
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json)
Hash identifier: D27D2V/XQY2B9c/Y7IvX9a4XoQSXjS35LwlTqd08b18=
Subject key identifier: 9C:3A:86:1E:E2:FD:0B:67:FA:52:86:77:57:A8:FE:FB:69:4E:9C:E7
Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Certificate serial: 26EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
Manifest number: 26D4
Signing time: Fri 12 Jun 2026 15:38:57 +0000
Manifest this update: Fri 12 Jun 2026 15:38:56 +0000
Manifest next update: Fri 19 Jun 2026 15:38:56 +0000
Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: GUGsTgQ5nH//+Ktp8cy0hqnuOtlySAoCx76fH2eahtc=)
2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: DpOAKbXIZRU31H9SibMfjtno+IW4EyE2+7nXpFauVCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9966 (0x26ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Validity
Not Before: Jun 12 15:38:56 2026 GMT
Not After : Jun 19 15:38:56 2026 GMT
Subject: CN=6a2c2810-995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:65:62:d7:62:ca:4a:69:85:1b:63:d4:fc:
4c:c9:23:7b:dd:47:01:e7:9d:5e:2c:fa:c6:a5:06:
ac:ad:15:39:8f:a9:a8:14:2f:ca:5e:83:b3:be:b0:
70:8b:76:db:3d:36:02:09:9c:66:ba:1a:2e:d7:ff:
15:6c:ca:6e:5e:a5:a0:04:11:ec:6e:ee:42:3e:14:
8e:72:47:69:56:a5:35:db:8c:7a:7d:9b:4a:31:a9:
18:d3:9c:c9:e1:87:b0:bb:2f:ca:38:5a:04:a9:65:
24:f7:b0:b5:00:55:a9:bd:3f:3a:39:93:58:b7:d5:
16:27:c4:d9:96:43:71:81:d9:c7:42:ff:a6:5d:7f:
ff:20:24:9f:51:98:d7:00:54:e8:22:19:1f:eb:92:
b6:01:ca:bc:53:a9:c4:3c:88:f4:42:ce:02:88:1d:
56:03:f7:ec:b1:71:f0:50:d6:6a:97:69:99:55:4d:
18:5a:8e:1e:83:79:a8:be:bf:68:88:66:d3:55:9e:
9e:a5:05:66:55:96:e4:aa:8b:73:66:e4:1d:b4:70:
27:34:5a:5d:08:65:8c:98:b6:29:c3:c7:1b:af:ce:
8e:e2:14:be:6b:a3:90:b1:00:e2:af:2b:0f:db:34:
48:5b:52:ec:cb:7c:36:38:ba:01:c7:0f:ad:1d:76:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:86:1E:E2:FD:0B:67:FA:52:86:77:57:A8:FE:FB:69:4E:9C:E7
X509v3 Authority Key Identifier:
keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:a2:fa:84:50:45:5a:f3:fa:4c:b0:8b:f8:32:ee:2d:b3:
67:69:11:c0:d9:82:ab:08:c5:b5:ee:ad:2e:f8:39:36:d3:26:
a8:73:86:06:a5:3b:48:29:d6:f5:22:cb:14:66:61:7d:c6:9c:
21:d3:f6:b3:71:61:97:f2:76:cc:33:e6:dd:a7:50:47:c2:38:
50:d8:4a:37:d2:c1:91:d5:9c:50:41:9a:98:60:80:66:56:f7:
1e:8f:cc:48:a4:e3:0f:d4:56:da:14:92:c5:c2:05:48:5d:b1:
d8:06:5d:b5:6d:f0:c6:78:8f:11:c3:ac:89:76:ae:9c:6f:67:
34:10:58:0f:de:9f:dc:a8:04:71:8b:1e:07:38:f5:2f:93:c6:
d5:aa:bb:62:0b:07:e9:c1:51:38:93:9c:28:6c:48:a9:9b:7e:
58:94:01:b4:52:58:66:26:8d:f3:27:65:80:dd:6c:33:d4:2b:
70:33:81:c4:3d:1b:fe:fd:80:94:61:c9:4d:81:66:78:e6:fc:
a8:61:8b:32:13:ba:7c:13:5a:8e:62:a4:74:d5:b9:23:80:60:
6f:4e:04:13:4d:6c:e7:14:1c:44:07:d2:d5:76:46:d3:96:ee:
bf:4a:85:40:7c:ff:45:3f:02:4f:99:f6:2a:79:2f:4a:cd:bf:
74:19:70:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5
NjgzQTNBRTMwHhcNMjYwNjEyMTUzODU2WhcNMjYwNjE5MTUzODU2WjAYMRYwFAYD
VQQDEw02YTJjMjgxMC05OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1JRlYtdiykpphRtj1PxMySN73UcB551eLPrGpQasrRU5j6moFC/KXoOzvrBw
i3bbPTYCCZxmuhou1/8VbMpuXqWgBBHsbu5CPhSOckdpVqU124x6fZtKMakY05zJ
4Yewuy/KOFoEqWUk97C1AFWpvT86OZNYt9UWJ8TZlkNxgdnHQv+mXX//ICSfUZjX
AFToIhkf65K2Acq8U6nEPIj0Qs4CiB1WA/fssXHwUNZql2mZVU0YWo4eg3movr9o
iGbTVZ6epQVmVZbkqotzZuQdtHAnNFpdCGWMmLYpw8cbr86O4hS+a6OQsQDirysP
2zRIW1Lsy3w2OLoBxw+tHXbVGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJw6hh7i
/Qtn+lKGd1eo/vtpTpznMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB
QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG
ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXFqi+oRQRVrz+kywi/gy7i2zZ2kRwNmCqwjFte6tLvg5NtMmqHOGBqU7SCnW
9SLLFGZhfcacIdP2s3Fhl/J2zDPm3adQR8I4UNhKN9LBkdWcUEGamGCAZlb3Ho/M
SKTjD9RW2hSSxcIFSF2x2AZdtW3wxniPEcOsiXaunG9nNBBYD96f3KgEcYseBzj1
L5PG1aq7YgsH6cFROJOcKGxIqZt+WJQBtFJYZiaN8ydlgN1sM9QrcDOBxD0b/v2A
lGHJTYFmeOb8qGGLMhO6fBNajmKkdNW5I4Bgb04EE01s5xQcRAfS1XZG05buv0qF
QHz/RT8CT5n2KnkvSs2/dBlwuw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:51 2026 by rpki-client