
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier: n1RQ6NAFVVDGStPrpa2yrlvxeWaL0ODNAKpdekMQwJQ=
Subject key identifier: 29:B3:04:6B:2F:F7:CA:BC:D3:DF:FA:7C:A7:54:4C:7F:8F:76:48:E5
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number: C9
Signing time: Mon 11 May 2026 06:57:52 +0000
Manifest this update: Mon 11 May 2026 06:57:52 +0000
Manifest next update: Mon 18 May 2026 06:57:52 +0000
Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: tHRdFdiGmVVC7F100NUhynHllBRqMtodbDldWqEqrxs=)
2: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: HOtPEcNNuM1rQs6V4akweCKO9HvoxnkoVdQyxUxgTBk=)
3: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Validity
Not Before: May 11 06:57:52 2026 GMT
Not After : May 18 06:57:52 2026 GMT
Subject: CN=6a017df0-b78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:85:08:8c:65:50:4a:a1:6a:9a:f6:ee:48:e2:
6c:a9:85:59:0e:c6:06:64:52:82:4c:a8:68:82:31:
83:dd:68:01:ec:56:96:85:67:e1:e1:25:4f:c3:ca:
9c:9e:20:6c:6e:a6:cc:fd:ab:b8:1d:5b:c0:89:cb:
fe:bd:73:93:90:43:77:71:78:cc:13:3f:fa:27:51:
cd:44:9e:92:13:e7:52:df:46:5d:48:78:9a:60:c3:
8e:f1:47:6b:a8:14:2a:da:b3:78:a0:48:11:ce:ed:
98:85:90:66:36:54:b0:7e:13:90:7b:94:2b:d6:52:
18:81:a0:bf:29:c9:dd:0b:69:34:09:fb:89:33:29:
65:a6:3e:33:19:bb:23:fe:fe:88:ea:4d:3e:7e:72:
e2:05:15:67:12:09:02:df:c9:ee:59:cb:e7:de:90:
01:b7:06:2f:10:5b:4d:29:97:a8:e9:c8:79:b5:35:
91:7f:6a:dc:82:9c:6d:81:5b:f4:4d:6d:b4:d8:2b:
c4:65:72:69:8b:72:4d:69:2b:03:ab:0c:1e:25:b4:
c1:fd:ca:bb:61:23:b6:39:9f:07:c8:ab:cb:fe:77:
ea:fe:17:56:44:5d:9a:91:e0:c0:05:8d:2d:93:8a:
c4:53:b8:bc:15:f9:0b:1d:8d:7b:32:8a:a2:50:58:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:04:6B:2F:F7:CA:BC:D3:DF:FA:7C:A7:54:4C:7F:8F:76:48:E5
X509v3 Authority Key Identifier:
keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:36:6c:0b:4e:ea:65:2c:0b:e9:bd:42:e2:53:4d:d5:99:
70:aa:78:54:5d:4b:58:67:eb:2f:21:10:9e:a5:38:32:89:cd:
c3:00:4e:fb:06:38:43:04:e0:79:eb:fc:e2:09:2a:9b:b9:a6:
5d:26:2e:8d:6d:65:0a:1f:9a:98:54:88:72:91:06:4a:50:e8:
15:9d:6a:92:22:92:2a:6b:f9:45:5f:0a:88:d8:19:41:87:68:
7b:d4:c5:4f:32:b3:d6:fc:b6:36:09:8d:81:59:03:20:02:08:
65:2b:75:e2:11:1a:e5:88:72:11:25:a3:18:a3:5f:ec:f8:f1:
c1:98:6f:a6:ee:50:d0:36:b7:9b:87:b4:a8:1f:34:81:bf:7d:
da:50:26:82:fc:b9:8e:b9:2d:42:f7:73:d7:12:a6:11:f5:60:
03:7c:df:f6:cd:4a:bc:21:25:ff:cc:34:6c:6d:d5:6a:13:01:
f3:bc:a7:fe:5d:e9:ff:a1:4e:3f:c6:26:6e:52:06:b8:5d:50:
69:ba:bc:dd:b1:d2:ef:16:d5:10:d8:f4:a4:38:ee:ce:ad:85:
f1:a7:6c:ec:50:52:42:28:af:75:52:9b:c3:39:de:f3:8c:97:
ed:6b:7e:d5:ab:62:d6:79:8a:b2:ed:4a:7b:5f:7a:bd:6f:ab:
be:9b:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:51 2026 by rpki-client