
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier: GzWV1vzxPfqwXcgy2M4e9OQpFXkjFtq+ohn9mwxZepI=
Subject key identifier: 4E:75:9B:5D:10:0E:A1:5C:31:CA:AA:E3:75:F8:19:A5:CE:8C:D9:27
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number: B6
Signing time: Sun 05 Apr 2026 06:26:31 +0000
Manifest this update: Sun 05 Apr 2026 06:26:31 +0000
Manifest next update: Sun 12 Apr 2026 06:26:31 +0000
Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: CnuD/9R0dHPIPZkt2xCetMKf9wJD96J7Jen6sQcTIEw=)
2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Validity
Not Before: Apr 5 06:26:31 2026 GMT
Not After : Apr 12 06:26:31 2026 GMT
Subject: CN=69d20097-ae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:91:58:a3:1e:62:a5:e1:89:16:04:dd:37:
51:d8:29:36:a4:1c:c7:f5:08:12:36:38:7c:54:b5:
86:53:95:d5:2e:16:15:eb:18:c3:0f:20:27:0f:89:
4b:f1:87:f9:7b:12:5d:2d:39:d8:54:93:2b:d5:ff:
5e:00:f0:4b:99:ed:52:d0:b0:72:a8:97:1c:9c:9d:
76:a4:9c:99:95:ba:d5:32:b8:4b:6f:d5:71:15:cd:
b6:58:e1:17:98:6f:f4:32:13:8c:97:c2:51:0b:e2:
ee:79:6d:a3:2b:60:bb:22:72:8b:03:d1:a4:c6:cd:
5f:b9:c1:fe:ec:f9:43:19:0b:8d:ec:40:68:86:d8:
e5:6d:a0:e2:71:65:f3:cf:ba:f8:e1:10:06:f4:21:
fa:18:25:e2:99:a3:3c:c6:1e:5e:5f:60:c2:d1:ee:
5a:3c:93:a8:e6:a9:3a:9b:8a:9e:5c:b3:63:aa:be:
41:2c:da:ba:53:f2:c1:73:00:57:c0:07:3f:dc:75:
ce:9d:c2:1b:85:25:17:a3:c0:e1:ee:1c:87:ba:d3:
59:c9:f8:ba:2a:42:d2:57:ac:09:dc:a1:7a:ab:bd:
c1:12:1d:09:17:8e:0c:8c:b1:24:e8:f3:a0:bb:d4:
78:02:3f:95:fb:f9:41:57:57:0c:8a:e6:24:55:1d:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:9B:5D:10:0E:A1:5C:31:CA:AA:E3:75:F8:19:A5:CE:8C:D9:27
X509v3 Authority Key Identifier:
keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:fe:7d:49:70:19:e6:5d:66:c9:a2:fb:5a:42:0f:ad:39:
51:a2:dd:df:e5:88:7b:b5:42:7b:e2:47:6c:72:c0:ad:82:9d:
bd:ad:13:70:82:4e:9d:71:7a:54:6a:d6:dd:b5:2a:34:7f:d4:
0c:25:90:f0:53:f7:4f:0f:e3:96:2a:fc:ad:80:f7:c8:fa:af:
f9:67:87:96:f9:82:03:4b:f6:e7:2c:91:61:3c:76:83:c9:4f:
52:94:c9:ba:ab:95:a0:c0:46:bc:a1:0b:2c:a4:e1:ac:96:a2:
0f:55:36:42:38:9f:30:01:7b:fa:ff:42:2d:c9:53:26:b4:56:
3b:3b:61:82:cc:aa:2c:c9:f5:1d:f2:6e:66:64:9c:d7:93:b0:
04:33:f4:61:2a:c8:f9:fa:ff:49:b3:3b:45:aa:f4:01:2f:45:
4a:c0:36:be:84:15:d4:08:47:05:df:b6:ab:cb:49:06:6b:97:
d1:e2:c7:01:e5:c5:38:b6:b7:56:bb:e0:ac:cc:77:66:4c:c9:
19:42:86:75:65:2e:1b:8f:bf:ff:e3:5d:5f:c0:3d:7e:5e:b8:
fa:af:d1:ce:45:10:38:28:d9:cf:a7:a6:f6:ae:aa:43:9f:c8:
4f:80:bc:c8:ec:50:13:39:ed:07:8f:57:1d:2f:a6:05:5c:0a:
fd:91:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:38 2026 by rpki-client