
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json)
Hash identifier: exOVAcmm4jckxh58DwJLtInBeMmLe8gJwPk9tSRRS3U=
Subject key identifier: 06:33:6E:D4:61:56:EC:EC:38:C4:93:24:C8:50:BA:F0:FD:7A:CE:2C
Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Certificate serial: 272C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
Manifest number: 2711
Signing time: Thu 08 Oct 2026 15:41:41 +0000
Manifest this update: Thu 08 Oct 2026 15:41:40 +0000
Manifest next update: Thu 15 Oct 2026 15:41:40 +0000
Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: 1RKxv/69XDbvAnnP3LBWLl0wqO3AZ08CsYPcnOMuS6A=)
2: BEEF67D686EE11F19E006003A7EE528E.roa (hash: OoXmnHssLBeJlIz2AHQJuZIbfl0xeqfm6XsPvAA2LaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10028 (0x272c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Validity
Not Before: Oct 8 15:41:40 2026 GMT
Not After : Oct 15 15:41:40 2026 GMT
Subject: CN=6ac7b9b5-6b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:a3:86:e7:44:d2:f4:f2:41:35:59:c2:26:
53:35:ac:6f:6f:a6:7a:93:0e:1c:e6:85:09:81:b3:
1b:2c:0c:82:e2:ec:73:ad:99:be:26:4b:03:7a:c8:
5d:bb:f0:c3:4d:33:bf:92:c6:5a:aa:e0:f1:1d:93:
6e:b7:04:55:55:19:4d:84:c6:16:a0:cb:92:6c:a2:
67:d1:6e:40:a9:00:d1:60:2c:70:0d:ba:de:62:58:
78:76:48:04:76:7f:8a:4f:21:a6:a2:29:7b:9a:c4:
58:24:1d:fe:3c:da:b6:17:59:c3:0e:6b:b8:73:11:
df:1f:67:68:11:20:ab:3e:9e:e0:24:6d:d1:13:bd:
e6:60:51:ff:30:ab:f1:fc:d2:a4:87:77:f7:af:b8:
87:89:e6:03:9a:38:22:60:64:34:52:ca:f1:8a:92:
31:78:54:2d:92:d7:fe:f7:65:17:a4:f7:91:c3:04:
0f:4d:29:0f:0e:7b:dc:45:ae:12:08:37:4a:2d:7f:
0c:61:93:fb:96:5d:77:0c:4b:df:ff:d5:cc:97:27:
ee:51:ec:8b:9a:e6:04:5a:52:3b:ce:69:8f:ad:8f:
4d:5d:e3:fd:9e:8c:25:d8:f8:db:60:d4:43:c3:e4:
27:a8:f4:88:ce:7c:55:8d:ed:1a:42:14:3b:29:43:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:6E:D4:61:56:EC:EC:38:C4:93:24:C8:50:BA:F0:FD:7A:CE:2C
X509v3 Authority Key Identifier:
keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:f9:ea:68:4b:19:0c:60:9d:fd:2a:d3:52:7d:59:2f:f5:a9:
10:4f:03:73:b5:a3:e2:8c:96:7f:71:0e:af:17:5c:66:1a:b5:
c5:2e:a7:87:9b:b0:22:35:86:43:51:7d:87:a0:65:f8:2b:07:
93:fe:67:58:05:99:9a:54:d2:33:ba:ec:9e:61:6b:13:a4:cf:
11:04:3c:ef:a3:5e:bf:72:c7:9d:46:82:e0:88:79:59:52:85:
11:9e:a0:f5:25:4d:f7:d8:05:c2:69:c8:a2:96:36:ad:8c:e4:
a4:53:ce:92:05:45:03:28:dd:9e:82:da:72:2d:2f:3c:c3:f4:
06:90:54:3b:6e:ba:35:b9:14:cb:4c:9b:90:67:92:6e:11:60:
ba:ba:b1:e3:42:3d:ef:88:ee:b2:25:39:8e:7b:6c:64:b6:f7:
15:66:e9:83:d8:5e:c8:c3:9a:7e:2c:60:0b:56:e9:d2:72:07:
f6:02:0b:69:bf:e0:0a:65:e4:82:31:44:2f:b7:23:40:4a:24:
a2:ce:86:7b:6e:4f:b0:84:a8:f8:da:8f:0f:b5:1e:c4:19:ad:
d9:d2:1e:01:4f:e8:33:08:2c:58:ed:1b:67:31:f1:99:56:2a:
bd:61:5a:3c:33:62:e7:12:a1:99:4e:da:d8:31:51:b6:be:c5:
17:82:dc:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5
NjgzQTNBRTMwHhcNMjYxMDA4MTU0MTQwWhcNMjYxMDE1MTU0MTQwWjAYMRYwFAYD
VQQDEw02YWM3YjliNS02YjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtH2jhudE0vTyQTVZwiZTNaxvb6Z6kw4c5oUJgbMbLAyC4uxzrZm+JksDeshd
u/DDTTO/ksZaquDxHZNutwRVVRlNhMYWoMuSbKJn0W5AqQDRYCxwDbreYlh4dkgE
dn+KTyGmoil7msRYJB3+PNq2F1nDDmu4cxHfH2doESCrPp7gJG3RE73mYFH/MKvx
/NKkh3f3r7iHieYDmjgiYGQ0UsrxipIxeFQtktf+92UXpPeRwwQPTSkPDnvcRa4S
CDdKLX8MYZP7ll13DEvf/9XMlyfuUeyLmuYEWlI7zmmPrY9NXeP9nowl2PjbYNRD
w+QnqPSIznxVje0aQhQ7KUMzUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYzbtRh
VuzsOMSTJMhQuvD9es4sMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB
QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG
ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOPnqaEsZDGCd/SrTUn1ZL/WpEE8Dc7Wj4oyWf3EOrxdcZhq1xS6nh5uwIjWG
Q1F9h6Bl+CsHk/5nWAWZmlTSM7rsnmFrE6TPEQQ876Nev3LHnUaC4Ih5WVKFEZ6g
9SVN99gFwmnIopY2rYzkpFPOkgVFAyjdnoLaci0vPMP0BpBUO266NbkUy0ybkGeS
bhFgurqx40I974jusiU5jntsZLb3FWbpg9heyMOafixgC1bp0nIH9gILab/gCmXk
gjFEL7cjQEokos6Ge25PsISo+NqPD7UexBmt2dIeAU/oMwgsWO0bZzHxmVYqvWFa
PDNi5xKhmU7a2DFRtr7FF4Lcmg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:29:13 2026 by rpki-client