol+lsuqP8btUG8fR7DP+MsSsFWESL
zXzmxXPsVpMD33Alt0qHKJaVsdi3C4qvSnjWXBgsAIofI0OAEKZjhmi+iCZzFEJw
4KTQH+c1G/cLLWGkCv0WhDDBL6hAd7H8imGE1Pf45x0sgS0GKICAmomq9ft5lyJW
VHCr4QmQosP5LBsP/F8tAqjRzU6N0H0rF6xpABWVJDQEizNwLXytvqDP/VmY6rgW
9jwj+gpxejyEkWqmFIdSuVPIxR5XT8LSpbiDrrZYigiwcttI372T/fXeOCU+ciod
h7sifc0tBgWjYgumj6I3G+O9ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMt6zcMf
044B4nMK5oyQnfUzkGy5MB8GA1UdIwQYMBaAFJoWJPRggvVKxXeIWeImvTumkCP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NCRS84M0JBODdBRUQ3
QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlVckZkNGhaNGlhOU82YVFJ
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0NCRS84M0JBODdBRUQ3QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlV
ckZkNGhaNGlhOU82YVFJX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbgU3Vapb0tA+f2HgWYrCpLTuXrrkV/ltGVRWaFFEO/XFraMSAM4phOgD6M5y
ztL1xGgFfq2W9PoIL9vC30YFWjvRYYD4PMvtosQ8na//0Irfl7IYH8cutTHYJ+/o
LgP7S9ERhe8KWmxWjxwxXj9Y1s5W6so6Gz1e2sTI1tO5pWYv5Wski6953qqW75LU
Un89ygU0tyFAlu6UTmHgpM2uShWh6kJEaWMDwbkgJvHHzV+6TvJ90ejV6k115z7u
h8CRR7DDuQatSx1j6EPNoDawkeHSGb5ffbR4ZLdiyIUWijVrGtkc9kAPvcTABZ8z
6OztMoRRGdVyfvRpTUUiBa/s3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:01 2026 by rpki-client