
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier: yK0PEQc3dyqg8acPP0AO9AyRts1NqFcRX4SeMxuk5zo=
Subject key identifier: 8C:5D:5D:08:46:55:D3:D6:C2:43:B1:B5:EF:1C:FB:CC:92:DD:51:76
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number: 0145
Signing time: Wed 07 Oct 2026 05:55:48 +0000
Manifest this update: Wed 07 Oct 2026 05:55:47 +0000
Manifest next update: Wed 14 Oct 2026 05:55:47 +0000
Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: FeMcv7zrdFE8Fn2LihjmZbse1D5PCIqzk6qjk8gNlcU=)
2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: fhMnOOcqslyy9NxnX7zgTe3J3WzePSNlL2bH73cXkGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Validity
Not Before: Oct 7 05:55:47 2026 GMT
Not After : Oct 14 05:55:47 2026 GMT
Subject: CN=6ac5dee4-da4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:42:4d:d0:72:e9:6d:69:0f:76:b9:b9:3c:
85:49:e7:2c:4a:f3:f4:a2:ec:1f:ca:3c:23:da:69:
a9:9d:29:23:aa:e4:62:cc:8e:e9:17:92:44:d5:0c:
12:ac:a8:84:5a:48:da:5e:5f:06:3a:76:47:0d:15:
ec:ca:c2:b1:62:e7:dc:a5:e0:b7:0a:09:09:b2:63:
2d:0a:8a:a0:87:fd:3b:96:d2:e9:f8:8f:49:f9:5d:
f1:8f:a4:79:f8:63:35:24:11:c2:da:86:bf:e0:c6:
2a:38:56:c3:af:fc:56:99:54:a7:45:3b:66:c1:34:
b2:fb:d0:a8:61:15:26:c8:19:3c:33:d2:0b:3d:9e:
e5:39:82:56:cf:35:27:60:64:4c:4e:a7:9d:ef:9c:
32:30:b4:20:22:64:80:da:45:c7:7d:09:89:c4:54:
06:82:ff:1e:bd:98:08:61:03:7c:b4:21:a0:bf:83:
79:12:7a:10:89:c4:17:ce:65:9b:ac:fb:d5:65:58:
8f:c4:9e:4a:97:1c:03:cb:9e:f6:01:e9:06:bc:d0:
2e:54:7e:34:f0:25:0e:8c:76:a5:fc:b2:e6:52:dd:
46:24:7e:ed:17:c3:c7:35:aa:e7:a3:1e:4f:40:4a:
e6:ff:ff:20:73:3e:b4:5d:76:50:8c:99:00:30:d1:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:5D:08:46:55:D3:D6:C2:43:B1:B5:EF:1C:FB:CC:92:DD:51:76
X509v3 Authority Key Identifier:
keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:55:1f:67:91:87:d0:cb:5f:ac:6d:89:e9:c1:4c:48:84:b7:
47:7c:9b:55:1f:d7:e2:08:4a:9c:e7:b6:38:82:4e:90:bd:90:
d3:82:12:f3:21:4c:ea:4d:b2:20:c0:33:e0:3a:48:39:94:cf:
5d:93:46:eb:32:27:51:1c:f0:c4:d5:1b:43:77:c7:8a:fc:f3:
fd:fb:97:a8:ca:39:ae:e2:7b:a1:2f:63:7a:7c:23:f3:0c:30:
59:56:24:5a:fd:2d:cb:2d:4f:42:71:f2:60:ef:fc:4b:00:a4:
5d:75:2d:44:00:0f:32:0c:c0:36:fc:cd:a6:5f:98:90:fa:00:
5d:cd:11:01:5d:fb:ca:c3:19:03:3b:95:f3:a1:49:99:54:4b:
fc:90:ea:0e:4e:1f:77:f2:6b:84:a3:4b:a0:96:bf:5c:d0:fd:
e1:be:17:e9:80:09:b7:f6:73:0b:db:01:28:ee:64:59:56:56:
b5:83:31:87:45:c5:4a:f8:22:71:af:9f:a8:de:62:19:38:32:
e4:4a:1d:29:ea:f3:a7:ec:5f:ad:43:d1:69:b6:27:b2:27:e0:
ad:ba:07:50:7e:e8:2b:dc:dc:05:a5:e4:4a:60:04:71:ff:ab:
8e:4b:53:59:c9:12:f7:4f:75:cb:11:b8:12:01:13:3e:1a:73:
d2:66:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:01:47 2026 by rpki-client