
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json)
Hash identifier: ExN9YAs0fxcP/Z4V1BQxyaofjyfOzeLTlw7ZKKgKlPQ=
Subject key identifier: 42:2D:0D:11:F4:B2:89:26:23:84:1C:25:CB:03:54:D9:8A:92:28:5E
Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Certificate serial: 3581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
Manifest number: 3581
Signing time: Sun 04 Oct 2026 15:09:39 +0000
Manifest this update: Sun 04 Oct 2026 15:09:38 +0000
Manifest next update: Sun 11 Oct 2026 15:09:38 +0000
Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: a/9IhcheFcu30LOUC8mY6ygwaKZkeoedbr2Nrf8GyoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Validity
Not Before: Oct 4 15:09:38 2026 GMT
Not After : Oct 11 15:09:38 2026 GMT
Subject: CN=6ac26c32-1bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:a7:75:95:91:37:ab:06:ff:51:8c:c1:eb:
43:f5:83:31:3d:0a:07:03:5f:9e:4b:cf:56:a4:e0:
0f:d6:2e:f8:b6:02:e0:31:07:e6:70:60:62:f7:7a:
4e:c7:fe:43:eb:fc:89:c2:fe:f2:ea:7b:57:a6:c1:
67:80:a7:6a:b8:23:1f:52:90:d2:a1:c8:19:ab:6a:
35:44:08:91:35:47:81:4a:92:87:0d:fe:c1:d8:54:
bb:05:8e:18:b4:b4:e7:4b:d5:b0:12:c7:db:1b:8f:
40:48:06:7e:6d:b9:79:b9:39:1f:81:b0:a8:25:84:
aa:b5:ad:5a:04:94:f8:d4:0c:f1:c0:b7:92:87:26:
d4:52:dd:3b:71:6a:92:d0:a0:0a:f3:73:85:74:30:
0e:11:23:65:73:e0:54:a7:49:3b:3a:b7:f6:33:2a:
55:91:85:63:18:df:af:82:0e:40:bd:0f:df:6c:7b:
44:49:f5:de:10:64:77:96:df:b1:76:10:c0:36:ec:
58:d4:f0:59:3d:c7:d7:43:5b:07:e7:87:60:65:c7:
cd:f5:57:fe:ac:b4:1f:19:9c:ee:87:00:d2:ef:d6:
44:47:54:ea:91:e2:87:11:a2:4d:bc:86:90:33:3d:
ff:c1:8e:63:c7:69:f8:47:d8:68:20:82:2e:a0:b3:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:0D:11:F4:B2:89:26:23:84:1C:25:CB:03:54:D9:8A:92:28:5E
X509v3 Authority Key Identifier:
keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:76:e3:1b:ab:c1:0d:24:2c:a2:2b:8b:1b:67:cb:67:8b:
cd:97:64:6f:c4:b9:71:42:86:0c:a7:95:c0:7f:17:1c:6a:76:
65:46:3b:2d:51:f6:ac:96:84:01:f1:91:53:51:bd:eb:c9:4b:
48:e7:5b:97:57:e6:0d:3f:16:0e:1c:c7:c3:1d:23:19:6a:54:
c4:b9:2c:3e:8b:6d:2c:0d:80:d3:d5:af:58:54:87:a3:1b:c3:
d2:a9:5e:aa:62:be:7d:48:e4:87:9c:c0:31:83:b4:ef:61:85:
00:2a:55:16:1b:00:8c:84:fa:24:da:b2:9f:ed:e7:6e:5c:28:
2a:9f:56:a1:59:5c:c3:cf:99:48:24:59:5a:48:85:47:42:11:
2f:1f:60:4c:67:53:05:38:fa:96:81:ce:0d:5a:02:f4:0a:85:
9b:40:18:51:58:bb:c9:16:34:b5:3c:b4:37:f7:36:fc:05:35:
13:a9:36:80:c4:88:a2:5a:40:c8:d7:b0:36:bc:c6:4c:93:cc:
31:2a:e2:c6:3e:cb:34:dd:5b:09:bd:2a:60:f2:13:cb:69:8e:
3c:4c:a5:79:99:c2:25:4c:75:0e:3c:42:4f:b3:e1:03:b1:e5:
2d:d5:5e:6c:ab:e6:e7:6a:7c:02:d5:a8:62:01:bd:7f:12:f5:
71:a0:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:36 2026 by rpki-client