
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier: oJ/XKb0kLKxDQ19HqZDoqFefKIiN8wKyW4LKczH5czE=
Subject key identifier: 9A:FC:64:6C:EB:81:78:DE:62:2E:C1:0D:63:37:77:37:60:7F:98:E1
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 0458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number: 043F
Signing time: Wed 19 Aug 2026 00:37:53 +0000
Manifest this update: Wed 19 Aug 2026 00:37:52 +0000
Manifest next update: Wed 26 Aug 2026 00:37:52 +0000
Files and hashes: 1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: FHBLdTxokQvIiNfFH4smzXguR1N1VVydLGHnmiyjrT4=)
2: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: hYHdnr2oFJt+0Y0EftReU0/2zxETIJpzujXYr1vfHyc=)
3: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: xf1zNOGWmI0NSOQnM0W9wWka4ZzsBm8XfGy09ZatIOs=)
4: 422287F0D30511EE8753D541C4F9AE02.roa (hash: ZY34KXaHlctIKW6kICEG7jRT1kNuZ1kIhZ4FtfYhqRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Aug 19 00:37:52 2026 GMT
Not After : Aug 26 00:37:52 2026 GMT
Subject: CN=6a84fae1-87a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:2f:83:a2:8a:63:4e:80:3c:81:52:06:70:
12:03:9d:24:1e:aa:ae:3f:a4:76:34:bc:74:1d:45:
3b:c6:7c:8e:41:fd:cb:9b:d8:bf:a5:f0:63:d0:a9:
42:26:cd:8a:41:7a:38:ce:00:ba:d1:e7:6f:fa:33:
29:0c:d1:d3:5e:e8:d8:47:4b:9f:e8:ae:5b:d6:3f:
a9:a2:81:05:d5:4b:b7:48:42:32:36:c8:25:05:df:
4a:49:e4:ec:50:db:7f:8b:5d:a8:1d:33:3e:b3:a8:
d7:33:6b:e3:76:54:16:f0:3a:65:49:f8:33:50:fe:
ef:0f:22:07:9c:d3:35:7d:00:eb:61:e7:d3:d3:4a:
4c:d1:27:73:e6:de:34:59:3f:2f:70:cc:06:79:e9:
0d:1b:f7:9d:0b:d3:b0:f6:3b:27:1e:39:c4:98:01:
c8:ef:03:8c:b4:d5:ab:d5:aa:f3:19:8b:2d:ae:0c:
8f:ef:78:c8:16:23:d6:23:04:c3:d2:52:d7:46:e3:
cf:02:67:c4:35:22:b3:0b:41:3b:3a:98:6e:f1:f7:
29:d7:2d:cd:28:65:f0:d3:b1:8c:01:a3:11:d4:3d:
b5:3d:a9:cd:88:4c:df:3b:22:37:79:0b:0b:d2:07:
ec:52:14:7d:74:4c:1e:9e:12:ce:47:94:f7:4a:ac:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FC:64:6C:EB:81:78:DE:62:2E:C1:0D:63:37:77:37:60:7F:98:E1
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9e:ae:2b:0e:71:10:8d:27:27:2c:54:48:b0:52:86:1f:4e:
79:75:50:18:ae:42:de:f0:9e:9c:fa:27:5a:9c:99:9b:14:48:
ed:31:d6:4d:5b:7e:e8:ce:90:f6:e8:53:ab:ce:b6:cd:77:6a:
88:9f:a5:a5:8b:ab:f2:80:3f:14:b0:14:4f:6d:0b:32:ac:96:
72:b0:81:ca:9f:db:c3:20:52:a4:ea:5f:8a:da:08:90:01:88:
f3:7f:10:4e:be:c2:0e:a4:d3:75:a4:0a:a5:ac:bf:6e:5c:38:
fd:cb:53:a8:f3:d0:67:b2:4f:bd:66:90:c4:e4:c6:80:66:0e:
f5:81:4d:22:3a:06:2d:98:1e:83:0e:35:21:8b:52:22:ed:2b:
04:b2:db:6b:48:6e:d0:ae:86:6b:bc:27:83:0d:81:25:29:66:
e9:9c:4c:87:79:ae:30:eb:e7:82:c4:05:a8:06:8e:97:51:fe:
2f:fc:3f:47:50:ce:73:ca:d0:13:4f:64:83:98:a6:16:09:9e:
5f:fc:e7:7d:72:0d:61:66:1d:69:d7:6a:16:4a:74:f8:9d:b6:
db:d1:46:5e:c0:06:8b:eb:ca:01:24:0b:a1:83:15:09:6c:77:
60:1d:eb:26:57:16:82:5f:56:07:76:06:f5:f5:b0:04:6e:81:
ef:cf:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:58 2026 by rpki-client