
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
File: yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft (raw, json)
Hash identifier: 5fMWH0LdHcatQ798vrXHr4voTPdagXDrfuleRUZpE4o=
Subject key identifier: 81:A8:2A:E7:25:A5:83:40:0B:F5:B0:E6:CF:A8:88:2C:EF:DC:27:96
Authority key identifier: C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
Certificate issuer: /CN=A9115A7C/serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
Manifest number: 07
Signing time: Wed 19 Aug 2026 09:55:41 +0000
Manifest this update: Wed 19 Aug 2026 09:55:40 +0000
Manifest next update: Wed 26 Aug 2026 09:55:40 +0000
Files and hashes: 1: yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl (hash: Kd0qxckKjprB9KSYRLTdTlgGBo4PUm8C/+4BTy8RY7g=)
2: 36E2673093A511F1A63A7D946011F970.roa (hash: YQjNMHo8sTM3LQcrU6VgB0vtk3GGCVQb//8/KSSTf30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl
rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115A7C, serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Validity
Not Before: Aug 19 09:55:40 2026 GMT
Not After : Aug 26 09:55:40 2026 GMT
Subject: CN=6a857d9d-32a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:16:50:dd:b4:aa:2f:06:29:de:01:77:be:
cb:11:69:f7:80:4e:ff:97:de:42:5f:14:94:19:89:
7a:48:f3:8e:70:8f:50:4d:8d:8e:7f:80:28:00:a0:
b2:1a:37:30:80:bb:eb:81:ee:0f:ef:c6:30:fe:cb:
a4:b6:53:dd:42:d0:56:e0:44:4f:87:b8:bd:a3:4c:
32:ad:6d:36:a0:c4:22:56:3b:70:c5:c2:fe:3f:ee:
91:7e:93:2f:2a:15:bc:d2:56:d1:e0:e9:c0:9d:e1:
a3:dc:8b:34:57:00:00:74:d1:75:15:22:b9:36:1b:
c4:94:aa:d8:be:92:93:20:8f:57:e1:dc:b4:51:1d:
1e:6c:bf:54:a2:47:32:3a:4c:bf:41:2e:a8:2c:c7:
0f:94:6d:cd:f2:da:6d:25:b9:d4:7d:1c:8d:39:b8:
cd:8d:ec:a7:c3:d2:99:b1:c0:97:02:07:ae:2c:de:
41:ab:50:e4:f9:b9:a5:c4:9e:5c:c6:81:09:af:66:
50:1a:5c:f3:ab:aa:e2:8b:61:5a:0c:b6:67:ed:e7:
1e:61:f4:33:71:bd:e0:26:0f:a9:6d:5c:e2:61:4b:
8e:8e:16:12:25:bf:64:b2:2b:ae:bd:f2:4d:e0:f0:
41:5a:51:95:d4:f3:07:64:3f:6b:a3:18:18:5c:a8:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A8:2A:E7:25:A5:83:40:0B:F5:B0:E6:CF:A8:88:2C:EF:DC:27:96
X509v3 Authority Key Identifier:
keyid:C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:d6:a2:5a:c3:cd:7a:2f:9f:cf:a7:6c:29:7d:eb:51:29:
ed:9c:7d:45:1d:a3:56:32:28:dc:8d:e4:78:b3:b0:04:e3:40:
e4:8a:1a:53:1a:b0:d8:45:a0:37:8c:b3:c8:b7:d3:6e:69:d1:
ef:fb:10:84:50:72:8d:d8:20:dd:87:a1:21:64:cd:e1:49:a8:
8e:2a:80:4f:b9:5c:25:b7:de:44:f6:40:45:ef:5e:99:4f:b0:
12:dc:dd:2d:22:d9:7d:e6:4c:d1:e8:ef:3d:56:04:bb:bd:f9:
3a:7f:f1:bc:a0:0a:8f:58:33:63:76:46:0b:10:8c:fd:e3:4c:
d3:93:26:72:3f:62:48:08:36:c0:4b:1d:49:ec:03:81:e7:cb:
87:35:83:e4:c9:b0:86:b5:94:76:1c:87:94:ed:58:10:ac:00:
58:59:15:d0:da:41:48:b1:1b:ca:37:da:4c:da:ad:54:42:9e:
d2:e1:be:c7:1c:43:9c:bc:29:5d:25:05:36:8c:d7:00:21:56:
db:e2:7d:24:45:cd:74:2a:41:1c:82:9e:03:25:3a:d0:23:19:
71:a7:10:63:0f:76:18:a3:2b:e3:76:55:e4:12:97:30:5b:9f:
1b:91:86:ba:ea:8c:52:33:a6:1a:3e:09:9b:37:f7:61:53:18:
66:83:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:53 2026 by rpki-client