
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json)
Hash identifier: IsPwT5UIPsX8F0/29dihnu5RR0QdPozsP3CL3amgtP0=
Subject key identifier: F6:40:BD:3A:B3:FE:20:58:D5:2E:5C:32:05:5F:33:03:42:53:05:9E
Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Certificate serial: 0E5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
Manifest number: 0E42
Signing time: Tue 12 May 2026 17:49:41 +0000
Manifest this update: Tue 12 May 2026 17:49:40 +0000
Manifest next update: Tue 19 May 2026 17:49:40 +0000
Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: +oa+vMW0T6CoLJussVENR346969MvdjXy7fsaqIHq/g=)
2: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=)
3: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Validity
Not Before: May 12 17:49:40 2026 GMT
Not After : May 19 17:49:40 2026 GMT
Subject: CN=6a036835-765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8a:b3:36:88:d5:60:62:b0:1e:be:3b:b1:fd:
fd:27:ae:c3:f8:fe:12:81:93:dd:70:c8:0d:17:25:
02:5c:86:a4:09:e6:f5:98:38:60:ae:24:53:a7:73:
be:e1:17:b9:43:49:51:74:77:ca:7c:81:d2:a8:37:
3b:7b:d0:0c:d1:ed:6b:22:39:b2:75:a1:bc:d6:72:
c2:8a:3d:3a:89:c3:c4:6e:f6:c0:b7:36:45:eb:cb:
af:5c:d2:c2:fb:80:a8:b3:a7:ef:2c:5b:18:4c:1f:
16:3b:03:db:99:11:f4:ea:70:3d:83:c8:df:2f:d7:
f9:89:6b:b0:c6:a0:99:f0:15:96:ba:55:83:ee:99:
17:63:f5:f0:5c:b7:71:ec:41:41:5c:81:ea:b1:8c:
7c:c2:34:e4:27:64:1f:92:87:5e:2a:bc:87:ac:6a:
dc:46:00:f2:4c:73:6c:5f:ab:b9:cd:a2:ba:8c:26:
7b:91:13:17:54:1f:fa:34:3f:75:a4:ab:da:43:b1:
c5:2c:2e:07:72:bd:e5:b0:8e:d3:f4:4c:60:4c:8e:
1d:14:c5:a1:1c:04:c3:54:b7:3e:6e:87:56:73:1c:
f8:39:cd:df:ee:31:a5:5c:27:0a:5e:a6:4e:d4:f2:
cd:a3:34:7d:41:5a:42:36:47:0e:28:95:a5:dc:1d:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:40:BD:3A:B3:FE:20:58:D5:2E:5C:32:05:5F:33:03:42:53:05:9E
X509v3 Authority Key Identifier:
keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:9b:28:d8:63:58:86:63:98:ef:16:ea:66:59:86:3e:cb:cd:
2e:72:e6:1f:55:cb:0c:77:fd:b7:c8:eb:47:1e:bd:56:ed:ff:
1d:5a:a5:1d:09:51:20:d2:51:89:70:b5:d4:3a:57:49:a3:6e:
23:6f:8b:d2:cf:32:e2:69:e5:20:31:be:8d:0d:3b:f0:a4:6e:
fc:8b:3a:2c:24:98:ba:4b:4d:b3:58:f3:e0:18:c7:c9:01:c7:
61:23:0b:d7:80:df:91:40:ce:db:bb:ca:29:eb:89:32:f5:24:
ee:70:fa:b0:bd:bf:83:42:6a:41:c8:3a:5c:8d:79:78:0f:2c:
83:28:e6:e9:09:15:9e:23:1b:a4:a5:d2:53:22:f0:d0:85:b6:
5e:7a:84:be:79:ca:16:69:38:bc:1d:f3:2b:57:77:6c:1f:f3:
64:7a:9f:b9:a3:d9:2a:ea:ff:b9:9f:e5:27:80:d3:08:21:1e:
28:b5:93:5e:d3:86:41:23:af:af:0f:7d:a2:05:6a:ea:7d:ab:
61:80:08:ee:5f:bf:b6:fc:1c:d3:2b:e9:83:c8:0c:70:74:a6:
64:9a:98:82:a4:2a:63:99:83:fa:b0:d7:9d:8d:bc:9d:ce:c8:
c1:b2:98:27:56:05:b6:27:5d:1a:9f:c0:20:c5:e9:93:4e:d5:
14:0e:76:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1
NTJCNERFODUwHhcNMjYwNTEyMTc0OTQwWhcNMjYwNTE5MTc0OTQwWjAYMRYwFAYD
VQQDEw02YTAzNjgzNS03NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+IqzNojVYGKwHr47sf39J67D+P4SgZPdcMgNFyUCXIakCeb1mDhgriRTp3O+
4Re5Q0lRdHfKfIHSqDc7e9AM0e1rIjmydaG81nLCij06icPEbvbAtzZF68uvXNLC
+4Cos6fvLFsYTB8WOwPbmRH06nA9g8jfL9f5iWuwxqCZ8BWWulWD7pkXY/XwXLdx
7EFBXIHqsYx8wjTkJ2QfkodeKryHrGrcRgDyTHNsX6u5zaK6jCZ7kRMXVB/6ND91
pKvaQ7HFLC4Hcr3lsI7T9ExgTI4dFMWhHATDVLc+bodWcxz4Oc3f7jGlXCcKXqZO
1PLNozR9QVpCNkcOKJWl3B2KqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZAvTqz
/iBY1S5cMgVfMwNCUwWeMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2
OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4
UlhZS0EwTGtPNzlWSzAzb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgJso2GNYhmOY7xbqZlmGPsvNLnLmH1XLDHf9t8jrRx69Vu3/HVqlHQlRINJR
iXC11DpXSaNuI2+L0s8y4mnlIDG+jQ078KRu/Is6LCSYuktNs1jz4BjHyQHHYSML
14DfkUDO27vKKeuJMvUk7nD6sL2/g0JqQcg6XI15eA8sgyjm6QkVniMbpKXSUyLw
0IW2XnqEvnnKFmk4vB3zK1d3bB/zZHqfuaPZKur/uZ/lJ4DTCCEeKLWTXtOGQSOv
rw99ogVq6n2rYYAI7l+/tvwc0yvpg8gMcHSmZJqYgqQqY5mD+rDXnY28nc7IwbKY
J1YFtiddGp/AIMXpk07VFA52QA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:07:28 2026 by rpki-client