
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier: Cjng48joVtcVTYuVMkXhxdul7kSr4aU7HB/hQ3E5fik=
Subject key identifier: 38:84:E2:E6:73:F9:A8:34:88:F0:C5:1B:0E:78:AA:D4:BC:5D:D1:D7
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number: 0851
Signing time: Wed 20 May 2026 20:53:44 +0000
Manifest this update: Wed 20 May 2026 20:53:44 +0000
Manifest next update: Wed 27 May 2026 20:53:44 +0000
Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: BvL8Xnxaw3QHXYmSTr9KjyGQIihOpuLAzr93GHlHQvk=)
2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
3: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: May 20 20:53:44 2026 GMT
Not After : May 27 20:53:44 2026 GMT
Subject: CN=6a0e1f58-6195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:f9:e9:bf:3f:67:aa:fe:0a:a0:37:b7:ed:
00:c9:ec:0d:86:78:f8:b8:e8:d9:6d:0d:a2:55:96:
a0:f7:ee:3d:c8:92:10:72:82:88:a7:84:84:c1:33:
f9:b3:a1:15:b1:7b:da:67:bb:5a:39:08:1e:d8:5a:
ce:54:ef:c2:cf:f5:8b:bd:7c:bc:e7:fd:0e:a5:d1:
37:42:4d:13:81:7a:b6:e2:c3:61:f7:cf:24:3c:ac:
5b:7b:9b:03:61:40:54:68:0f:03:0e:f6:df:3d:d9:
92:c7:61:46:3e:f8:47:57:3b:a3:26:22:90:8a:2c:
c1:8c:e0:d7:4d:bb:e6:bc:e8:3b:88:76:05:fb:a6:
7a:04:5c:d8:63:0f:10:6c:a6:f5:66:1c:83:6b:e9:
12:84:5a:52:31:0c:62:4b:47:57:76:f3:cb:4e:45:
a7:34:ad:a3:e3:12:e2:90:36:25:63:b6:f7:ce:07:
87:8b:f8:db:92:f3:81:db:6c:74:3e:94:72:76:a3:
d0:e5:d4:1e:55:d5:c6:42:83:f1:27:18:c7:27:b2:
38:bb:6d:9a:c3:e0:6e:c2:ef:82:79:3d:b1:a4:48:
f9:28:9a:ab:2a:90:90:c2:91:d8:9d:55:20:b6:cf:
0a:48:a4:80:c8:7e:7d:fc:21:02:e9:5a:f8:0d:08:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:E2:E6:73:F9:A8:34:88:F0:C5:1B:0E:78:AA:D4:BC:5D:D1:D7
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:59:68:4b:70:f5:a1:bc:44:09:25:bd:20:05:9f:7e:16:d9:
74:1d:0d:57:49:82:f7:42:28:2a:f8:7b:d0:b3:84:eb:96:a0:
72:05:89:3c:94:62:5d:68:9e:52:81:11:91:9f:74:4c:a8:3a:
87:dd:9a:3e:50:6e:30:25:f5:ce:c2:f6:ae:f4:c0:b6:3c:6b:
79:65:d7:50:1b:7c:57:3e:8a:de:4b:a7:1c:a3:af:2f:c2:cd:
4d:1e:e5:e7:a9:c4:86:42:09:88:73:f2:79:67:57:02:f5:03:
8d:15:b1:5d:a7:0f:54:89:9f:d7:dc:e5:03:45:84:ee:44:75:
0f:8a:55:b7:36:c3:b9:27:09:4e:be:c2:17:e1:29:20:68:eb:
29:ce:f6:51:81:97:76:3f:0b:53:65:bb:de:34:d5:4f:11:93:
ac:a5:03:e2:f7:79:b9:0e:e8:c5:5f:12:4b:05:51:29:dc:0d:
ee:d3:5b:23:54:49:af:35:80:6e:69:13:50:15:38:29:f3:e4:
56:34:5c:64:bb:f1:17:5f:c0:82:e0:62:c8:23:ec:b8:0c:07:
df:7b:ce:16:d6:4b:52:10:f1:fc:1a:89:c5:f8:1f:33:05:21:
0d:38:2c:46:7e:92:a6:57:ce:45:39:17:74:97:38:05:98:4d:
4d:cc:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:40:53 2026 by rpki-client