
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier: UWLoJFZJR2VKvmgKiroR+dyeGnqFhzTK5ADUgHwxeJM=
Subject key identifier: 6E:53:BF:13:45:69:FD:C7:F9:0E:99:95:20:17:D9:BB:08:1F:A6:3F
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 0436
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number: 041D
Signing time: Sat 13 Jun 2026 00:25:19 +0000
Manifest this update: Sat 13 Jun 2026 00:25:18 +0000
Manifest next update: Sat 20 Jun 2026 00:25:18 +0000
Files and hashes: 1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: yqsEfXC1bPU/Y5sjWgmkA1NxuNcR3cnBFwaf31pOnmw=)
2: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: hYHdnr2oFJt+0Y0EftReU0/2zxETIJpzujXYr1vfHyc=)
3: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: xf1zNOGWmI0NSOQnM0W9wWka4ZzsBm8XfGy09ZatIOs=)
4: 422287F0D30511EE8753D541C4F9AE02.roa (hash: ZY34KXaHlctIKW6kICEG7jRT1kNuZ1kIhZ4FtfYhqRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Jun 13 00:25:18 2026 GMT
Not After : Jun 20 00:25:18 2026 GMT
Subject: CN=6a2ca36e-9b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:2e:51:a6:b5:cd:fa:dd:2a:52:df:45:c4:
70:7a:e5:65:68:26:2f:b2:fb:d5:3e:4f:63:b6:af:
94:56:f0:aa:28:6b:42:69:23:0b:4c:fd:9b:0d:3a:
cb:c7:b7:8c:a6:16:6c:29:b9:ab:41:c3:80:18:db:
74:17:26:09:f3:89:b9:6d:a7:00:05:49:36:2e:84:
04:15:eb:1b:c3:26:ff:6b:bd:26:19:3d:22:1e:77:
21:87:03:08:ab:b6:e2:84:6c:69:ed:18:57:18:d2:
66:e5:3c:45:90:a9:03:07:eb:53:17:c5:d3:47:04:
6a:d0:2d:a7:db:f7:e6:98:b3:15:3a:f4:98:03:90:
22:83:ef:6b:2c:21:ff:e2:25:12:f1:e2:c2:28:9d:
15:b7:bc:23:ee:3c:86:e1:4c:b3:fe:2c:84:05:11:
18:4b:b0:1e:f0:ba:8d:75:ab:64:7a:f5:07:d3:98:
dc:3c:81:32:c0:57:af:e3:7e:b7:04:e3:01:8c:24:
6c:6d:71:b6:ca:94:a6:a1:0c:9b:12:32:76:84:fe:
50:cb:28:b5:89:68:23:15:be:0f:04:1c:70:86:37:
1d:29:7a:56:75:54:97:d5:4f:24:49:1a:49:44:05:
90:63:b9:fd:20:e3:03:62:fc:30:ff:66:37:a3:4a:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:BF:13:45:69:FD:C7:F9:0E:99:95:20:17:D9:BB:08:1F:A6:3F
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:14:3f:85:75:92:0d:4f:24:26:3e:3d:99:50:04:5d:39:c6:
47:95:fe:ff:0f:7d:02:bd:1b:35:a3:ad:8c:3d:49:8a:22:48:
77:07:c7:5f:4f:4b:75:92:83:08:6a:42:59:15:e2:e6:c7:7d:
2c:e9:46:ae:74:35:66:b3:bf:81:a6:9c:b3:2a:11:b6:79:6b:
2b:04:e3:c1:df:0b:f3:33:98:bb:d3:44:25:82:b6:20:13:bd:
50:12:d9:83:f0:27:b0:3b:9a:27:9c:f3:70:14:ee:66:02:19:
4c:36:83:86:bc:34:74:d2:a2:e0:57:9e:f2:d4:60:e1:00:29:
7c:79:09:46:f4:36:ea:7f:65:4d:52:cb:dd:91:2a:1a:8c:8a:
d2:15:77:2a:4a:77:f0:a0:92:2c:53:c9:44:48:63:c1:3f:16:
95:d3:98:4c:4a:a9:04:b2:35:ad:05:81:9e:f5:66:a7:43:b2:
d1:8f:48:bd:e9:43:72:a6:f7:63:b7:76:9e:5a:e4:d1:a4:19:
2f:46:1e:11:41:0c:12:48:d0:f5:0b:54:6f:ae:76:8e:78:1b:
b9:5a:b5:0a:a9:f2:f8:42:c4:fa:38:68:b5:8c:c3:b1:08:4d:
8a:c8:63:45:43:03:df:ba:03:54:93:ef:46:92:8f:0f:51:cd:
ec:51:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:20 2026 by rpki-client