
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json)
Hash identifier: l/e5WPO+IEFKdc5/8st/bLZACcBdBiCaSZR3zibOLOM=
Subject key identifier: CB:96:E8:8F:CC:D6:E8:31:96:CB:7A:B3:3B:AF:C8:58:2D:96:15:66
Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
Certificate serial: 0AE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
Manifest number: 0AD4
Signing time: Mon 22 Jun 2026 19:27:21 +0000
Manifest this update: Mon 22 Jun 2026 19:27:21 +0000
Manifest next update: Mon 29 Jun 2026 19:27:21 +0000
Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: fL8L2/K1rxW2M1MWk0UkH0a8+rKWpg7hKRaZM6TrIC8=)
2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: xYfOlV7ly8PaoVxzHciXWWKH9nbZzy74G8B+L2wVsHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl
rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
Validity
Not Before: Jun 22 19:27:21 2026 GMT
Not After : Jun 29 19:27:21 2026 GMT
Subject: CN=6a398c99-fac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:3c:75:1b:36:44:b6:7c:81:e6:1e:5e:d1:
6d:13:01:7b:79:bf:15:3f:d2:fa:24:a9:e1:d4:85:
e3:9a:00:6c:5e:c5:fb:56:17:11:0c:b1:55:04:dc:
cc:ba:cd:8a:e2:9f:d1:68:d0:00:39:57:b1:7a:a4:
de:4a:56:27:d0:4f:0b:50:5d:f6:a1:a9:9f:b9:97:
89:6c:65:f6:5a:5b:d1:8e:92:4a:91:c4:95:ce:38:
8f:e0:46:fb:f6:a1:26:d3:be:3c:66:d0:3b:59:8e:
95:1d:80:c0:05:67:50:45:ff:4d:ae:98:cb:6b:cb:
9b:62:be:a7:26:64:90:48:1d:4f:01:f7:f1:28:eb:
dc:a3:f2:35:d6:41:6a:87:27:a4:c8:6d:ec:34:77:
fd:8f:24:82:bf:40:03:1c:90:b7:ab:8f:a4:4c:1b:
a4:15:9a:2f:f8:8b:bf:f1:dd:2e:2f:47:b2:6f:8b:
3a:17:d7:a2:9c:e1:0a:63:c4:5b:b4:f1:19:8e:2e:
92:91:2d:f7:00:53:41:6e:88:82:06:bd:96:51:81:
fe:53:2b:69:8d:08:e2:9f:56:53:03:43:9e:9f:d7:
44:df:1f:88:8b:83:d1:6f:7c:26:fb:19:be:5b:63:
92:87:f8:b6:f5:04:64:59:b6:dc:78:2a:67:8f:76:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:E8:8F:CC:D6:E8:31:96:CB:7A:B3:3B:AF:C8:58:2D:96:15:66
X509v3 Authority Key Identifier:
keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:1e:62:1f:c9:bd:57:f0:0a:85:6c:a2:27:57:82:f8:c0:
22:d9:2d:11:ac:6a:b6:16:d4:27:9a:e2:0b:bc:24:91:e2:46:
5b:6c:96:bd:62:21:6b:df:34:76:db:24:e6:ec:f2:55:4c:8c:
18:4e:51:37:f2:bd:d5:28:b1:5f:a3:81:5b:7b:7b:6e:b3:7f:
f1:d0:39:68:0f:35:30:f0:61:79:2f:3e:04:d0:7b:0e:7a:dc:
41:ab:36:48:45:58:9c:cc:77:16:3b:46:6a:5b:bc:ec:a9:d2:
8a:cd:ac:75:fc:87:7e:17:10:6a:89:aa:03:2c:25:23:57:f9:
44:28:58:98:8f:ff:d2:b3:4b:f7:8d:9f:36:72:3f:7d:13:8f:
90:64:91:f2:7c:b6:0c:7c:c2:65:bd:6d:2a:1d:d2:60:e0:27:
da:d1:d2:60:6d:65:aa:59:9a:46:44:e1:e3:ef:83:ae:90:f8:
85:3d:1d:82:ef:40:3a:69:5b:00:91:02:47:73:72:a9:16:c9:
84:f5:a0:8c:e3:1f:eb:2d:7e:28:05:12:79:80:d9:35:84:5d:
86:b7:9a:e0:81:52:0c:7a:23:79:76:a3:42:1f:88:c8:2c:53:
47:d8:96:e4:e0:de:c1:15:28:2a:33:99:fa:14:18:4d:e9:74:
c1:b8:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:48 2026 by rpki-client