
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json)
Hash identifier: ZewRtZp5ORwDdBJ5LgRIfM/srk0xUalGVLwE2j7VMz0=
Subject key identifier: 66:BC:F7:22:FD:00:50:F2:09:00:51:45:60:17:7A:78:63:EB:5D:79
Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Certificate serial: 0A61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
Manifest number: 0A3B
Signing time: Fri 02 Oct 2026 19:59:00 +0000
Manifest this update: Fri 02 Oct 2026 19:59:00 +0000
Manifest next update: Fri 09 Oct 2026 19:59:00 +0000
Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: ANMDPl6QzTunACumkVO0mm7j1fqXSmMR291fex8xSlE=)
2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: H6zmNj7R5OIy7VYT3Pr6iuA/7Vm6RdyVIJ8LHoqjAPk=)
3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: eFWl8WdXIj+kNofP4fkC+jZU3YrcYaXWPE7ujHlFJLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Validity
Not Before: Oct 2 19:59:00 2026 GMT
Not After : Oct 9 19:59:00 2026 GMT
Subject: CN=6ac00d04-9096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:ec:d1:13:69:80:de:54:f1:54:9c:f6:d1:
d6:ea:31:23:f5:6f:e7:98:8c:0b:58:37:c6:a1:31:
cb:1f:ae:a2:7b:b9:70:c7:da:b1:b0:0d:0b:5c:79:
da:38:06:9e:a7:38:27:a5:f3:2a:d4:49:31:5e:ef:
7f:2c:64:34:72:f1:f8:43:c3:89:80:87:ec:bf:ce:
ac:52:db:7c:e3:ba:3b:30:97:01:5e:ce:41:54:77:
1d:3f:64:fb:40:38:15:35:ec:98:73:54:6a:92:08:
dc:e7:60:ad:8d:f9:63:49:e5:b2:dc:60:98:95:df:
0d:de:a2:54:fd:61:4a:31:18:a7:b4:ff:7e:c5:78:
32:88:ba:f3:52:62:4b:f0:2f:39:36:d3:1d:8f:87:
ba:84:cf:0e:4e:64:2a:be:e8:eb:4d:3c:db:bf:99:
c9:35:a1:d5:19:4e:43:6a:72:38:5f:03:31:30:71:
55:cf:dd:5e:45:e4:a1:e6:40:3d:b4:13:6d:bb:a8:
57:30:2e:5f:f7:54:65:71:85:29:8f:53:6d:55:5f:
64:da:cc:f7:79:7f:01:d2:74:c2:0f:1f:86:33:2d:
5b:ef:35:b8:d9:50:f8:78:19:c8:6b:9a:34:6e:04:
9f:a1:67:da:ae:c7:3b:1c:dd:ab:72:70:8b:1c:6c:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:F7:22:FD:00:50:F2:09:00:51:45:60:17:7A:78:63:EB:5D:79
X509v3 Authority Key Identifier:
keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:bc:c1:5b:fe:36:9b:77:81:36:e2:ca:79:58:0f:c2:18:d8:
c7:fe:ec:09:63:51:e8:d1:bd:fe:55:ce:73:64:3f:25:1e:2a:
29:95:59:09:a1:be:4e:58:96:ce:49:06:e8:c0:33:cb:1f:44:
d8:ed:89:bb:8c:b9:3a:e6:e1:e8:89:0c:0c:67:76:0d:08:0e:
01:43:96:53:46:1b:d7:ea:3c:e1:78:3d:4a:5c:a8:fb:46:6d:
e9:87:48:25:a7:1c:d3:5c:57:02:16:89:76:1f:c7:47:e3:03:
6b:ea:f3:25:41:e9:1d:98:70:77:ff:b2:90:03:a0:87:e7:39:
2f:2b:07:4e:a1:d4:f7:af:46:48:a5:28:3f:3f:66:77:f6:80:
23:2c:1d:cf:bf:44:7d:61:c1:d0:aa:84:fb:2f:42:c5:db:34:
bc:5b:6b:93:ff:45:fc:59:26:0e:1c:53:40:52:bd:a0:56:ac:
55:9a:7a:98:32:3d:27:a1:c9:92:5e:d7:b2:85:2f:7e:86:e4:
c0:a2:49:da:66:a7:18:e3:cf:af:97:ba:5e:30:1c:d8:9c:d0:
4a:a1:a2:80:0c:70:5e:c8:ee:42:f3:b2:17:12:e6:95:38:28:
93:fa:7d:51:b7:02:3f:d5:9d:35:eb:0a:e4:4d:75:f7:52:32:
b5:d5:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:52:01 2026 by rpki-client