
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
File: Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json)
Hash identifier: 2fW/epGRcRZrw1Of4n7IxeP3wM+v3erAcO8pTx7twT0=
Subject key identifier: 67:DD:D0:2F:93:5E:94:45:72:41:B7:93:3C:A5:0B:84:D9:91:86:13
Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
Certificate issuer: /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
Manifest number: 0F
Signing time: Sun 05 Apr 2026 08:24:39 +0000
Manifest this update: Sun 05 Apr 2026 08:24:38 +0000
Manifest next update: Sun 12 Apr 2026 08:24:38 +0000
Files and hashes: 1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: yeza9/ajgqOG3BymzJa0x4SpwJqM9PrdEa9w+z8avns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Validity
Not Before: Apr 5 08:24:38 2026 GMT
Not After : Apr 12 08:24:38 2026 GMT
Subject: CN=69d21c46-d3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:11:8a:48:f4:5a:80:33:db:b4:ec:ea:8f:
88:0b:31:c7:73:c8:bc:7e:a3:4f:ab:7b:17:25:1d:
ec:67:7a:61:27:4d:fe:b7:64:bc:9f:4c:f6:c0:5b:
7c:53:fe:61:8b:8b:cb:a8:bb:0e:94:93:a3:9c:5a:
06:ee:7b:8a:62:a2:eb:91:08:66:00:98:8b:cc:62:
b8:6d:1e:f5:76:17:16:f3:2d:ba:0f:03:0e:df:2a:
5d:67:3b:56:52:34:fa:4b:14:15:9b:bc:1f:ff:d0:
ee:a7:bd:12:ca:f7:fa:e3:7a:66:a6:4c:3f:25:12:
93:ba:57:1c:ce:67:c3:76:96:d9:94:2d:2f:2f:0b:
b6:ee:19:d6:48:be:04:8c:31:79:0d:2c:4e:89:37:
23:e3:3c:33:45:2c:f7:2e:2b:00:8d:d3:d9:d8:d5:
86:12:08:d2:82:34:c3:75:d5:9d:96:6f:8a:4a:7e:
89:9b:b2:9e:f3:90:b7:31:24:7c:81:53:77:9d:10:
8b:17:d2:08:c6:65:0d:a8:16:3c:4e:da:23:ae:68:
6c:72:9e:ce:d3:0b:cc:29:db:4e:6b:8e:e4:bf:72:
f5:9d:7a:fc:8b:60:b2:b3:da:52:94:a5:2a:1e:16:
f5:2e:f2:e5:67:2e:47:09:62:d2:ab:b8:79:70:b0:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DD:D0:2F:93:5E:94:45:72:41:B7:93:3C:A5:0B:84:D9:91:86:13
X509v3 Authority Key Identifier:
keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:e5:32:b6:42:da:41:01:04:b3:03:dc:a8:f3:db:4f:4e:
11:e7:df:a5:90:01:92:8a:0c:9c:03:8f:52:3b:50:4e:5d:b1:
cb:e4:23:f3:69:ad:ba:b5:18:2d:7b:d9:90:d9:fb:59:18:2b:
0d:f0:1d:0f:f1:fc:9c:82:2b:bf:cd:22:92:7a:53:bc:00:6c:
2f:fc:32:f6:19:05:86:38:c6:e4:65:34:69:b6:a2:28:49:12:
30:df:99:14:29:f0:31:7f:40:4e:58:ee:b5:e2:7a:3e:cf:ce:
a5:4c:09:f4:6b:d6:1d:e7:63:99:0f:e1:c5:1d:ec:13:de:d9:
36:0b:55:66:a6:db:51:2e:bb:38:f1:93:55:7f:a5:fb:d1:03:
a7:73:8e:b0:79:2e:2a:9b:86:2e:fe:66:80:a1:04:b8:bb:09:
a7:7a:29:ea:8e:74:7b:a0:ea:fb:26:ca:f4:e7:93:fb:6d:57:
b3:00:01:5f:54:20:35:32:21:69:cb:70:16:e7:37:21:69:f0:
16:00:53:7b:52:cc:e2:af:18:83:e4:0b:e6:98:4f:58:93:32:
d5:f7:7e:de:c8:7c:bf:d6:ab:bc:a7:51:04:05:56:f7:46:0b:
2e:ca:67:8a:45:7c:11:e4:4e:e5:18:11:70:db:fa:b6:5f:c1:
ff:fa:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:39 2026 by rpki-client