
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier: Q1uBSp0KJqTDpAVIPvon1pQmPik4ktOo7fZY+9V1uDU=
Subject key identifier: 27:CE:F3:CE:5B:7B:3D:A9:D1:E9:09:52:1C:BB:B4:C8:AD:0A:D2:91
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 0421
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number: 040B
Signing time: Wed 13 May 2026 00:33:55 +0000
Manifest this update: Wed 13 May 2026 00:33:55 +0000
Manifest next update: Wed 20 May 2026 00:33:55 +0000
Files and hashes: 1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: SFq+xfGf0Ve+yWkyKEKHNiMp7Q6+gUyC8nXMfSzKFM4=)
2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: 8qJZlbai0qCF6BnpaN3fDjskYcVGNM1xXEuO4Wf6FW4=)
3: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: 3wXttl5uajjTVlCGGjX/uN+/93T9v8dcsR8uUU/JFl8=)
4: 422287F0D30511EE8753D541C4F9AE02.roa (hash: xLUhGdv8VQ8dWZLRVLoGLuRNGoVySRUxi1n5EveBEKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: May 13 00:33:55 2026 GMT
Not After : May 20 00:33:55 2026 GMT
Subject: CN=6a03c6f3-b594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:ee:aa:f4:20:24:50:1e:24:7f:9c:6e:5a:
ca:1d:ea:94:79:1e:69:b0:0c:c5:02:6c:25:14:50:
5f:91:4f:e2:d4:bf:bb:8f:1a:c0:af:6e:2c:69:ba:
b0:1b:bd:f6:d5:86:5f:27:99:3e:1d:46:f4:be:7e:
34:80:7a:f5:e6:4a:98:ca:e5:b5:38:09:d9:ff:ed:
0e:7f:a5:f4:cb:f0:22:36:b1:46:0a:b6:f9:b3:4d:
c3:d0:d6:93:b6:54:a8:36:b8:47:eb:1a:83:4a:ca:
1e:db:49:12:30:99:1f:63:9e:71:bd:cf:6f:5c:7c:
53:c3:e9:a6:46:ee:c6:9b:63:1e:40:c9:bc:eb:69:
58:1c:ee:a5:f8:91:46:fb:4c:f9:56:c4:72:64:95:
fd:97:e0:48:38:76:fc:e6:2c:bf:81:89:a5:51:43:
78:29:e4:56:7f:27:b6:ed:02:d1:cf:ed:77:6c:52:
b8:0e:5b:14:bc:1f:06:c6:3f:48:b1:ae:fd:e0:08:
aa:c8:ca:bb:9e:2e:ed:b4:6a:65:b9:5e:34:83:44:
fd:d4:8c:65:9e:ca:d1:8d:82:6b:c4:db:72:f1:98:
69:bc:fc:9d:68:b0:12:78:61:cf:34:79:6a:da:3c:
26:6d:25:26:a6:12:32:24:d7:4a:25:77:15:0d:34:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:F3:CE:5B:7B:3D:A9:D1:E9:09:52:1C:BB:B4:C8:AD:0A:D2:91
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:33:2e:a1:d7:a6:57:95:60:4e:15:ee:d8:ec:2b:95:84:
4f:46:6b:ca:0d:d9:ac:73:85:c8:8b:12:64:ba:f3:de:80:56:
c7:30:6c:2e:7d:6e:56:f0:35:96:26:63:e9:87:b0:9b:5e:e5:
18:b9:7f:2b:03:3f:bf:fb:ff:9e:5a:19:ad:8d:e8:d4:4d:ee:
86:5e:e0:10:74:10:da:67:5f:cb:ef:3a:03:d4:17:de:c1:eb:
bd:ee:4d:5c:bd:e7:c5:61:77:60:dc:62:dc:6c:f7:6d:a4:b6:
93:2a:3b:b3:20:cc:c7:8f:be:3b:db:5b:bc:f5:e9:11:18:8a:
d4:b9:8d:3c:c3:b9:96:c6:b7:7e:da:2d:74:ec:d5:a3:33:7a:
83:19:14:86:7f:a2:69:58:b2:48:e8:c7:dc:ad:58:a8:fb:6f:
20:ee:e1:27:a4:67:d3:36:84:b2:e8:38:9e:b8:1c:ab:fa:4d:
d8:16:ac:5c:c4:a5:c2:c8:6a:25:40:14:96:a6:5e:43:90:f0:
6c:86:e0:86:22:3f:72:e3:9f:cb:68:17:6f:cd:ed:2c:95:83:
ae:bb:d8:e6:3e:37:dc:2b:8a:92:00:34:a1:ee:40:53:c1:7e:
0c:ef:d9:76:04:2b:8f:66:27:13:ae:e9:7e:b3:8c:4f:cd:60:
c0:b3:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:04 2026 by rpki-client