
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json)
Hash identifier: 08TGzfX++tVaxifndn0AWlsYh6hBsUg8YcR198ztnuU=
Subject key identifier: DC:B5:93:DD:36:91:5C:27:C1:08:DF:C3:CE:92:E8:B8:F8:45:1A:20
Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Certificate serial: 0E8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
Manifest number: 0E74
Signing time: Tue 18 Aug 2026 17:58:09 +0000
Manifest this update: Tue 18 Aug 2026 17:58:09 +0000
Manifest next update: Tue 25 Aug 2026 17:58:09 +0000
Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: ZJq/UyrWCxpvPlLX8OIfIrwF4DrFhYJarArR83NkF34=)
2: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=)
3: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3727 (0xe8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Validity
Not Before: Aug 18 17:58:09 2026 GMT
Not After : Aug 25 17:58:09 2026 GMT
Subject: CN=6a849d31-0d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:85:43:d9:b5:eb:bf:a9:88:7a:0a:74:6f:
51:95:b0:e9:f6:d6:8d:aa:0f:82:27:5b:f7:0b:fb:
07:8f:be:15:1b:32:1d:27:21:6a:64:8a:42:0b:06:
c0:30:97:f7:9d:2a:b2:34:a3:1b:cb:0f:ff:5f:fc:
89:70:b7:99:10:a7:5c:a3:8f:57:04:6a:f9:79:51:
cf:8d:60:1f:94:cf:78:c1:80:57:13:a4:c9:a2:f2:
61:8c:13:68:67:5f:31:46:8a:57:d6:1c:77:1b:d1:
bc:cb:38:26:09:f0:eb:16:26:e7:1c:b7:fc:df:7a:
32:7e:f7:71:37:88:74:ef:b8:07:8f:0e:f9:5d:fb:
29:70:19:e0:6b:76:6d:73:0f:3a:01:da:8d:a2:10:
f9:9e:5d:fd:ea:10:68:34:d7:76:8a:e3:ff:ae:16:
69:c6:d0:1d:cc:fe:5f:0a:f2:9c:f7:da:73:e8:97:
92:e3:4a:d6:e2:e3:4a:9f:8d:84:92:ca:5c:60:9e:
7b:89:16:dd:26:f6:51:b5:d2:5a:45:19:60:fd:e0:
32:40:45:f2:64:18:62:3b:d5:30:d6:a3:bc:bb:2d:
41:6f:49:b6:94:dc:f2:ff:85:84:49:dd:e4:54:45:
5d:e3:2f:41:cc:5e:20:ee:ee:5e:f6:b1:1c:2a:99:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B5:93:DD:36:91:5C:27:C1:08:DF:C3:CE:92:E8:B8:F8:45:1A:20
X509v3 Authority Key Identifier:
keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:92:9f:36:d8:e9:42:7d:3d:2f:2e:9d:6d:38:e1:ec:38:11:
64:6d:23:db:b5:f8:a2:58:5b:aa:32:bb:a9:87:e9:37:32:f2:
8b:07:d9:a6:ae:47:ba:fc:8c:3f:85:ca:37:81:c3:02:f2:37:
b4:97:da:81:d0:3c:55:94:6f:e1:03:15:91:17:c6:0b:c0:77:
17:51:14:20:fd:78:4e:3a:7c:0f:8f:5b:dc:fc:52:ec:41:aa:
f2:74:b6:14:19:af:5a:a6:c3:76:bf:ae:0a:2f:b8:27:30:97:
5d:27:e2:6b:2e:2b:fe:d9:91:80:5f:f6:3e:87:f4:eb:80:15:
2d:a3:fe:48:d6:34:af:5e:ef:de:5e:78:6d:be:c9:98:32:03:
95:1b:08:0b:a9:eb:ce:30:09:83:c0:c7:a3:bc:30:99:d9:79:
95:9f:20:9a:7f:89:af:b5:35:c7:ed:79:43:ff:63:b8:f1:71:
7f:09:8a:1d:53:c3:0e:ce:20:56:88:03:38:e5:28:95:ca:4b:
f9:81:8d:a4:63:c9:4a:df:7a:e6:f8:ba:20:ff:29:d6:2d:d1:
00:28:9f:a5:90:46:01:01:e6:f8:43:b0:eb:50:d1:ff:53:72:
7c:b9:73:5d:a8:ab:8d:19:a7:d6:c8:fd:fb:95:ce:cc:4e:72:
2f:bc:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:06 2026 by rpki-client