
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File: 8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier: xlleaJ5fPFDDbz1ij7pDBJigHhLrdE3n8Q3nrvQ1T+k=
Subject key identifier: 7A:C3:4A:31:FE:9C:9B:71:A3:4C:5E:14:27:62:15:AC:AC:FF:41:6A
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number: 01D8
Signing time: Wed 19 Aug 2026 04:12:25 +0000
Manifest this update: Wed 19 Aug 2026 04:12:24 +0000
Manifest next update: Wed 26 Aug 2026 04:12:24 +0000
Files and hashes: 1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: T7rFShlGYCOWOvVqzGwm9GSGVGE/HKnnaH+t/gzUkx0=)
2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Validity
Not Before: Aug 19 04:12:24 2026 GMT
Not After : Aug 26 04:12:24 2026 GMT
Subject: CN=6a852d29-1ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e8:a5:91:e7:5a:3c:c3:39:8c:18:af:ac:f8:
80:42:37:3e:93:84:ec:d5:e3:ec:12:6f:c4:d7:da:
ed:dd:b0:cb:ce:f1:6d:e5:9a:97:f1:0e:96:d4:37:
50:eb:4b:ef:08:3e:99:f0:92:34:b4:13:df:0e:f6:
c4:d7:5e:ed:c0:b8:45:0a:e5:dc:42:96:99:c2:d0:
c5:ae:d6:5d:3f:07:02:86:05:da:c0:b2:58:26:2d:
36:ba:3a:cd:12:53:af:a5:03:0c:3b:af:c6:0c:e8:
23:6f:5b:fd:96:4a:06:bc:5d:49:3e:f0:96:93:46:
ca:d1:35:8f:7a:77:0a:6a:be:4b:e7:85:18:cd:12:
86:4a:16:f0:9a:ef:76:1f:5a:23:08:0f:5b:75:3b:
46:09:66:f8:8f:f9:85:a7:77:e6:bf:41:af:f6:30:
a4:80:73:24:66:80:ba:74:cc:e5:82:90:76:27:9e:
07:81:60:f5:f1:d8:1a:cf:d4:03:f6:ed:83:41:f9:
cb:ca:12:65:27:56:0f:9b:83:90:8c:a7:2e:4e:4e:
80:7c:0e:91:01:00:2a:93:b9:7c:4c:62:4f:1f:d1:
c5:94:92:22:a1:f3:ac:01:6e:2d:51:9f:b4:fd:1a:
09:15:3a:8b:69:c1:da:72:a5:de:3a:bd:f6:df:38:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C3:4A:31:FE:9C:9B:71:A3:4C:5E:14:27:62:15:AC:AC:FF:41:6A
X509v3 Authority Key Identifier:
keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9d:5d:62:b7:db:0e:b2:0e:03:f2:d5:28:76:2c:9c:21:5c:
54:6f:e9:52:2b:0b:77:0b:a1:d9:24:cb:b0:32:18:ec:c2:e4:
9f:b4:b2:0d:7e:69:06:89:a0:ea:46:fd:38:fb:29:cc:e9:9a:
e2:20:ff:d3:63:e2:f7:3f:77:dd:90:d7:02:95:c7:56:f7:1e:
11:38:fe:d8:eb:4d:01:d4:d2:98:d0:4c:58:d4:6f:4a:57:3f:
57:03:d4:26:02:57:ff:91:08:11:dc:ac:52:3f:d4:a6:0a:65:
4b:b5:a3:39:13:d4:50:af:75:56:cc:2b:bf:77:71:f2:a3:a4:
a5:e9:21:4c:ee:36:85:3f:47:89:9d:f6:32:f8:24:02:03:94:
dc:66:21:e3:8c:12:b8:3c:cf:cf:64:35:d7:a0:e1:bd:d8:bd:
e1:74:ca:f6:70:f0:86:60:e3:43:f0:5a:38:14:ee:5b:12:66:
60:82:d4:95:0c:9e:0d:be:53:0d:fe:d5:9b:aa:65:aa:36:2b:
1e:2f:b1:ae:7d:1c:90:c8:e9:69:7f:e6:47:0d:8f:b1:bb:33:
fd:b1:35:4c:9d:c5:4f:5b:ad:fa:4b:44:64:9c:07:c9:ff:11:
0b:c0:00:18:cb:04:9d:41:66:85:92:a9:47:8d:8e:92:78:09:
2b:2d:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:51 2026 by rpki-client