
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier: XsYp2zMcl2mC+YEj0MsbfqTUH0v3ktXsv7x63KqRxJM=
Subject key identifier: F4:BE:E5:14:D9:F7:9B:F9:46:07:89:F1:64:FF:A0:66:04:D2:29:0B
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial: 3574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number: 3574
Signing time: Tue 18 Aug 2026 14:42:15 +0000
Manifest this update: Tue 18 Aug 2026 14:42:15 +0000
Manifest next update: Tue 25 Aug 2026 14:42:15 +0000
Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: /dCdbkFCTfWR6rsEwHD1QQiRl/APq4ID1JXqDW2gJA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13684 (0x3574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Validity
Not Before: Aug 18 14:42:15 2026 GMT
Not After : Aug 25 14:42:15 2026 GMT
Subject: CN=6a846f47-8ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:80:35:b5:df:64:59:7f:8c:ad:69:91:64:
33:dd:69:9d:c1:d2:30:cc:31:49:33:5c:ff:5f:38:
a1:f3:eb:64:ee:dc:2b:ef:ce:d6:b8:59:90:dc:7f:
f5:71:59:58:39:a8:f7:bb:62:d8:e9:25:e9:82:1e:
c4:6f:24:51:46:4d:6d:73:f6:31:44:d9:a2:a7:09:
45:21:66:b8:09:00:78:81:a3:0e:f2:32:aa:4a:87:
5c:67:72:cf:da:74:5b:e6:ca:1e:60:ee:f1:38:07:
eb:7d:f8:45:94:b4:f5:85:c2:c6:b8:01:2f:f1:f7:
f0:fd:53:76:2d:2e:c8:9b:2d:29:a8:9b:5e:ee:50:
50:b3:f0:57:03:8c:03:93:5d:d6:9c:c2:c8:0e:33:
c5:49:80:fb:be:ed:4e:97:c5:43:0a:c4:05:72:95:
06:56:f1:56:1a:84:aa:58:ae:a7:65:7a:11:b9:17:
64:72:a4:d8:49:1e:62:38:6d:8d:74:ec:f7:03:7d:
8a:83:14:e2:d5:fa:df:7b:b1:71:64:6b:f6:28:ee:
78:5e:85:c9:6f:69:1f:2a:55:0a:5d:9b:47:c2:a9:
97:95:0b:d8:6a:23:e0:9c:a2:71:73:90:c3:aa:7b:
31:0b:e8:c5:cc:b9:e3:e6:01:81:32:85:2a:dd:16:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:E5:14:D9:F7:9B:F9:46:07:89:F1:64:FF:A0:66:04:D2:29:0B
X509v3 Authority Key Identifier:
keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:33:2c:50:f9:c8:ee:01:3f:e5:ee:47:eb:b9:4e:ae:f5:00:
98:50:a7:11:dc:80:e1:b8:81:97:8b:6e:65:d7:c7:0c:cc:6b:
5d:69:6a:ae:36:69:fc:29:85:5f:f2:88:a7:3c:5c:6e:4e:3c:
98:f1:8d:e8:18:09:f6:e9:5f:be:94:98:53:d3:ca:d0:c0:11:
c2:8b:97:2a:a0:9f:f2:a8:fa:be:b9:48:d1:8f:77:10:fb:05:
be:c5:a3:2b:31:5a:16:88:93:7e:75:5f:4a:cd:9c:ea:cb:5e:
76:f8:69:99:a8:ce:d1:e3:a2:36:ae:57:8b:1c:39:e7:b5:e6:
59:18:6b:d2:1a:cd:12:a4:e1:a7:02:24:a9:07:ca:ba:85:25:
8c:82:90:3e:37:6f:7c:80:94:dd:11:2b:ae:79:7b:65:00:4c:
c1:3b:bf:9d:d7:01:e0:eb:81:30:48:d4:77:46:0d:d1:73:16:
6f:55:75:da:52:4d:12:2d:87:8c:44:45:37:cb:0c:eb:7b:bc:
fc:17:2e:a0:60:1c:d5:22:62:66:f7:9a:ba:5e:3c:bb:1b:c0:
c2:19:85:a9:05:12:05:14:cb:49:b0:87:f0:29:9c:30:cf:90:
53:a7:79:01:68:26:13:f5:23:16:f8:f2:02:79:26:b3:12:5a:
a4:be:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:00 2026 by rpki-client