
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: vGl6C57GTftTEMvVAZk2OnUiq1AdJjabvqb2Zt6Ydk4=
Subject key identifier: 99:FE:03:26:EE:C4:4E:67:F0:3B:20:56:34:4D:87:E1:ED:53:39:0D
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 0249
Signing time: Tue 03 Nov 2026 03:51:06 +0000
Manifest this update: Tue 03 Nov 2026 03:51:06 +0000
Manifest next update: Tue 10 Nov 2026 03:51:06 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: Xj6GN+Ic8aFVRxgSZmN5U2CeZZ18Ym/bRL/4SJzfRxM=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: vNfsLMgj6FIGb8F95RS1g08xcjRW3XjTHmN+wXU6cGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Nov 3 03:51:06 2026 GMT
Not After : Nov 10 03:51:06 2026 GMT
Subject: CN=6ae95a2a-0058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:51:cf:ab:95:dd:75:7b:dd:4e:39:2d:61:
50:fd:c6:be:33:ff:2e:96:14:60:1a:e7:df:9e:2f:
ed:ed:16:1c:ac:14:7e:78:8e:3b:6d:41:18:0e:cd:
8f:d8:64:31:3d:4e:07:bc:2c:91:f1:47:28:01:bc:
70:06:4f:9a:c8:1d:e3:8e:69:53:a0:dc:03:c3:53:
7d:69:78:c5:00:f5:1f:53:79:20:e4:71:e6:e1:3c:
91:a4:57:fb:53:76:f2:d7:be:40:d6:5d:23:0d:65:
b5:c3:19:18:17:5d:0b:ff:08:3a:35:79:61:03:9c:
c6:ba:d5:88:36:ce:db:b0:f1:01:b0:69:a9:f7:ca:
ac:a3:6d:59:09:59:cd:7b:1d:18:9b:f5:80:41:96:
d4:d3:8a:0c:0b:39:38:77:32:04:cf:84:7b:f7:32:
de:ee:5f:d0:02:d3:87:db:97:97:a7:73:8c:53:bf:
4e:79:af:37:96:43:c7:5c:d7:2b:19:78:1f:5f:53:
13:56:01:ff:b4:eb:de:f6:f5:53:11:e9:11:24:f5:
86:00:f6:eb:b8:65:33:5a:48:78:fc:e1:f5:06:ec:
02:3e:ce:9f:81:e9:ea:d8:dc:52:07:50:16:c1:f1:
12:0e:24:48:df:b9:85:8d:7a:bb:3c:dc:6f:3d:20:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:03:26:EE:C4:4E:67:F0:3B:20:56:34:4D:87:E1:ED:53:39:0D
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:53:be:59:42:e2:fd:f1:01:02:4c:11:52:b9:08:b8:dc:2c:
9e:2d:49:32:47:30:86:dc:af:de:9d:3e:a0:ba:20:d9:59:af:
c4:0b:4e:c1:5b:8b:d1:4c:6d:ea:33:c9:8b:c3:a4:7d:71:2a:
47:c3:ad:44:05:cb:02:7c:76:34:fc:24:5c:69:12:ed:65:1e:
5a:4f:90:61:15:96:d9:e9:19:e6:72:fe:cc:c7:2a:03:0b:9f:
18:9f:0f:9a:a5:10:43:d0:3c:8d:5c:cb:f0:0e:bb:bb:01:8b:
78:bf:b3:40:41:4a:fb:05:b1:f4:06:40:89:7d:ee:a1:ff:17:
0e:4c:41:bf:23:c6:74:50:cd:b3:5d:dc:1b:03:e9:a8:11:5f:
a5:26:32:ca:ad:53:7b:dc:46:d1:12:ed:79:29:e7:08:64:b3:
55:fc:92:03:b4:cb:6b:79:30:69:a7:95:a1:18:4c:eb:4d:f3:
63:11:4f:74:ab:24:92:60:26:f4:0e:cc:11:a3:92:dc:14:96:
cd:73:71:71:3f:4d:db:99:0e:90:be:86:38:47:63:ca:02:2b:
90:e5:8c:61:52:82:8d:3d:1c:e2:de:85:56:8c:83:8f:80:64:
f7:c3:1f:0e:a6:7e:63:ee:6d:b5:0c:86:64:79:7a:ec:d1:eb:
a5:28:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 21:40:25 2026 by rpki-client