
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File: 8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier: /cE/hvdWieFaJA1sdiv5byn8XI4RctF1CSlNLI7eESM=
Subject key identifier: 76:34:23:DB:04:2F:B1:AA:3F:40:10:A4:DC:76:1E:B0:C7:06:9C:57
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number: 01A6
Signing time: Mon 11 May 2026 04:11:21 +0000
Manifest this update: Mon 11 May 2026 04:11:20 +0000
Manifest next update: Mon 18 May 2026 04:11:20 +0000
Files and hashes: 1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: fp5LUDiHQG5KXff1aMQGhImOYN8MhmjFOxxIMbVzoM8=)
2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Validity
Not Before: May 11 04:11:20 2026 GMT
Not After : May 18 04:11:20 2026 GMT
Subject: CN=6a0156e9-c8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:dc:61:fa:9d:94:95:85:ed:b5:d5:63:ae:
35:25:5b:b5:96:d6:6e:64:3b:09:84:6b:a0:e6:ec:
89:01:fd:0f:e8:00:37:2c:0c:df:e8:0e:3e:b0:da:
22:a5:0a:b0:95:2d:1b:9e:4e:40:be:0d:34:11:cc:
a7:44:50:13:28:36:fc:f7:0e:e6:5c:0c:2d:af:8a:
ac:e8:d3:e2:92:c4:d1:cb:8c:ac:06:7a:cd:18:c6:
b9:3d:94:7f:ec:5b:e7:24:83:04:61:c7:8a:63:42:
7e:72:55:17:15:d7:a2:dd:97:df:3a:7b:cd:47:c7:
5a:4b:e4:25:3c:cd:9c:f5:b9:d6:f3:64:1d:1b:3b:
ab:f2:22:42:65:ba:bb:09:0a:a6:30:90:0c:0f:21:
96:1b:9d:14:8d:2e:95:fb:c3:83:9b:7d:ae:0f:9c:
08:3f:f8:ae:58:79:f4:8a:fd:01:e1:e8:e3:60:21:
cd:40:e6:2c:4b:52:95:cf:01:28:51:b5:c1:89:1c:
02:53:99:b7:3b:2f:e6:f4:1a:4f:db:45:cc:b9:aa:
a6:c4:e6:21:85:f7:e2:50:62:ce:6a:b6:d3:5c:9d:
27:8a:21:c3:79:4b:3c:77:73:10:c2:01:69:19:f9:
0a:e5:08:7f:74:9a:00:9b:18:4d:b1:fb:aa:15:bd:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:23:DB:04:2F:B1:AA:3F:40:10:A4:DC:76:1E:B0:C7:06:9C:57
X509v3 Authority Key Identifier:
keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:15:e8:d5:fd:fb:08:b4:7c:1e:2b:a9:d2:10:b4:84:65:ac:
64:56:b6:b9:74:b0:39:ec:68:4b:d4:ef:e6:fe:b7:64:7e:0a:
33:ca:85:55:ed:71:b0:e5:98:2f:a1:4b:4b:0b:ca:bb:a6:3a:
52:73:3d:17:73:24:d3:d7:94:93:a0:7d:72:89:9c:4b:75:87:
4d:c9:4f:4a:58:ef:7e:56:d9:35:01:54:a6:46:fb:6b:c2:b0:
52:3b:ce:14:23:6f:c4:39:d0:9d:70:77:e3:ab:bd:ff:d3:42:
36:86:59:32:2e:f2:7c:f4:68:07:44:83:49:4e:17:77:e7:86:
a7:40:51:d1:70:b2:a4:ff:a3:c3:ea:22:dd:e5:ef:45:b6:55:
1b:0a:b0:7b:2d:ba:6c:fa:13:51:5c:42:68:00:c6:6f:4f:eb:
5a:3d:a2:b0:95:55:f3:6f:7a:f8:e6:bc:17:94:1d:20:d5:cc:
28:fe:34:de:f3:dc:b6:76:93:1b:52:28:34:01:aa:ac:84:f3:
37:60:26:f3:31:7c:a6:8d:bb:83:bb:79:69:74:5b:16:33:00:
6b:fa:a5:47:df:e6:64:2d:95:44:10:b9:5b:6a:1c:8e:6e:aa:
5b:e6:ca:e9:b1:5c:b5:e2:60:df:d8:39:b4:c8:99:3a:3e:0a:
d2:56:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:37:08 2026 by rpki-client