
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier: jEJIn4dmbdhPoUrF6eIBoFeYyEFDOd+yl0AdF6XgOBk=
Subject key identifier: AB:97:6D:1E:D8:D6:5D:A6:D1:DE:FC:07:58:89:67:F2:F5:7F:67:2B
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number: AD
Signing time: Thu 03 Sep 2026 06:58:24 +0000
Manifest this update: Thu 03 Sep 2026 06:58:24 +0000
Manifest next update: Thu 10 Sep 2026 06:58:24 +0000
Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: 3N+5PIhzHAacsc7PL31LRSTLPLKBxkqMHG6RLNJi2fk=)
2: 9D1F5AC82F1211F1B693ACC09B833773.roa (hash: p36Ed7xsZwcv9rGoTKmCe4vZ8WUDfq/0PpZBbk95ipk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Validity
Not Before: Sep 3 06:58:24 2026 GMT
Not After : Sep 10 06:58:24 2026 GMT
Subject: CN=6a991a90-af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:e2:d1:11:6e:7e:65:c5:80:94:69:97:68:
62:a5:2f:20:a5:f0:0b:de:51:cd:9f:67:3a:73:5e:
ab:96:fa:31:e7:77:42:95:8b:cb:2a:c4:93:a7:52:
ec:0c:ea:2a:46:92:b2:4f:07:72:3d:3d:33:6e:6c:
44:c9:91:8b:c9:c4:b0:c3:e0:85:02:d0:e4:d7:b4:
c3:cb:7a:5b:28:3c:3e:de:c7:ea:db:db:e5:ad:cf:
d1:3e:86:33:ab:31:19:e5:e4:ec:62:c5:a3:b3:eb:
7f:ba:69:34:3c:8d:b3:44:cc:f6:01:f3:42:dd:8c:
25:4c:ae:3c:a3:fa:5b:15:9a:be:ad:41:a5:7f:9f:
e0:5e:cd:d1:ec:7e:48:2e:4f:75:c3:df:c0:57:db:
bb:92:42:48:27:50:85:4e:cc:10:5a:4b:98:ca:f3:
7f:b8:3e:b6:c5:2a:c2:0a:b6:4b:20:28:bd:ec:25:
cf:75:3c:01:ec:63:76:3a:0c:97:8d:36:fd:71:3a:
37:01:b4:50:54:de:3d:0e:d1:e4:a7:65:f6:da:08:
3e:74:44:b3:24:1a:8c:32:73:32:52:46:54:4c:eb:
08:28:a9:0c:d4:30:83:1c:34:51:9b:1e:7b:d9:76:
85:e7:50:27:14:07:97:e0:cc:8a:91:5c:13:f1:88:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:6D:1E:D8:D6:5D:A6:D1:DE:FC:07:58:89:67:F2:F5:7F:67:2B
X509v3 Authority Key Identifier:
keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:c6:2b:a1:11:11:c8:e3:05:d3:36:d5:c9:5f:47:6c:6f:
c0:24:86:fa:48:d7:93:3e:ec:0d:31:a3:a0:e8:a8:2d:20:16:
ee:7f:bb:a2:90:c4:f5:a5:91:ad:6c:79:b6:33:ae:9c:9c:8f:
1e:78:69:a3:8f:61:e8:7f:c9:3a:6b:2e:35:ae:28:b4:6d:dd:
f5:7e:14:6e:02:a2:25:0a:cb:63:ba:46:ea:7e:ce:14:f0:81:
6f:bc:75:07:c9:86:ef:91:8a:02:0d:c9:fd:3d:71:e4:8a:ca:
df:8f:b8:93:7a:a3:9e:9b:65:c7:97:27:cf:fa:d6:d6:6c:9c:
62:54:e3:da:a2:8a:15:4b:07:0b:1d:65:3b:fc:c9:c4:91:c6:
44:fd:aa:bf:e9:7e:64:31:2e:50:4a:1a:20:ee:5d:43:8d:ac:
a4:63:9e:20:4d:f0:25:cc:71:5f:a9:d2:eb:d7:ea:a7:d8:13:
dc:25:02:ab:34:a4:57:52:cb:fb:db:d9:f3:57:3d:16:31:4f:
1e:5c:80:98:c5:f5:2f:76:ac:4e:14:77:5f:7e:ef:df:ef:b0:
01:34:41:6a:1f:9c:cf:1c:a3:aa:10:4f:40:d5:80:d2:d4:ff:
a4:66:26:56:b9:1d:68:30:92:d4:28:70:3b:c8:23:ff:68:97:
80:8c:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:25 2026 by rpki-client