
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json)
Hash identifier: zXZIsiVCmbobHqL1jKaccrTKAJdSVR/0kZ0jrkb0uX0=
Subject key identifier: 1A:8C:28:85:C4:29:E0:3B:55:1E:69:09:EA:FB:41:F0:F8:97:B5:B3
Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Certificate serial: 3523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
Manifest number: 3523
Signing time: Sat 04 Apr 2026 15:08:03 +0000
Manifest this update: Sat 04 Apr 2026 15:08:02 +0000
Manifest next update: Sat 11 Apr 2026 15:08:02 +0000
Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: Zt87nD1TwlLV20OUa13vFf+N5b0UlmqTZ89DBfPVU5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13603 (0x3523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Validity
Not Before: Apr 4 15:08:02 2026 GMT
Not After : Apr 11 15:08:02 2026 GMT
Subject: CN=69d12952-47e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:25:4f:5b:96:b2:8b:b3:f1:6b:19:83:39:
c6:50:1d:c6:d5:7e:c8:01:d1:1b:69:c7:39:ce:b1:
9d:94:df:d9:dc:01:01:75:86:f3:00:01:3e:de:3f:
66:f1:66:33:ee:59:10:0c:75:af:d8:15:df:2b:94:
df:85:63:a7:4c:8a:21:ff:55:77:dd:36:cc:72:0a:
59:7e:b8:bc:e4:0b:17:db:ab:df:db:96:3f:3d:7f:
19:04:3b:3a:ac:63:77:db:58:3b:7d:eb:ed:35:e0:
d4:7a:10:8a:92:76:cf:dc:ba:ae:3a:76:be:0e:fd:
96:fc:9d:1d:d8:f8:c6:b7:c8:cf:60:e2:19:8e:6f:
29:60:43:02:ae:92:df:7f:89:eb:df:7f:e8:cb:29:
32:a3:20:34:62:e8:1a:25:5c:3e:3d:a8:d0:1a:1d:
68:b0:62:56:18:2c:b2:6e:02:d4:1e:26:26:f7:af:
32:b7:8f:1b:7a:81:ed:a4:0e:e7:e8:51:32:f5:8b:
2e:8a:02:e5:f3:12:01:c9:e2:97:73:99:81:16:7c:
b2:2e:e5:14:7c:90:76:bd:fd:aa:eb:1a:d2:71:9e:
33:81:7b:6f:71:e5:80:70:19:97:7e:29:fe:73:0b:
06:e1:d9:84:13:26:50:a0:f5:72:e2:47:86:77:1a:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:28:85:C4:29:E0:3B:55:1E:69:09:EA:FB:41:F0:F8:97:B5:B3
X509v3 Authority Key Identifier:
keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:dc:f0:77:24:0a:53:d0:04:95:99:c1:d4:64:54:ec:dd:89:
7d:bf:2f:3a:71:0f:23:5e:bd:d3:36:d1:42:96:bb:e7:86:45:
b3:21:ef:db:9e:b4:6b:d8:42:1a:97:cb:0b:20:4a:72:82:38:
c3:e6:b3:6e:6c:1e:69:1b:b7:6a:19:aa:88:da:17:d0:29:f0:
11:05:23:a7:03:36:73:ff:84:86:9b:d1:08:d7:0e:f2:21:45:
c8:56:62:68:18:47:a9:45:8c:0c:aa:bb:f9:ac:bc:b2:21:6a:
af:85:4b:cb:76:74:91:9b:ca:29:8f:3f:44:56:b7:c0:1f:96:
f6:0c:65:82:20:da:a2:49:13:56:9d:02:42:c0:a4:d6:48:d0:
04:4d:21:97:8f:67:b7:de:fe:e2:78:c9:93:7a:c9:91:6a:62:
7a:06:3a:48:8e:ab:82:48:36:8d:5f:cd:06:4b:83:e4:89:45:
6d:d3:fd:7f:3e:97:86:9c:65:62:58:14:7a:63:10:b8:69:4a:
4a:42:15:73:9e:e3:c2:e9:b4:e1:0b:fa:1a:76:44:a9:c5:be:
6f:05:fb:f7:a0:db:20:e5:25:a8:09:08:12:d3:c1:64:f8:d2:
18:25:dc:46:5f:98:63:28:f3:a9:33:ca:5d:cf:9e:45:80:e6:
b4:50:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:16 2026 by rpki-client