
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
File: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json)
Hash identifier: aY0TKWmwvbeKoo6SlKvIU5tSdG2RzQxVgpEaUE1mZrM=
Subject key identifier: 24:E7:9D:37:51:36:32:5C:63:42:1E:C5:23:48:11:E4:B7:31:D7:33
Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05
Certificate issuer: /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
Manifest number: D5
Signing time: Wed 19 Aug 2026 07:30:38 +0000
Manifest this update: Wed 19 Aug 2026 07:30:37 +0000
Manifest next update: Wed 26 Aug 2026 07:30:37 +0000
Files and hashes: 1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: dZ3Adj0iL9FZbRxd8UIQho7gGMzgiflVPUOIUAgVBb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl
rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
Validity
Not Before: Aug 19 07:30:37 2026 GMT
Not After : Aug 26 07:30:37 2026 GMT
Subject: CN=6a855b9e-37fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:3f:9f:c8:db:08:8c:65:04:26:04:e4:fc:
bc:0b:4d:f0:51:4e:1e:86:78:6b:ec:4c:68:16:2e:
cd:ed:c0:20:f7:e9:9a:87:31:49:a2:b3:91:78:4a:
5d:ad:dc:27:82:2a:9c:3a:d1:4f:d5:3e:6b:f8:ed:
a3:81:74:be:9d:55:ed:6c:53:ac:bc:9a:bb:9a:bd:
5c:b9:ec:69:30:8e:a8:0f:8d:5c:0e:20:50:8e:b2:
d8:8c:b8:e8:7e:ab:6a:7c:3b:ce:04:27:ef:ba:ad:
ab:35:65:81:8b:ad:79:ea:af:9c:75:65:ee:5b:84:
6f:73:53:a5:e9:d6:26:72:fe:08:eb:9e:87:5a:3f:
35:c7:ad:c5:40:cc:ab:7c:e4:c9:3b:25:74:27:06:
0e:dc:66:7c:d0:ba:78:61:0b:a5:5e:8b:24:3f:6e:
3e:db:84:2a:8b:ec:1c:74:95:7c:d2:f6:65:f6:28:
9b:30:80:12:8f:10:86:74:01:b4:c9:21:b8:b5:f9:
81:b8:21:7e:f6:99:cb:67:59:6c:4c:bf:9a:75:f4:
71:39:68:fb:64:09:fa:2b:47:7e:8d:9a:54:5d:f5:
02:97:06:ab:22:cb:aa:33:1a:eb:33:e8:73:1f:1b:
c3:4c:94:9e:4c:58:c8:94:e8:e9:1f:4e:31:10:3a:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:9D:37:51:36:32:5C:63:42:1E:C5:23:48:11:E4:B7:31:D7:33
X509v3 Authority Key Identifier:
keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0f:ba:37:fe:c7:be:e0:94:d6:18:dd:bc:76:56:06:bd:09:
30:1c:d3:a4:67:ce:06:3a:6e:81:07:2e:8d:e9:28:87:62:cc:
51:30:c9:4d:7d:4e:98:3a:1a:18:be:c5:d5:29:b4:d4:98:6f:
29:b6:c7:81:a8:1f:06:1a:11:38:0f:09:f5:0c:61:ea:6c:52:
72:19:ef:db:63:fb:0f:48:89:b8:7a:81:3e:42:8e:69:b8:e3:
77:9a:1d:60:c9:0c:7c:7c:4c:f5:08:83:06:62:4e:b2:44:2f:
3c:d8:36:3e:de:52:14:d1:c4:6c:5a:55:c3:5e:89:ac:9a:95:
bf:2b:44:a2:0f:2f:07:9a:4e:ac:bf:20:0e:26:2d:4b:a3:3a:
9d:36:ba:a6:28:e0:54:ca:e6:4b:37:c2:e1:f1:91:8d:f7:23:
55:3e:6b:e1:d7:df:dc:7a:43:76:7c:6e:2c:62:e6:60:e4:54:
e9:00:a2:88:18:8c:3e:aa:dc:e3:4b:37:44:f2:64:72:07:2f:
44:a7:72:99:c2:6b:04:7a:bb:9e:b4:bc:f5:eb:b3:63:b6:60:
8b:51:fe:35:03:91:d9:76:76:a8:f5:0f:af:8b:3c:52:50:28:
a9:98:22:a0:b8:f0:1c:20:97:15:e7:22:50:55:6c:49:2b:ac:
28:0c:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:23 2026 by rpki-client