
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier: h32JjcKmisdcvraUep4KKufT00xbH1a1H+q/gSUFQRk=
Subject key identifier: C5:25:DE:70:EA:96:6D:91:96:09:CA:18:28:0C:0B:55:D1:2B:BA:4C
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number: D9
Signing time: Sat 13 Jun 2026 06:43:54 +0000
Manifest this update: Sat 13 Jun 2026 06:43:53 +0000
Manifest next update: Sat 20 Jun 2026 06:43:53 +0000
Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: aKennlKhyptEVOMsjH5yFs9i9UdWdTHowSj4GUUh9HU=)
2: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: HOtPEcNNuM1rQs6V4akweCKO9HvoxnkoVdQyxUxgTBk=)
3: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Validity
Not Before: Jun 13 06:43:53 2026 GMT
Not After : Jun 20 06:43:53 2026 GMT
Subject: CN=6a2cfc2a-43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:a6:59:c1:ce:4a:c1:c4:53:ae:de:4d:65:
d3:57:5d:17:82:83:30:fc:df:f1:e6:a4:94:d0:25:
d4:bd:53:17:59:e5:a2:1d:54:b7:08:1f:0f:4f:9b:
53:df:06:07:9e:cb:44:15:b2:22:28:8e:5b:e0:9f:
3d:53:cf:0a:cc:33:b8:ef:c4:20:7b:0d:72:54:23:
6c:a0:18:3a:8b:20:6e:97:61:e6:97:0d:79:4b:0b:
00:15:45:c7:ee:57:5e:c9:2b:0e:44:8f:cc:f5:c6:
f3:5d:85:b0:df:a1:d7:2d:76:db:53:f2:66:bf:26:
1b:78:61:24:c2:06:bb:c4:b5:83:e5:f2:17:11:bd:
47:8c:89:32:43:81:37:0a:7d:75:0e:2c:cc:3d:7c:
7e:ba:f9:7e:b2:a7:ad:f5:ef:d4:f5:1a:40:8b:98:
53:89:9e:64:0f:9d:06:0e:63:67:09:38:a1:cc:4e:
bd:76:30:05:c2:4c:a2:59:ea:15:ad:4d:f8:c4:0e:
b8:fd:a8:f6:88:60:fc:70:31:6c:27:a8:37:6b:d6:
af:a8:28:69:c9:e8:04:4f:1c:8b:88:8a:99:39:e6:
88:34:35:e2:00:87:45:f3:09:12:46:68:8e:a7:a8:
86:de:eb:59:fa:78:2f:80:62:31:f6:46:df:af:1b:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:DE:70:EA:96:6D:91:96:09:CA:18:28:0C:0B:55:D1:2B:BA:4C
X509v3 Authority Key Identifier:
keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cd:83:b1:59:32:c6:a4:59:b9:59:ce:fb:00:79:39:5d:34:
6b:90:db:e5:fa:fa:19:c2:f0:3e:92:73:c6:46:51:39:c7:25:
70:44:92:e0:f6:be:71:a1:9c:2e:b6:1b:1e:20:9a:5c:ee:17:
03:c5:5b:95:6c:73:6e:da:fe:44:84:37:5a:43:65:1d:89:ed:
78:92:b7:94:27:e4:c2:d7:4a:0e:c9:60:ba:a3:30:6a:d5:ea:
7e:b6:c3:4a:c5:08:08:ea:8e:b9:05:78:02:8e:ca:09:ee:64:
c1:26:78:d8:18:f7:5d:c9:62:95:f0:3e:0c:3c:1f:91:a1:09:
58:1c:d7:78:66:7e:95:1e:b2:2d:8f:0b:aa:96:d0:ca:a0:51:
1b:b8:f0:0d:59:30:05:d6:fb:41:78:9a:d2:5b:f4:3f:14:a2:
d0:9d:45:df:af:19:a2:7d:b0:86:9e:67:1d:75:2a:22:f8:fa:
2e:2a:3e:73:05:02:3f:ef:5b:29:a8:c7:e7:c6:06:0c:0d:a3:
f3:20:33:ab:1c:5e:b2:51:01:1e:c9:14:21:87:89:fc:25:af:
58:f4:6f:bb:54:fb:0d:27:15:2c:30:ef:59:6a:25:b1:b6:b8:
d3:a6:b6:b9:a3:91:34:73:f7:5e:0a:fb:d2:48:62:a2:fb:a6:
b4:78:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:34:37 2026 by rpki-client