
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier: 3SxC9BUmv3vyyR3dCK+yXWMS8ezexElWS4V8ogC26e4=
Subject key identifier: A8:99:01:3D:BA:8C:10:26:9A:5F:BE:8D:55:81:BF:59:58:D6:D5:27
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial: 0CE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number: 0CD2
Signing time: Thu 16 Apr 2026 18:23:23 +0000
Manifest this update: Thu 16 Apr 2026 18:23:23 +0000
Manifest next update: Thu 23 Apr 2026 18:23:23 +0000
Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: Yxos28X4ytjW2jzeekCQxuvApZ33eqYuD8QhLrBxYNM=)
2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 0Iv0ZuSYAuRh3Zkw3A1H+BtMqxX9vJos0Furl1eQ9OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Validity
Not Before: Apr 16 18:23:23 2026 GMT
Not After : Apr 23 18:23:23 2026 GMT
Subject: CN=69e1291b-eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:bd:ac:6f:5b:8a:cc:d7:c1:fb:53:65:48:
c2:ea:22:42:8d:93:4f:14:22:f2:b8:ac:f9:38:04:
c0:f2:46:65:39:64:81:33:ac:ce:fb:9c:bc:f2:64:
81:c2:69:38:58:fe:e8:8d:f1:5a:1c:60:5b:13:36:
89:a1:f4:4c:13:7d:c8:a7:8a:e6:7b:0a:55:92:37:
a8:8b:f5:c6:ec:a2:3a:81:a6:fa:61:c1:e1:1c:68:
bf:68:d2:91:1d:55:1d:80:d5:4f:24:1c:4e:e4:5a:
fc:bf:9d:1c:18:c5:af:d9:41:db:e3:93:93:dc:ec:
e2:71:5a:fc:66:ab:3a:e0:7e:0f:cd:56:45:d3:8d:
79:ee:42:30:4a:33:40:db:76:0d:f1:7e:38:aa:0b:
74:b6:42:d4:2d:f6:11:60:28:77:40:01:e3:c6:6b:
bb:f4:67:98:0f:4a:83:a2:62:cd:4f:64:98:40:f6:
41:48:63:83:0f:a8:67:d0:12:f3:3f:4e:3b:d5:05:
49:42:b3:84:5e:db:08:d6:36:47:bb:72:a2:4d:5a:
67:95:fa:9e:3c:33:1f:9d:a6:6f:5e:29:ae:d0:5c:
be:dc:85:b1:d8:7d:53:a6:6d:6e:ec:82:cd:8e:ad:
40:2e:6b:64:c7:1a:89:95:6a:83:28:d9:d4:f1:e7:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:01:3D:BA:8C:10:26:9A:5F:BE:8D:55:81:BF:59:58:D6:D5:27
X509v3 Authority Key Identifier:
keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:35:a8:7e:07:83:3b:51:bc:cf:db:78:1f:70:72:e5:ce:61:
61:e3:5b:e3:45:b8:f5:c8:ad:fa:a3:36:1f:a6:f0:12:12:ed:
e0:f6:ed:66:da:a3:49:5f:55:80:09:5d:f5:1e:ea:c6:69:52:
13:71:a5:da:67:46:14:5c:7a:69:aa:48:e6:26:97:a5:63:5a:
91:0c:82:da:70:39:dd:44:05:fc:9a:dc:12:51:e1:5d:2b:55:
c6:43:ff:38:c8:76:8b:01:6e:e4:9f:a1:d3:bc:3c:91:e8:dc:
83:4f:41:0f:f7:34:df:ca:63:2c:72:12:5d:7b:5a:01:b2:e1:
6c:4c:43:51:98:e8:d9:ca:19:42:d9:0d:5e:a3:2a:87:bb:ac:
9b:84:4d:64:18:57:f2:eb:71:45:69:10:a8:1d:23:83:d5:aa:
03:6d:fc:65:fb:b1:0b:df:02:1a:ef:74:2d:92:fc:20:b8:dc:
a3:f5:e3:a2:78:9b:9e:a6:b6:b8:f6:b2:c5:16:8f:ca:b7:e0:
de:eb:4d:f9:b7:4c:5a:08:a4:ba:d7:b8:5a:dd:08:56:a9:56:
57:93:b5:50:74:73:19:e6:dc:3a:4d:3c:cb:84:50:60:9b:a1:
4a:a8:a2:66:cd:6f:b4:87:07:43:6d:0f:ac:ad:f4:48:9d:6a:
f6:de:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:39 2026 by rpki-client