
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json)
Hash identifier: +GTqWCWioT0NctnFCY4DgO4d1F8sGnpzM9e9WjfFeno=
Subject key identifier: 12:B7:F8:33:6C:3C:E2:D7:5F:FF:2C:08:A1:3A:98:28:1C:B3:1A:F2
Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Certificate serial: 357A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
Manifest number: 357A
Signing time: Sun 20 Sep 2026 15:08:03 +0000
Manifest this update: Sun 20 Sep 2026 15:08:02 +0000
Manifest next update: Sun 27 Sep 2026 15:08:02 +0000
Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: sOSfkBTpaFg1IXrdKlsxTvrcatYDtj5Kd6L1ujA2HFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13690 (0x357a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Validity
Not Before: Sep 20 15:08:02 2026 GMT
Not After : Sep 27 15:08:02 2026 GMT
Subject: CN=6aaff6d2-4578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:26:28:31:c4:ee:59:b7:42:60:6c:ac:fc:
f3:c9:26:fb:af:5a:03:3b:d1:eb:7a:98:a4:cd:8d:
a5:9f:bb:19:07:ea:8d:1e:0a:c6:74:61:99:8a:4e:
83:ca:e8:6c:63:20:bc:f2:f0:8e:8c:e3:cd:b5:69:
7c:7f:4a:32:d0:bb:32:40:dc:77:83:99:7a:63:10:
19:06:8c:49:f4:5a:f2:82:29:b8:db:29:41:fe:c2:
51:91:09:75:c4:dd:da:9e:c4:32:6a:c6:eb:b3:68:
c2:13:2b:fd:9d:13:e4:b9:e7:ca:cb:ee:44:a3:96:
41:f4:80:58:32:e2:75:ed:7e:85:84:04:de:52:8c:
7c:6a:44:3e:7a:89:62:3b:ea:e2:fd:30:b5:b6:c3:
4b:d8:46:62:80:ab:b9:7b:d2:96:4c:31:c7:00:f3:
f8:a8:a1:eb:29:9f:dd:f4:ba:11:3e:d4:15:c3:9c:
70:ef:07:01:f8:e9:06:ac:31:72:fa:36:4e:03:8c:
36:d1:9b:3c:82:aa:3f:17:57:54:d2:f6:7a:ed:1b:
6e:db:ff:67:e2:8c:ce:59:16:50:35:3c:17:d5:30:
37:d3:9b:f6:0b:39:03:1f:94:8c:56:0b:bc:f8:ba:
b2:fd:25:8f:26:8d:4f:8c:15:5b:ae:e9:2f:8c:28:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:F8:33:6C:3C:E2:D7:5F:FF:2C:08:A1:3A:98:28:1C:B3:1A:F2
X509v3 Authority Key Identifier:
keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:1f:a7:a3:88:7a:c5:1d:04:b9:c2:23:e6:b9:53:3f:a6:
b2:53:68:db:26:21:0d:1e:5c:be:40:89:f1:90:10:61:1e:cc:
54:7a:d2:dd:3b:30:9c:7a:a1:58:77:41:ca:6a:6e:91:27:49:
e7:7d:20:73:ba:bb:2a:e3:97:33:6a:ec:dc:f5:e1:32:1c:f4:
d3:cb:7e:8e:37:5a:ab:ec:e4:4f:b5:04:03:38:53:29:1c:47:
04:b5:7e:28:b1:99:2c:23:d5:0a:f9:5c:30:25:a7:36:51:fb:
35:a4:d4:c0:3d:f0:87:0d:8e:ba:64:32:bf:35:0f:22:18:82:
4e:25:56:a1:bf:4b:0c:ef:28:b0:f7:38:c1:5a:e6:f1:50:b5:
e7:b1:a9:75:93:f5:30:c3:3c:1a:b7:3e:00:69:1e:fd:54:a1:
49:9f:fe:ba:b7:92:a4:fc:de:b9:47:09:a1:fd:98:a6:aa:a0:
51:5c:36:0d:c3:05:66:5a:aa:e5:58:0c:69:95:48:6b:9f:4c:
ef:5d:8e:ae:1a:68:73:85:fc:06:80:87:ca:5e:98:bb:d9:32:
35:d8:44:33:90:d1:cd:d5:c7:b0:2c:b1:a4:98:c8:99:07:a9:
fa:86:b4:3b:90:e6:63:df:d1:bb:76:af:b9:b3:41:05:1e:1b:
eb:64:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:40 2026 by rpki-client