
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier: KbW6xyWwyFGufB6u1t9ypk8iNvOLCvvSQf/o/wShnHs=
Subject key identifier: 89:5D:02:EF:A7:F9:64:97:5D:93:7B:A3:1B:4F:7C:1B:0B:1E:9B:BB
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number: EF
Signing time: Thu 23 Jul 2026 08:08:52 +0000
Manifest this update: Thu 23 Jul 2026 08:08:52 +0000
Manifest next update: Thu 30 Jul 2026 08:08:52 +0000
Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: bbFfDTin9BblfRbZGyr0UrqzK544k3YJNLgWAVc5C5s=)
2: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: tECE+9B2D7TmvMWbzHOk6z9VaQFfbh8pZao3qlnbgxU=)
3: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: 5D5ovIuJv1jnZ/Pc8OvAEOVclNhv4nrz5vQYCTyXvvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Validity
Not Before: Jul 23 08:08:52 2026 GMT
Not After : Jul 30 08:08:52 2026 GMT
Subject: CN=6a61cc14-5f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:da:c5:17:be:7a:69:35:87:c7:f8:ba:73:
24:19:14:c7:66:98:4d:d5:0c:05:ce:c6:88:57:db:
97:74:64:de:b1:57:a8:c0:dd:f4:96:40:b5:25:ce:
6f:40:ab:85:fe:b8:08:e6:09:27:6e:74:4c:25:29:
c8:4a:fe:69:68:d5:1b:f5:05:bf:7f:f0:20:4b:77:
9a:64:b5:6c:96:c4:10:cf:19:5f:57:f1:01:c6:08:
53:c4:78:f5:aa:ff:20:e4:ec:8f:3b:82:84:fd:e7:
50:ac:43:83:8a:b6:ed:5b:c9:50:a8:fb:9d:ce:b8:
4a:6f:50:5f:ab:bc:00:a0:6f:57:d5:f1:5d:82:e0:
39:b7:83:c0:70:49:43:01:5a:97:07:4d:8e:c4:f1:
72:4c:75:06:37:d0:5a:24:07:9c:8e:b2:c7:44:ee:
10:9e:c9:db:5f:1f:21:ce:32:d1:fc:28:a0:04:f9:
c2:87:c1:32:99:fd:23:3a:82:42:71:e4:97:f4:4c:
23:bc:fa:3b:5f:91:78:ed:e2:9d:db:23:50:57:8b:
1f:a8:03:0a:72:02:93:fa:6a:70:97:9c:6c:64:f6:
2a:79:b9:4d:36:c7:c6:5e:5b:a3:1c:d0:c2:dd:7b:
7a:90:27:98:85:d7:ce:25:ee:b8:0b:f3:90:2e:b9:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:02:EF:A7:F9:64:97:5D:93:7B:A3:1B:4F:7C:1B:0B:1E:9B:BB
X509v3 Authority Key Identifier:
keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:91:f4:a2:49:99:17:11:2e:4e:ea:98:b1:85:22:97:12:f9:
ff:ab:c4:51:d9:0e:b5:da:fe:6a:f6:4c:33:be:a6:b4:2b:d9:
5f:7a:f8:fb:08:7a:19:a2:4d:4d:82:cb:b9:6c:2e:82:92:f9:
5b:fb:2e:de:c8:9f:54:a5:06:f9:75:15:f0:78:ea:86:49:32:
af:14:23:e5:df:30:13:53:c1:21:b5:57:26:7c:26:ec:f6:1c:
4d:07:ef:b7:17:e2:c5:40:4a:a9:d9:1f:12:e3:62:8a:05:d4:
45:fc:ef:ba:f1:51:6b:17:70:ef:57:ae:20:ee:2f:e1:0b:94:
a3:89:81:32:1d:92:f7:dd:64:cf:2a:e0:3e:ab:1c:1c:10:c5:
b2:a4:23:93:9a:21:90:6a:3f:de:f9:b9:da:d3:40:8d:5c:4f:
cc:40:f1:77:0f:58:ac:b6:ee:d9:90:59:03:73:56:fd:41:c0:
d7:6a:5f:bc:79:21:af:98:59:14:8e:45:64:9e:54:69:8c:a7:
db:d3:cd:8b:f5:b6:63:d4:fa:64:d3:9f:7d:11:cc:5e:c2:b1:
68:45:69:0e:21:e1:b8:93:66:58:a5:81:ac:dd:eb:3b:59:96:
16:f8:59:31:f1:0c:eb:08:2b:6d:37:e5:b2:3a:c6:b1:fb:bc:
b9:cc:c2:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJBQ0IxMTAvBgNVBAUTKEYwMDkyMzNEOEQwODdGQzFEMEY2NDI1NzgwRTNBNEQ4
NDRBMzRGODEwHhcNMjYwNzIzMDgwODUyWhcNMjYwNzMwMDgwODUyWjAYMRYwFAYD
VQQDEw02YTYxY2MxNC01ZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmDaxRe+emk1h8f4unMkGRTHZphN1QwFzsaIV9uXdGTesVeowN30lkC1Jc5v
QKuF/rgI5gknbnRMJSnISv5paNUb9QW/f/AgS3eaZLVslsQQzxlfV/EBxghTxHj1
qv8g5OyPO4KE/edQrEODirbtW8lQqPudzrhKb1Bfq7wAoG9X1fFdguA5t4PAcElD
AVqXB02OxPFyTHUGN9BaJAecjrLHRO4QnsnbXx8hzjLR/CigBPnCh8Eymf0jOoJC
ceSX9EwjvPo7X5F47eKd2yNQV4sfqAMKcgKT+mpwl5xsZPYqeblNNsfGXlujHNDC
3Xt6kCeYhdfOJe64C/OQLrkDcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIldAu+n
+WSXXZN7oxtPfBsLHpu7MB8GA1UdIwQYMBaAFPAJIz2NCH/B0PZCV4DjpNhEo0+B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkFDQi83NEJEODU4QTFC
M0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4SFE5a0pYZ09PazJFU2pU
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkFDQi83NEJEODU4QTFCM0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4
SFE5a0pYZ09PazJFU2pUNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABZH0okmZFxEuTuqYsYUilxL5/6vEUdkOtdr+avZMM76mtCvZX3r4+wh6GaJN
TYLLuWwugpL5W/su3sifVKUG+XUV8HjqhkkyrxQj5d8wE1PBIbVXJnwm7PYcTQfv
txfixUBKqdkfEuNiigXURfzvuvFRaxdw71euIO4v4QuUo4mBMh2S991kzyrgPqsc
HBDFsqQjk5ohkGo/3vm52tNAjVxPzEDxdw9YrLbu2ZBZA3NW/UHA12pfvHkhr5hZ
FI5FZJ5UaYyn29PNi/W2Y9T6ZNOffRHMXsKxaEVpDiHhuJNmWKWBrN3rO1mWFvhZ
MfEM6wgrbTflsjrGsfu8uczCcw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:02 2026 by rpki-client