
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json)
Hash identifier: MTQdbVp/TTH02VMJFSc/TweDx0Hp6jHeTuNaYTAAqK4=
Subject key identifier: F4:9C:EC:CD:DF:0D:7C:7B:F8:82:35:D8:C9:A6:8E:19:29:8C:DC:69
Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Certificate serial: 0EA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
Manifest number: 0E8C
Signing time: Sun 04 Oct 2026 17:46:54 +0000
Manifest this update: Sun 04 Oct 2026 17:46:53 +0000
Manifest next update: Sun 11 Oct 2026 17:46:53 +0000
Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: W0+LE7hE2MG8cY/PX1/U0Cz0VOx37izYAjGDXbkKFnA=)
2: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=)
3: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3751 (0xea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Validity
Not Before: Oct 4 17:46:53 2026 GMT
Not After : Oct 11 17:46:53 2026 GMT
Subject: CN=6ac2910d-e881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:c3:b9:51:81:51:19:4b:ca:cb:dd:f6:fe:
96:11:02:00:53:4d:4a:90:7e:75:d3:5a:2f:45:af:
0c:39:74:b5:75:26:1a:e1:8c:57:45:e7:03:f0:d5:
77:07:47:d4:25:f0:17:d3:2b:1f:bd:45:2a:d3:45:
43:3e:00:e2:b5:c9:2a:b2:e1:c2:af:65:8f:c7:33:
54:34:1c:c8:2d:af:bc:12:4d:fe:28:09:94:a9:c6:
29:92:e1:50:b5:2a:e5:0e:ff:19:e3:62:08:ad:2f:
f3:c9:d1:43:72:5c:f2:09:18:d1:ca:db:6f:12:ab:
96:36:c0:7d:96:be:45:fa:7e:e4:ab:76:c6:50:d1:
04:45:b0:0d:3e:29:3e:a3:fe:59:c8:7f:2b:c2:42:
95:df:bb:f2:f3:fd:6b:90:4e:d1:ce:f3:e8:ca:81:
3d:ea:cc:80:36:20:89:dd:f2:12:fc:16:8d:83:28:
05:9d:1b:d0:2d:9a:d6:1f:51:64:69:95:a3:7a:f1:
49:bc:9b:1b:7f:25:c6:6e:fb:1d:45:21:1d:63:0f:
38:95:7a:40:36:d1:74:2a:57:21:ab:51:e8:f9:7a:
9b:51:2d:7e:42:24:57:3e:63:54:69:90:71:75:ea:
90:c0:4c:fa:ef:8a:d5:c3:e7:c8:db:f9:d3:53:48:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:EC:CD:DF:0D:7C:7B:F8:82:35:D8:C9:A6:8E:19:29:8C:DC:69
X509v3 Authority Key Identifier:
keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:db:d3:da:84:fb:7a:a9:b9:e0:7e:de:94:6e:96:44:cc:
46:8f:fd:46:f1:72:20:15:41:25:56:a5:4c:15:94:8c:40:c9:
e6:85:19:cd:17:d3:ea:7c:2a:c6:3c:e9:01:ea:4d:15:6a:12:
f3:30:08:1a:fc:37:9b:f9:20:03:93:5a:0d:fa:c7:47:aa:63:
31:5e:06:8d:e4:07:a3:c3:0a:5e:de:58:1b:af:b7:7b:47:8c:
d4:fd:ab:ba:ff:dd:7e:02:f3:37:90:4f:36:81:c3:9e:71:4f:
70:66:df:af:b9:cd:c4:6a:36:ee:81:aa:a8:6d:27:ee:c6:2c:
65:c4:37:bb:95:dc:47:72:13:a3:a9:89:5b:85:00:47:20:ad:
e3:de:17:49:4d:5d:e5:75:42:25:06:de:a1:82:e4:90:d6:eb:
65:8e:7a:ab:fb:18:1d:9d:18:3a:7a:6d:26:72:7d:11:0f:0b:
a2:45:13:98:54:18:a9:74:c7:62:20:25:1b:3c:31:29:ed:af:
0a:41:ab:1d:f1:2c:af:90:b3:6b:e6:ef:37:67:b0:2c:9a:86:
ef:6c:5d:61:89:43:43:12:e9:df:92:ad:ad:c8:be:a1:46:4a:
7b:92:f4:bd:d2:6e:17:c8:a9:df:bf:07:1c:09:e5:47:67:06:
8e:a0:14:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1
NTJCNERFODUwHhcNMjYxMDA0MTc0NjUzWhcNMjYxMDExMTc0NjUzWjAYMRYwFAYD
VQQDEw02YWMyOTEwZC1lODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2FHDuVGBURlLysvd9v6WEQIAU01KkH5101ovRa8MOXS1dSYa4YxXRecD8NV3
B0fUJfAX0ysfvUUq00VDPgDitckqsuHCr2WPxzNUNBzILa+8Ek3+KAmUqcYpkuFQ
tSrlDv8Z42IIrS/zydFDclzyCRjRyttvEquWNsB9lr5F+n7kq3bGUNEERbANPik+
o/5ZyH8rwkKV37vy8/1rkE7RzvPoyoE96syANiCJ3fIS/BaNgygFnRvQLZrWH1Fk
aZWjevFJvJsbfyXGbvsdRSEdYw84lXpANtF0Klchq1Ho+XqbUS1+QiRXPmNUaZBx
deqQwEz674rVw+fI2/nTU0g7MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSc7M3f
DXx7+II12MmmjhkpjNxpMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2
OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4
UlhZS0EwTGtPNzlWSzAzb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANkXb09qE+3qpueB+3pRulkTMRo/9RvFyIBVBJValTBWUjEDJ5oUZzRfT6nwq
xjzpAepNFWoS8zAIGvw3m/kgA5NaDfrHR6pjMV4GjeQHo8MKXt5YG6+3e0eM1P2r
uv/dfgLzN5BPNoHDnnFPcGbfr7nNxGo27oGqqG0n7sYsZcQ3u5XcR3ITo6mJW4UA
RyCt494XSU1d5XVCJQbeoYLkkNbrZY56q/sYHZ0YOnptJnJ9EQ8LokUTmFQYqXTH
YiAlGzwxKe2vCkGrHfEsr5Cza+bvN2ewLJqG72xdYYlDQxLp35Ktrci+oUZKe5L0
vdJuF8ip378HHAnlR2cGjqAU2g==
-----END CERTIFICATE-----
Generated at Tue Oct 6 17:57:15 2026 by rpki-client