
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier: MyCidFa06DhAsC2J+vToSqzNv/jHWmWAKD0x5n4Lsmw=
Subject key identifier: 82:46:34:C6:FD:97:1C:D2:8B:52:03:B5:54:C1:AD:16:C4:00:11:59
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 08A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number: 089A
Signing time: Sat 10 Oct 2026 20:46:04 +0000
Manifest this update: Sat 10 Oct 2026 20:46:04 +0000
Manifest next update: Sat 17 Oct 2026 20:46:04 +0000
Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: lS4kIzpMT0AyT4cu4YvH1jmuc9eSqY25s+MPB8BvoEQ=)
2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
3: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: Oct 10 20:46:04 2026 GMT
Not After : Oct 17 20:46:04 2026 GMT
Subject: CN=6acaa40c-78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:d6:21:12:2f:a7:2d:00:d7:89:d4:d1:ac:
f2:b1:87:11:82:8c:43:fa:0f:00:4c:b6:d3:25:17:
9c:df:62:cd:f3:70:97:44:75:8f:a3:e5:f5:a3:ff:
18:60:93:6c:9c:84:21:5e:09:d7:72:9e:56:5f:f9:
d5:fa:42:ce:a5:6b:c1:27:78:d1:8b:ad:19:7e:7f:
85:bb:aa:85:6c:09:a5:9a:1a:af:20:bd:f7:c1:7f:
59:85:61:f7:4b:84:71:80:e0:3a:19:f7:1d:c5:67:
91:6f:77:dd:d1:ba:4a:38:76:13:e7:a7:f7:d7:10:
ba:c7:f8:49:d0:1b:16:35:07:1f:58:c4:1e:24:0e:
92:52:bc:1d:2e:4b:ef:ff:f3:1e:8a:15:73:66:c3:
7a:c0:7b:fe:80:d7:0e:69:ee:dc:cf:ca:ee:bb:4e:
c6:db:49:9c:df:1f:89:4f:af:83:36:01:8c:97:8c:
82:a9:cc:ac:9a:8a:91:25:6d:97:3b:e4:fc:a9:eb:
8b:b3:7c:e6:97:38:ef:ab:39:79:b1:e4:c8:ab:98:
e0:37:bb:b9:e1:53:43:16:1e:cc:1c:73:9a:a9:6e:
af:08:bf:27:fa:94:63:6a:87:ca:16:88:3d:a6:68:
aa:03:4b:86:b7:ab:6a:2c:bb:a1:78:5c:dd:8c:81:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:34:C6:FD:97:1C:D2:8B:52:03:B5:54:C1:AD:16:C4:00:11:59
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d2:9b:c9:a9:9b:a9:df:4e:80:5e:f5:c1:90:91:82:d6:1c:
ac:d5:ec:69:d8:4c:ac:70:f6:7c:70:9d:e2:de:94:49:30:13:
89:6a:50:3d:23:d6:8a:c4:67:53:9d:6d:3d:e3:c2:41:7f:90:
ab:76:76:47:b6:c0:ba:e7:a0:17:d3:8f:19:5d:9b:a6:eb:3c:
8c:ba:2b:96:73:a7:8d:c9:03:a1:ed:e1:cc:4f:d9:a8:fe:d8:
ed:d2:36:43:e7:76:f4:3f:16:57:cd:40:63:35:72:3f:9b:13:
45:45:97:e0:86:aa:b5:bd:29:ed:d3:6c:ed:76:a0:57:79:3e:
08:26:d8:9a:a1:4f:7e:79:cf:c1:24:58:ca:55:6e:f0:67:02:
78:e5:0d:c0:ef:1f:93:f9:05:97:df:62:6d:43:6c:3e:cc:08:
e6:4b:50:37:9c:c7:dc:2d:f1:02:ed:82:12:4f:8a:67:ff:4e:
e9:9c:9a:48:01:42:d1:72:a9:17:b5:f2:d6:34:86:57:03:db:
a2:12:09:80:a9:6d:eb:53:92:86:b6:b0:ae:56:40:48:b3:5f:
76:b5:0e:f2:70:a4:35:44:de:00:e7:7c:9e:47:ff:8b:f5:6d:
23:1c:3d:5b:ce:f0:a5:ea:ba:40:1c:34:09:09:f8:f3:d6:b0:
0c:19:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:33:12 2026 by rpki-client