
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier: TMKsbiPgEbHOCFgh97yWk/GQXRWsOpnlV3901hs3yzc=
Subject key identifier: 15:B6:9F:B0:2F:71:A1:81:7C:6F:F9:2A:1A:E7:AD:2D:35:88:8A:4D
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number: FC
Signing time: Fri 15 May 2026 06:22:26 +0000
Manifest this update: Fri 15 May 2026 06:22:26 +0000
Manifest next update: Fri 22 May 2026 06:22:26 +0000
Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: idXyNpDvrtGm5dwirb6Od7J4MP3K5Utux7JWHoHA+oo=)
2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: fhMnOOcqslyy9NxnX7zgTe3J3WzePSNlL2bH73cXkGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 06:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Validity
Not Before: May 15 06:22:26 2026 GMT
Not After : May 22 06:22:26 2026 GMT
Subject: CN=6a06bba2-29d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:59:17:90:22:35:2c:f5:57:d4:6b:c4:7e:
01:2e:25:b5:51:79:eb:4f:fb:c9:64:82:63:45:3a:
44:95:cf:0b:1f:98:12:5a:a4:11:fc:0b:44:a8:7e:
0e:5e:94:8c:5c:fe:1e:b4:16:7e:f7:a4:e0:ef:6d:
a0:0a:6a:ae:44:bb:b6:10:71:31:de:c4:1d:fc:df:
27:ee:19:ba:89:5d:eb:04:8a:66:55:1d:c1:67:72:
43:c0:d5:f9:ea:60:6f:c0:2e:56:c6:3b:ec:d1:f9:
0e:c2:53:da:82:4f:8d:19:18:64:79:15:e9:98:3b:
ba:05:76:8e:41:90:08:17:2b:7f:2b:68:e1:58:57:
06:61:94:03:9d:af:33:95:30:86:be:e9:93:36:94:
93:0a:3a:7a:af:c8:8a:a9:6b:7b:b1:ec:32:a2:34:
c5:20:e9:63:78:68:d5:09:18:29:6e:78:59:cb:e7:
b5:24:01:95:4c:a8:71:c4:2c:39:99:98:bf:f1:59:
33:81:f4:65:33:5d:b3:57:41:c5:52:70:38:2c:59:
0a:8a:e4:db:2b:9b:dc:a7:b5:bb:e3:1d:c7:4f:15:
06:a1:31:2a:15:36:5f:c9:57:3b:2f:de:55:22:d9:
77:c3:cd:7a:91:7a:c1:64:a8:8d:3b:38:1b:3c:07:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B6:9F:B0:2F:71:A1:81:7C:6F:F9:2A:1A:E7:AD:2D:35:88:8A:4D
X509v3 Authority Key Identifier:
keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b9:40:8f:8f:3b:6d:3b:a6:fc:96:43:4f:a4:d0:4e:92:4b:
38:86:fe:97:ba:11:7a:ce:2a:d4:24:fd:c8:06:09:5a:62:96:
3f:a9:b1:c8:bf:71:83:14:28:5c:49:a0:88:b1:e0:82:b1:e8:
b4:3d:a2:21:23:03:4f:92:1f:7f:01:61:8f:46:35:a4:1d:db:
82:5a:56:1b:84:80:6d:f2:3d:2d:d4:fc:cd:68:a7:9e:21:c9:
db:1f:76:5a:ae:db:b9:41:42:d0:10:08:36:e3:a2:02:21:2f:
33:97:8d:3a:ba:20:63:f9:53:5a:51:9b:48:55:8c:20:1c:89:
6f:83:1c:56:56:3e:e7:68:32:be:75:30:1b:b5:88:b1:fa:35:
10:c8:30:74:4e:2f:62:18:37:29:ee:61:9b:e1:7a:f6:d2:6b:
74:55:d2:7c:74:39:26:5f:9a:49:13:74:08:e6:f1:f8:77:23:
3d:73:c7:17:ac:92:e4:94:0e:71:8e:7b:4f:9c:5c:cb:7f:d8:
db:c0:91:13:d6:6d:8d:7f:81:bf:d0:1c:64:80:39:57:43:d8:
6e:06:61:10:c1:10:22:54:03:41:17:1f:49:53:ae:c6:7b:7d:
82:0a:e6:d6:92:05:bb:c9:da:c5:71:19:bc:7f:22:fc:12:32:
19:64:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:47:11 2026 by rpki-client