
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier: sxgRPDLW4DeSeE4fUGXJ2KAA0Y59ldjf4z0HnSouq10=
Subject key identifier: BB:79:2A:F6:94:63:A1:FF:D9:D5:FA:64:4E:88:6F:8E:52:33:54:AB
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number: 01E5
Signing time: Mon 21 Sep 2026 03:28:38 +0000
Manifest this update: Mon 21 Sep 2026 03:28:38 +0000
Manifest next update: Mon 28 Sep 2026 03:28:38 +0000
Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: PvuBtEboQOjQIdLb68mqKP3kNZWZBrU7i119QRXR1+o=)
2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: /7z7IB560Zyid1gAT+cg8GKzeif1WiKdRUALH0UbtFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Validity
Not Before: Sep 21 03:28:38 2026 GMT
Not After : Sep 28 03:28:38 2026 GMT
Subject: CN=6ab0a466-08bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:9a:2a:ee:bf:0d:25:d8:b4:95:e3:ef:0e:
bd:41:c2:69:32:49:6c:5f:3d:12:db:93:5f:72:e2:
39:61:78:65:e2:0f:5f:84:55:17:d6:80:bf:6a:16:
8f:88:ae:a2:95:17:56:cc:a3:b5:27:08:c2:64:9c:
89:7c:87:99:0e:ba:f3:ca:37:93:fc:23:21:43:29:
c8:25:c0:53:93:9a:06:c6:99:b6:71:6f:31:58:82:
18:eb:e9:05:b5:db:51:ae:20:31:a7:78:cf:a0:8a:
5d:89:ad:57:8b:dc:0d:d0:f1:17:a7:a8:8b:74:ac:
b5:88:ae:f3:61:03:b3:2a:d8:f6:c1:86:9f:89:11:
7b:ec:d7:a8:c8:fe:06:c5:75:9e:7e:67:7e:e5:2b:
4f:c5:d3:33:15:e2:f1:30:b9:2f:9c:46:4a:fb:84:
7d:d1:f2:a3:89:79:23:bb:99:7e:5b:cc:18:81:f2:
c4:49:86:1a:81:a9:23:cc:41:51:4a:00:ac:f1:cb:
16:8c:44:04:40:89:99:9b:e4:95:6b:73:4e:6a:6b:
46:60:18:0f:7a:41:d3:d5:f6:1b:1e:9c:20:9e:da:
64:74:b3:f9:fe:70:98:03:96:26:74:d8:85:18:1d:
15:a9:14:9e:ed:16:ae:2d:b5:cc:74:eb:d5:ae:e8:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:2A:F6:94:63:A1:FF:D9:D5:FA:64:4E:88:6F:8E:52:33:54:AB
X509v3 Authority Key Identifier:
keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:dc:75:81:f2:d9:98:36:31:c8:91:1b:eb:e6:3c:23:20:fa:
81:31:c6:1f:70:a3:f1:38:87:04:20:98:e4:fd:38:d1:4b:8d:
36:6b:ad:31:d9:43:b1:77:cf:d8:f2:64:ca:d2:e0:b8:9c:a1:
a5:3f:3f:c4:4a:10:d0:44:51:42:18:95:3c:b8:e5:6e:8d:cd:
af:4e:77:32:1b:6d:a6:53:41:7b:8b:5b:41:29:c4:c2:d5:ef:
5b:8f:2e:9e:d6:c1:a3:9f:58:82:71:32:64:33:e7:77:de:8e:
c9:39:d9:25:24:e7:4e:cb:eb:89:97:58:25:98:58:c2:37:02:
f7:bc:02:f5:4c:2f:5b:46:33:82:1e:84:53:12:73:af:68:8b:
a7:0b:98:3c:31:aa:94:d4:cf:70:aa:63:f7:ac:d0:e6:b9:fa:
ca:66:af:65:a9:37:8e:6a:6a:95:43:e0:d1:30:b2:2d:39:71:
31:f4:58:da:02:2d:e0:01:4d:02:2f:0a:df:ee:fe:b0:46:e3:
a0:a3:9f:31:ef:78:8b:35:05:10:7e:16:6c:07:87:c0:16:2d:
c0:b2:12:73:c2:38:17:a1:80:74:c1:8e:74:06:d9:a0:75:15:
69:1c:9a:94:7b:06:d2:63:d2:2f:f0:c4:f1:2d:b5:cb:dd:ec:
90:c9:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:16:06 2026 by rpki-client