
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File: YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier: 812gI1PbROvDBx9FK/KdzwYFd1dUfabtqNsDNXmQl0Y=
Subject key identifier: F0:1E:77:F1:0F:D5:DB:42:70:C1:E7:FF:31:D0:A6:9C:40:D5:75:99
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer: /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:16:27 +0000
Manifest this update: Fri 17 Apr 2026 08:16:27 +0000
Manifest next update: Fri 24 Apr 2026 08:16:27 +0000
Files and hashes: 1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: zOWH+Bc1tvlffv5uHqdQtenaAOy3seDH9eFyWnjrE7o=)
2: 7C0561D8F10111F088AEA117476F56BC.roa (hash: tZCMHU0FsD0B7efnDx5vqTfypD0ywjof7SVcOsAh5iE=)
3: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: B9wwelihVNbWqG3EWwGK+ZW8jF7M6pX43MoH5Y0lk+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Validity
Not Before: Apr 17 08:16:27 2026 GMT
Not After : Apr 24 08:16:27 2026 GMT
Subject: CN=69e1ec5b-a97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:86:c6:22:f2:70:2b:70:01:af:6e:d4:e5:
f2:0f:3c:04:34:ed:75:5b:de:52:a0:11:a6:7e:c1:
83:17:b4:da:ca:1e:00:2d:35:41:d2:a5:8b:27:cb:
20:55:e0:5e:86:a7:74:6c:f3:fb:e3:05:53:e8:56:
18:a3:79:49:0b:1e:f4:e6:fa:8b:b4:03:4c:22:34:
48:51:21:51:d9:45:56:98:36:3c:ac:8c:a2:96:07:
a5:fb:bb:34:1c:0c:2d:c5:e8:5a:77:4e:2e:e9:44:
42:c9:e3:a0:8b:8f:7d:73:90:3c:fc:73:33:27:d3:
ea:42:12:af:df:85:f8:86:cd:02:ec:de:fb:32:c7:
fe:10:36:df:7a:22:ed:7d:35:d1:29:fe:a4:ae:ce:
ed:8c:d1:61:19:76:af:50:fd:cb:43:43:09:b0:6c:
fb:0a:e2:3b:07:97:5a:92:e3:6d:6f:cb:0d:41:af:
78:b4:36:68:d2:e1:29:49:43:a6:7c:af:c7:43:48:
01:64:3b:47:e6:cb:86:77:0e:b2:6e:ec:b9:a3:07:
7c:0e:7b:af:c5:be:b7:b5:81:3c:4e:1e:bd:c7:ad:
31:b6:58:28:ab:cc:f8:90:ae:03:1d:63:25:21:7e:
1a:bc:e8:b3:1e:47:d8:0b:00:75:9d:0b:b4:73:36:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1E:77:F1:0F:D5:DB:42:70:C1:E7:FF:31:D0:A6:9C:40:D5:75:99
X509v3 Authority Key Identifier:
keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:75:42:23:13:6b:44:28:f6:98:3d:fd:c5:55:b5:55:ee:c4:
b2:4e:7f:e2:96:a8:f6:7f:9b:35:34:f9:f0:0a:6b:a7:7c:29:
cb:3b:0f:f4:52:7b:eb:a4:44:f5:00:75:92:6c:bc:b6:78:b2:
e0:6a:3a:4d:e0:d7:a1:26:85:4c:9e:48:9e:0f:16:80:5b:96:
42:c7:aa:d5:80:4e:c3:bd:ad:c7:37:e4:46:c2:4b:5a:06:54:
50:bb:b7:7f:95:38:b7:dc:16:fd:76:91:19:a6:1e:f4:27:fb:
f6:aa:5c:1c:a2:d8:aa:a7:1b:43:34:dd:c7:47:72:18:93:6b:
b1:0c:95:ed:99:52:67:0f:3c:71:0e:d4:30:2e:82:32:47:64:
2c:a2:cc:4c:b0:da:25:b3:93:35:22:67:3a:02:e7:49:72:c1:
74:8e:b0:40:d7:51:d6:ab:e6:26:0a:47:d9:c1:1b:e2:ed:82:
49:4c:86:6a:c5:c0:ed:53:b4:b7:fb:b7:00:f2:2e:c1:17:b2:
55:2d:86:18:3d:5d:30:19:94:22:3c:cd:ac:77:ef:cd:ec:83:
92:cb:fc:fb:e1:e9:6f:f9:ee:81:00:ab:91:f3:21:b3:c9:ea:
41:9f:de:8c:5a:17:11:23:af:b3:1a:1b:3e:60:c2:79:f8:c8:
d0:58:a5:a9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
N0ExMjExMC8GA1UEBRMoNjIxOTlEODU0OTMwOURBRkYyNTlGQTRGNzZCRTZDQkQ0
NkY3NTQzMDAeFw0yNjA0MTcwODE2MjdaFw0yNjA0MjQwODE2MjdaMBgxFjAUBgNV
BAMTDTY5ZTFlYzViLWE5N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEFIbGIvJwK3ABr27U5fIPPAQ07XVb3lKgEaZ+wYMXtNrKHgAtNUHSpYsnyyBV
4F6Gp3Rs8/vjBVPoVhijeUkLHvTm+ou0A0wiNEhRIVHZRVaYNjysjKKWB6X7uzQc
DC3F6Fp3Ti7pRELJ46CLj31zkDz8czMn0+pCEq/fhfiGzQLs3vsyx/4QNt96Iu19
NdEp/qSuzu2M0WEZdq9Q/ctDQwmwbPsK4jsHl1qS421vyw1Br3i0NmjS4SlJQ6Z8
r8dDSAFkO0fmy4Z3DrJu7LmjB3wOe6/Fvre1gTxOHr3HrTG2WCirzPiQrgMdYyUh
fhq86LMeR9gLAHWdC7RzNhHrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8B538Q/V
20Jwwef/MdCmnEDVdZkwHwYDVR0jBBgwFoAUYhmdhUkwna/yWfpPdr5svUb3VDAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QTEyL0UzQjEzQjZFRUNF
MTExRjBCNTM4QkE5QzcxNkY1NkJDL1lobWRoVWt3bmFfeVdmcFBkcjVzdlViM1ZE
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWWhtZGhVa3duYV95V2ZwUGRyNXN2VWIzVkRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3
QTEyL0UzQjEzQjZFRUNFMTExRjBCNTM4QkE5QzcxNkY1NkJDL1lobWRoVWt3bmFf
eVdmcFBkcjVzdlViM1ZEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBSdUIjE2tEKPaYPf3FVbVV7sSyTn/ilqj2f5s1NPnwCmunfCnLOw/0UnvrpET1
AHWSbLy2eLLgajpN4NehJoVMnkieDxaAW5ZCx6rVgE7Dva3HN+RGwktaBlRQu7d/
lTi33Bb9dpEZph70J/v2qlwcotiqpxtDNN3HR3IYk2uxDJXtmVJnDzxxDtQwLoIy
R2QsosxMsNols5M1Imc6AudJcsF0jrBA11HWq+YmCkfZwRvi7YJJTIZqxcDtU7S3
+7cA8i7BF7JVLYYYPV0wGZQiPM2sd+/N7IOSy/z74elv+e6BAKuR8yGzyepBn96M
WhcRI6+zGhs+YMJ5+MjQWKWp
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:56 2026 by rpki-client