
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier: FoeMkplY7swtN6+NgMf3AtVAEwVOaUAQy6eYtnh/U1w=
Subject key identifier: 7A:44:07:DF:7B:01:38:C1:EC:C3:B0:07:29:58:6A:CB:87:BC:E8:C8
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number: D4
Signing time: Mon 01 Jun 2026 07:30:03 +0000
Manifest this update: Mon 01 Jun 2026 07:30:03 +0000
Manifest next update: Mon 08 Jun 2026 07:30:03 +0000
Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: B9aM8yuXv8GTrK5uoCW/Wk1TPtbNkToimON9m+pkvwM=)
2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=)
3: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: HOtPEcNNuM1rQs6V4akweCKO9HvoxnkoVdQyxUxgTBk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Validity
Not Before: Jun 1 07:30:03 2026 GMT
Not After : Jun 8 07:30:03 2026 GMT
Subject: CN=6a1d34fb-0d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:cc:3c:23:11:c9:66:00:91:72:83:1d:a7:
f4:3a:38:49:54:4f:7c:a2:1c:60:83:a8:f0:91:47:
94:e8:0e:e5:41:33:c5:3f:b1:96:52:3a:e4:00:91:
85:4c:e3:10:6a:7a:e2:bb:ee:15:8b:e4:13:b8:69:
ab:f6:95:bb:1e:e4:42:db:47:11:93:2a:28:c2:cd:
85:99:1b:71:5d:68:b6:cd:3e:11:86:c0:97:78:82:
4c:31:f0:a8:06:44:69:69:2a:09:52:8d:94:a5:19:
de:8e:5d:f3:5c:b1:a6:59:8e:91:21:12:d3:b8:6d:
fd:80:8a:d7:6e:0d:90:20:a2:d9:3d:a1:71:95:f1:
08:bd:16:06:d8:08:d0:fe:00:ae:09:08:e9:01:11:
6b:44:56:cc:89:23:35:15:fa:e9:20:71:bb:7f:2c:
cf:8a:9d:81:d8:bd:74:ca:e2:9e:f4:bf:f3:90:9f:
2f:55:3f:2f:7f:4e:0a:4e:2e:20:44:e7:22:5c:60:
bd:82:c4:20:aa:6a:79:60:ad:e2:c8:a2:f6:79:da:
12:29:88:db:c5:8a:ef:9c:e7:f5:8d:d3:9f:67:c3:
3e:13:4d:9b:2a:67:29:5f:3d:81:c2:57:d1:f3:40:
28:ff:83:66:c5:7d:e1:ed:15:f2:83:15:78:ac:3f:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:44:07:DF:7B:01:38:C1:EC:C3:B0:07:29:58:6A:CB:87:BC:E8:C8
X509v3 Authority Key Identifier:
keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:94:e5:5c:d6:7f:85:eb:f7:3d:e2:c9:6a:51:02:30:b3:da:
0e:a4:a8:1e:00:3e:88:a8:a4:84:25:44:83:99:98:1d:c1:cd:
8b:ba:81:52:48:84:c2:53:18:91:23:00:12:cf:7b:66:d4:b4:
57:c7:5b:c3:57:34:ae:91:8b:7a:eb:35:ae:15:d7:f7:b9:2f:
25:18:b0:51:b3:6d:7d:0d:7a:8f:07:a3:3f:8d:c7:80:66:44:
4a:c3:b2:c9:b3:9f:72:f7:30:d3:e9:60:c4:2f:e6:28:31:57:
f2:f7:e9:2b:68:c5:da:b7:7c:7e:a9:12:8c:9f:cc:b9:4a:a1:
ae:ed:b6:a9:ed:33:71:eb:ab:9a:c7:a3:ff:e5:7d:21:cf:0d:
42:93:c6:97:a4:d3:04:1a:40:0f:33:ab:33:18:1c:6f:f3:97:
2b:b4:a6:9f:5d:50:9c:20:6d:42:cc:2b:23:cc:ab:ef:2e:9a:
08:01:a0:ab:f4:3a:0e:d0:d7:ef:6c:d1:4d:7d:11:8a:e6:89:
46:51:a8:4d:33:f6:ac:79:1d:20:5c:04:1c:c4:ca:32:a3:4f:
25:31:f7:79:dc:dc:8d:80:3a:ea:d1:e8:0e:14:19:1c:84:e6:
70:a7:0f:63:d6:4e:f9:94:85:b1:30:a4:01:02:71:b2:af:51:
c3:9d:2e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:21:08 2026 by rpki-client