
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File: 8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier: Ei23J1vde7ZwgTP7YAGSsLa/bV3OZRBo+C5+MIdxWnY=
Subject key identifier: 5A:AF:EA:13:8F:32:A3:DB:7C:A1:04:1B:FF:05:B4:F8:0F:27:9F:CE
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number: 01ED
Signing time: Tue 29 Sep 2026 03:49:13 +0000
Manifest this update: Tue 29 Sep 2026 03:49:13 +0000
Manifest next update: Tue 06 Oct 2026 03:49:13 +0000
Files and hashes: 1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: MQBmP3RatN3Su9djzQf4GbZI8xP4OAHV4p8tdjoRyvc=)
2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 03:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Validity
Not Before: Sep 29 03:49:13 2026 GMT
Not After : Oct 6 03:49:13 2026 GMT
Subject: CN=6abb3539-e039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:57:ce:4e:6e:7f:53:5c:8f:bd:6e:0c:44:
9c:17:45:94:20:a0:87:b0:c2:4a:88:9a:3c:09:14:
dd:ac:ec:9e:ec:37:ec:4b:ec:e7:8f:32:6f:2c:ba:
bb:de:9c:20:a9:28:41:fc:83:9a:58:28:12:63:27:
83:32:1a:f0:00:b8:26:a0:e5:a7:38:ea:d5:30:f7:
a0:4e:50:ec:19:66:e5:e8:6e:55:c6:57:aa:01:31:
86:64:05:95:2b:eb:ff:74:3b:fb:44:e3:a8:5e:35:
ad:1e:1a:e8:55:ed:aa:70:9c:df:5b:e5:e2:bd:21:
b6:0f:d3:56:18:a5:4b:9e:59:29:bd:3b:2e:0a:a7:
7e:82:8e:d1:e3:68:d4:b3:1e:28:88:88:d3:25:34:
1a:67:8e:3d:81:82:44:92:91:32:e6:f7:c0:17:d2:
d8:10:cb:cb:53:77:f1:9d:66:26:e1:62:2e:f0:43:
04:1d:f6:1b:b5:4e:d2:fd:dc:53:9a:29:6e:83:22:
1c:a2:2e:63:4b:04:56:4d:07:2a:cd:23:80:fa:fd:
c9:df:9d:c4:ca:a8:7f:91:1e:34:ec:c6:26:06:1f:
3f:47:de:a9:00:4c:47:44:84:ac:2e:a4:cc:ea:d6:
39:2e:66:41:09:19:bb:24:2f:f7:1e:56:bd:c7:6a:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:EA:13:8F:32:A3:DB:7C:A1:04:1B:FF:05:B4:F8:0F:27:9F:CE
X509v3 Authority Key Identifier:
keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b1:88:b4:2b:34:43:b1:d7:b6:1e:b5:19:8f:19:fc:67:4d:
13:33:dd:67:14:03:82:30:4a:20:2b:5f:44:2c:da:3c:8e:7c:
c5:60:da:62:5f:26:fb:18:05:e8:85:90:19:80:da:f2:fd:1e:
fb:57:dd:d2:67:c6:e4:72:71:49:b4:c0:e7:b0:69:f1:e0:9e:
90:75:71:14:8e:34:47:b7:cd:3b:7b:57:eb:e4:73:8b:5f:ba:
75:fd:76:e8:46:b2:e7:46:69:db:09:8e:3b:fe:93:45:c3:4c:
44:de:da:80:77:c1:f1:30:c5:16:50:84:cb:5f:3f:93:bf:9a:
19:d3:dc:d1:a3:55:d0:f3:74:45:25:4c:cc:c1:ff:a5:1f:48:
f0:64:0f:08:29:99:12:e2:74:1b:be:25:d4:07:6d:83:1a:ba:
3a:30:8d:bb:7f:ac:49:06:41:0b:f2:00:95:38:eb:2c:d9:34:
16:ee:d2:93:66:f8:af:66:31:2e:ac:50:a9:da:98:ab:17:43:
76:b0:14:5c:53:0d:61:74:7c:a8:30:b5:78:17:09:95:6e:f0:
cb:4d:46:36:47:0f:0d:14:fd:f5:aa:02:42:c1:71:6c:f0:b8:
22:f4:3e:61:1e:75:b9:a2:09:07:cb:47:47:d0:c1:de:5e:83:
13:76:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:12:51 2026 by rpki-client