
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier: sALpYVfXWVh5JYVN7FfjVDzpb25BC8uvCBfg+HGC52Q=
Subject key identifier: 32:F4:BE:77:13:85:A5:4D:E6:19:1C:1F:96:4F:0F:EC:F6:53:FF:44
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number: BC
Signing time: Fri 17 Apr 2026 06:41:42 +0000
Manifest this update: Fri 17 Apr 2026 06:41:42 +0000
Manifest next update: Fri 24 Apr 2026 06:41:42 +0000
Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: ZZ4KIxdYYYW622GUUXylrxNCPLPIINtspNHR07OP0pM=)
2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Validity
Not Before: Apr 17 06:41:42 2026 GMT
Not After : Apr 24 06:41:42 2026 GMT
Subject: CN=69e1d626-2eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:28:91:0c:fc:c6:2e:60:56:68:02:eb:db:b6:
3e:5f:5b:ee:27:c8:3f:8c:c5:45:60:bf:56:11:ae:
87:70:e2:1a:2d:4e:74:0e:48:9b:26:7d:aa:7d:71:
d4:8c:92:e1:ae:e5:5c:ae:4b:9d:e1:e9:11:a9:c7:
72:bf:31:1f:c4:4c:f2:00:2f:6e:10:70:87:46:2e:
6c:b6:21:d3:6a:e8:9a:f1:26:e0:d6:0d:d6:be:a8:
fc:71:1e:4d:1b:b9:ef:9b:27:07:e0:e1:71:a6:0f:
c3:91:09:b1:bd:b1:f1:43:77:df:0c:ba:be:3c:43:
df:9c:3c:02:94:bd:4e:ba:c0:51:94:23:25:8b:19:
3e:d5:08:f7:35:86:8f:79:31:d8:63:76:f7:38:83:
19:ae:e8:52:49:d0:ba:e5:cb:12:0c:d4:d9:e9:a1:
6d:7c:95:72:9b:32:91:0c:ad:53:23:ca:2b:72:47:
81:19:2c:0e:f3:15:4c:e3:26:42:a6:b0:dc:de:17:
3f:86:d5:89:21:7e:8f:60:d1:c5:43:61:39:3b:e7:
a0:67:9a:37:d4:46:0a:12:ba:72:92:60:74:ee:35:
9a:e4:e3:b5:c7:23:c5:5d:4a:30:bd:74:c3:5d:84:
fd:b0:4f:21:cf:f4:d4:79:c4:8b:17:9c:99:6a:05:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:BE:77:13:85:A5:4D:E6:19:1C:1F:96:4F:0F:EC:F6:53:FF:44
X509v3 Authority Key Identifier:
keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:90:e8:72:76:4a:3b:92:3c:88:c7:54:1e:7b:7a:43:3a:
42:fb:d9:9f:b0:03:9c:ff:84:0b:65:31:66:c3:4d:57:71:6f:
84:c2:ad:46:dc:d7:a1:94:53:95:38:1c:d4:79:1d:b8:fc:d6:
9c:16:4a:08:b0:e2:88:03:40:33:66:d5:1c:e9:ee:3e:fb:b9:
10:5e:40:1d:6a:ca:50:60:db:37:44:89:8e:a5:79:7d:93:59:
b5:cb:c3:36:0f:fc:ec:75:8b:ca:50:d4:67:5a:4b:f3:d9:62:
02:60:85:7f:b3:eb:f0:57:b9:53:05:30:ac:bd:50:62:8e:9a:
ff:50:78:ce:7a:59:f5:71:68:2d:75:b7:6e:51:d0:64:34:16:
ab:a4:ce:57:46:cf:b4:2d:01:fc:27:aa:9f:3a:8c:e4:2f:b4:
43:4f:31:70:a0:8a:85:c5:27:52:00:ec:0b:11:f4:44:54:48:
e7:8e:36:3e:9d:18:56:4c:d0:94:ca:11:7d:7c:82:07:7f:98:
5b:a1:f4:39:71:4f:9e:2b:b4:e7:f6:c2:46:58:01:f4:dd:63:
e9:28:2d:9d:6c:4a:d5:a6:ad:2b:f4:77:e9:7f:17:2a:a7:e0:
4e:08:cc:1e:3f:e9:7b:03:88:84:c3:5c:ea:6d:31:60:e6:a8:
17:3e:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:12 2026 by rpki-client