
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json)
Hash identifier: N6rucfue0oXmMvPHKdKEAN/Y3Di0z5xHdjrtSv3Pymk=
Subject key identifier: 82:76:4B:54:1F:87:03:74:47:4B:60:3B:80:5A:E9:4F:EC:36:43:2B
Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Certificate serial: 0E61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
Manifest number: 0E46
Signing time: Wed 20 May 2026 17:48:02 +0000
Manifest this update: Wed 20 May 2026 17:48:02 +0000
Manifest next update: Wed 27 May 2026 17:48:02 +0000
Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: IXujwyER7XrXLlpjT/P2m7WZ/OTFVXz56rRqunpqlsg=)
2: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=)
3: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Validity
Not Before: May 20 17:48:02 2026 GMT
Not After : May 27 17:48:02 2026 GMT
Subject: CN=6a0df3d2-3573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:46:04:a5:98:6d:9d:de:79:47:90:a5:68:
d4:f6:04:7b:da:60:92:c7:f5:99:1c:4b:d3:0e:c7:
22:2c:bd:97:18:60:52:44:c9:a5:a5:63:ee:4a:29:
58:47:52:cc:20:05:29:40:83:6c:95:20:4e:84:e6:
51:16:f6:f6:d8:f0:f9:00:81:96:07:2c:cb:5c:91:
6d:9c:3f:f5:d2:ed:ff:7e:67:d1:71:32:5f:27:96:
54:24:d8:0c:5b:c6:ef:b6:04:30:95:e1:07:5d:78:
4b:74:da:c3:fd:6a:d3:f3:61:1b:83:58:c3:a2:34:
2d:ea:e5:cb:f3:1d:57:3e:86:1b:ff:fc:22:3f:38:
c5:bb:66:53:b2:de:c6:9d:2e:4e:4e:b7:05:75:72:
a4:0a:14:f1:1b:39:50:4b:49:07:5e:2f:14:d0:ff:
cd:11:71:93:d2:1d:80:0e:43:44:2f:89:b5:56:6d:
db:70:00:1b:da:35:46:09:f2:5d:22:50:40:6d:3b:
e1:d4:3f:85:26:90:23:70:fc:03:e0:f4:26:f6:95:
be:c9:2e:bb:d7:33:55:f2:70:49:de:9e:b5:28:f4:
fc:6f:16:f4:9a:bf:5d:58:8f:bb:0e:2d:27:d5:6e:
a2:b8:b1:2e:54:34:99:69:09:5f:d4:ce:c1:80:3a:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:76:4B:54:1F:87:03:74:47:4B:60:3B:80:5A:E9:4F:EC:36:43:2B
X509v3 Authority Key Identifier:
keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:07:ad:f6:84:38:c7:16:aa:d2:a7:77:34:c7:9f:90:cf:a2:
76:c5:c8:84:46:4c:b3:6a:3d:fe:42:00:fc:cb:49:f1:41:ce:
4f:03:57:4a:21:e2:67:b2:41:ae:55:3c:ba:c7:d1:9b:a9:98:
49:f2:59:92:03:03:56:0a:6f:a8:21:fe:bd:12:2e:d2:28:82:
ea:11:7a:62:1a:5d:07:52:12:79:28:52:54:fe:d9:f7:0c:30:
63:48:eb:66:52:31:53:f5:3a:ba:4e:98:91:2c:25:8e:42:0a:
b0:6b:97:7d:ad:4b:47:e9:33:54:c5:bd:35:22:52:b0:3d:41:
1a:1b:99:53:4a:64:10:ff:68:f7:bc:17:dc:ef:f2:80:a5:07:
91:6d:bd:0c:c9:01:3c:c8:df:9f:b4:c1:8b:8e:6a:94:0d:32:
88:8c:66:17:bf:9f:bd:0f:dd:12:44:a4:2e:5a:ed:65:ee:c4:
da:8a:b1:5b:a8:90:e3:ec:04:db:d7:c9:6f:e2:c8:41:53:52:
56:1b:45:80:3e:d2:c1:51:a0:bb:4b:f3:ef:39:77:e7:f3:33:
75:c9:49:df:84:9d:33:00:b2:33:14:10:d0:37:ab:52:b9:56:
04:bc:d9:40:f8:2e:f2:e7:94:31:7d:78:a3:5a:b7:4b:5a:d3:
f6:36:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:18 2026 by rpki-client