
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
File: akunmdqw8ib6Y2bG8ceOIqwMBz0.mft (raw, json)
Hash identifier: 73TVdZmYYln3yAbePyDoDccHMTuGiaCL9KHawQ6w51Y=
Subject key identifier: 74:8C:C3:54:AB:3D:E5:63:83:F8:00:FB:42:C9:37:CA:22:8D:F5:3C
Authority key identifier: 6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D
Certificate issuer: /CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D
Certificate serial: 0836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
Manifest number: 082E
Signing time: Wed 20 May 2026 21:02:20 +0000
Manifest this update: Wed 20 May 2026 21:02:20 +0000
Manifest next update: Wed 27 May 2026 21:02:20 +0000
Files and hashes: 1: akunmdqw8ib6Y2bG8ceOIqwMBz0.crl (hash: QZR/bmmyjgn0zIC9mB3adYMdgtiTUlbysxJpwgk6jGU=)
2: FA77145A14EB11EBA13B881DC4F9AE02.roa (hash: faeHoBuW5pyPrYn7uRKHeSH5vSG1vAWVu3ogrrqxmpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl
rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122CB9, serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D
Validity
Not Before: May 20 21:02:20 2026 GMT
Not After : May 27 21:02:20 2026 GMT
Subject: CN=6a0e215c-8b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:d4:4b:79:76:66:97:1d:65:0f:5a:59:17:
b8:55:65:bc:c2:bc:76:32:1a:45:cd:1a:63:0a:04:
59:b1:b9:17:52:58:e9:34:e2:00:d7:f4:0f:3c:15:
ba:8c:31:4c:6f:8b:04:34:9c:cb:11:db:7f:53:d4:
de:ac:9d:11:5a:14:1a:70:9b:97:62:f1:48:82:80:
35:c9:14:be:b8:47:f5:54:e3:be:db:d2:95:eb:a4:
34:98:57:99:41:49:95:b8:5d:c9:f5:30:91:55:e8:
e4:b4:9f:4a:bc:2c:79:80:b0:29:43:fe:88:19:10:
55:dc:d4:d5:fe:da:a5:18:56:1b:df:bd:da:30:57:
65:3d:55:4f:5c:7b:d2:5f:65:ff:19:8d:6c:4a:ea:
73:29:66:d2:5e:ab:1e:8c:2f:d2:59:8b:55:4c:ea:
77:97:c4:c3:69:72:7b:43:c9:ac:52:2a:b9:d0:b3:
e9:5b:b7:c0:0a:8d:34:75:f3:b7:f9:89:56:da:40:
3c:08:53:eb:c7:4a:80:6d:25:1a:45:d1:e0:b6:c9:
42:b7:f3:f0:f8:47:2f:93:89:cd:77:be:36:a2:70:
c0:78:8c:d6:5b:68:c2:ee:61:df:d4:3f:db:f1:07:
ad:13:e3:c6:b6:86:91:18:b1:f9:63:43:b2:62:62:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:C3:54:AB:3D:E5:63:83:F8:00:FB:42:C9:37:CA:22:8D:F5:3C
X509v3 Authority Key Identifier:
keyid:6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8e:40:aa:08:58:c5:4c:ba:8c:df:f0:59:8e:96:8e:55:7d:
81:60:78:9c:a7:f5:e6:a4:d5:0d:03:40:49:ef:ab:a1:b3:1b:
8c:90:1a:6c:ec:5f:90:0a:74:c1:15:a3:de:6b:1f:5b:d6:2e:
9c:a5:84:65:75:d7:12:bd:9b:f6:32:60:b6:2f:fd:62:b1:ea:
25:86:69:b9:11:94:aa:3b:29:5b:87:f5:bb:17:aa:b9:b7:d0:
c3:02:ff:ef:03:dc:19:dc:31:08:80:c9:c1:fe:63:8a:27:dc:
ea:58:1e:a2:ef:21:b0:59:7e:2b:ab:cf:56:10:6a:85:17:f8:
70:64:ec:ac:00:3c:00:dd:a0:9f:13:82:85:27:0b:19:2a:c4:
99:19:2a:7a:c2:f4:ab:cc:6d:f1:c8:ca:51:8b:04:ed:fe:fb:
54:62:41:ea:ef:37:4a:64:66:83:06:88:c2:75:df:22:b8:08:
dd:b9:22:eb:83:e9:5b:9c:1b:c8:2b:67:f2:ca:eb:7a:eb:5e:
bc:bb:71:b2:05:af:2c:87:e0:10:31:a3:47:7f:ca:97:da:5b:
b8:f9:62:e4:56:d4:5c:37:bd:55:c8:1d:8a:80:f3:cb:12:6f:
1b:0c:ba:b7:47:32:d2:90:7c:5b:3f:b9:70:f5:38:e1:aa:18:
58:79:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:09 2026 by rpki-client