
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json)
Hash identifier: hDZfGq4IQJaRdkzC832eO4VoiGHSY8JVUGvWmEIusNU=
Subject key identifier: FD:5B:A2:50:73:34:53:A8:C8:1A:1D:A9:AE:B0:40:1D:C4:54:2E:66
Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Certificate serial: 26F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
Manifest number: 26D9
Signing time: Mon 22 Jun 2026 15:39:08 +0000
Manifest this update: Mon 22 Jun 2026 15:39:07 +0000
Manifest next update: Mon 29 Jun 2026 15:39:07 +0000
Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: NS3i5xRO2ulBR062i9XFY+hKwcbJdrFG998KnJLvJRU=)
2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: DpOAKbXIZRU31H9SibMfjtno+IW4EyE2+7nXpFauVCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 15:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9971 (0x26f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Validity
Not Before: Jun 22 15:39:07 2026 GMT
Not After : Jun 29 15:39:07 2026 GMT
Subject: CN=6a39571c-a129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:77:43:10:10:8f:a7:e8:d7:63:6c:ca:2e:
e5:27:31:8c:16:38:1c:80:3b:4c:8d:7a:44:ae:3e:
19:dc:97:e3:0e:9e:41:55:b2:33:ab:cd:a8:90:98:
91:87:d6:e9:a6:73:0b:cc:d4:15:31:f5:f9:f6:5e:
bf:a5:d1:3a:69:5c:13:b1:f4:92:8b:8f:b3:7e:39:
bd:31:0d:b7:7f:d0:be:cd:37:a1:8a:b5:e9:d8:24:
5c:e9:f0:f6:cc:be:ff:b1:d2:8c:43:69:76:9c:bb:
e7:07:f4:89:1a:91:e9:3b:cc:27:57:a6:b2:2a:42:
6d:c4:a4:d9:3b:a2:8c:9d:5d:91:dd:e6:2f:52:f5:
cc:e1:42:e2:33:9d:a9:9a:06:39:bc:c8:36:22:1d:
42:85:28:1e:a9:ab:81:66:05:29:ac:9b:e5:95:08:
f5:16:a4:27:5a:84:f9:bf:5e:26:e6:bf:c8:7a:38:
ca:a3:1f:c8:29:20:a8:f8:03:59:9d:5a:39:d1:dd:
b5:09:bf:c6:83:b5:e6:b3:90:79:f2:19:c2:21:03:
a7:1f:1c:09:bb:9b:36:ac:06:27:ff:bc:3b:a2:98:
98:81:e0:d4:0a:04:86:32:2a:bf:bb:d3:bf:dc:a5:
e1:30:20:5d:23:87:05:fe:67:36:c1:6a:65:b1:4b:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:A2:50:73:34:53:A8:C8:1A:1D:A9:AE:B0:40:1D:C4:54:2E:66
X509v3 Authority Key Identifier:
keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:e7:cc:17:53:e7:9d:ee:f3:9a:5b:d3:52:38:99:e7:89:
b6:4c:38:fd:83:59:e0:87:96:00:3b:0c:2a:c1:40:00:88:34:
b2:fd:e4:28:0b:c3:4e:6b:2f:ea:12:a8:8c:f5:89:63:8c:24:
f4:f4:35:33:76:bd:2b:67:84:a1:0d:7f:07:30:93:20:05:57:
93:66:e6:4e:bd:52:77:91:ed:3c:80:46:8f:00:dd:3c:00:09:
5a:ea:e8:74:48:b7:32:fa:43:06:09:05:3f:6c:ca:cb:c8:6a:
d4:de:a7:da:c2:e4:27:09:5f:f4:77:6b:d4:de:0a:6b:7f:a2:
eb:ad:ce:9f:ac:12:66:2f:3e:5d:3b:d0:7b:a2:20:1b:09:1e:
66:a7:c1:78:c5:3f:2e:26:fa:fe:92:9d:31:d9:96:f3:cf:06:
71:14:4a:24:98:cf:07:44:de:1e:8a:42:e0:a2:35:0b:6f:1b:
e2:c2:3d:9c:73:0e:ee:36:f8:a3:aa:2f:39:56:19:a6:bf:96:
9e:f7:2b:12:c0:56:08:74:b5:5b:ac:75:32:10:7d:81:43:f7:
b7:17:04:cf:3e:ed:40:51:6e:7d:e3:93:ec:c7:49:76:4e:40:
a4:6f:24:3e:5e:d5:d6:92:bd:41:55:f5:d3:be:b3:75:53:68:
94:3c:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:38 2026 by rpki-client