
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json)
Hash identifier: oeMFYnApb7mnDFIZtw6m4RrOyzg76xEWtOKo/ZMzGDc=
Subject key identifier: 5A:3C:5C:59:13:B0:68:14:97:C3:1D:FF:B1:92:06:D8:93:EF:C9:69
Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Certificate serial: 26C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
Manifest number: 26AC
Signing time: Thu 26 Mar 2026 15:41:01 +0000
Manifest this update: Thu 26 Mar 2026 15:41:01 +0000
Manifest next update: Thu 02 Apr 2026 15:41:01 +0000
Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: DLeAQyggxfDi79uBUAOB0RsmBVIwhQJH5l36L9tZTYI=)
2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: DpOAKbXIZRU31H9SibMfjtno+IW4EyE2+7nXpFauVCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9926 (0x26c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Validity
Not Before: Mar 26 15:41:01 2026 GMT
Not After : Apr 2 15:41:01 2026 GMT
Subject: CN=69c5538d-7698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:36:d8:9f:c7:8d:39:e6:ea:6b:e7:31:47:
4c:9f:e5:4c:d6:65:f4:e4:73:ba:a0:37:8c:de:3e:
aa:65:68:30:f6:45:e1:d0:f8:12:f4:4a:9d:29:62:
f9:2f:50:b5:a5:84:cd:b8:89:54:fb:80:24:73:2a:
60:02:7a:90:88:90:a2:63:ac:52:cf:40:da:5b:3b:
a9:7c:aa:7c:51:f4:2e:66:80:05:d4:6a:ce:0d:5d:
46:62:aa:1d:62:76:4a:19:75:3a:62:ae:42:74:6f:
d4:f3:f2:16:a6:87:53:5e:a6:c8:35:3a:07:d3:85:
b0:6a:89:46:1f:73:92:5b:e4:a4:60:aa:6f:63:9f:
89:a9:90:9a:b7:ed:cb:04:eb:e1:52:36:81:26:a7:
01:4c:cb:79:e2:97:9f:fa:37:7c:06:49:17:39:d6:
ac:3d:b9:8f:5f:f2:b8:82:69:6c:5e:b0:9b:67:85:
f7:5f:26:bf:b3:18:33:86:e8:19:99:12:1d:c0:b1:
a0:51:78:1d:f4:f3:38:56:ee:25:8d:61:d1:9a:b7:
ff:db:c4:69:0f:cb:f5:ac:fc:9f:83:ec:03:6b:a9:
15:0e:ed:91:05:56:e8:0d:74:a3:7e:b7:19:09:27:
d4:b4:8b:dc:79:11:be:15:44:f5:25:2f:51:7b:e7:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:5C:59:13:B0:68:14:97:C3:1D:FF:B1:92:06:D8:93:EF:C9:69
X509v3 Authority Key Identifier:
keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:75:37:60:a8:0e:9c:8d:0b:5f:c0:05:5e:e9:7f:c0:10:fc:
eb:f9:ce:07:05:5d:bf:36:eb:5f:d8:20:03:55:c3:55:00:1d:
7a:f1:08:9d:03:8b:a9:53:13:9f:53:11:74:a7:ca:0b:9d:73:
65:78:0e:e5:a6:f0:a6:ec:db:89:be:ef:e7:d8:f0:a0:53:72:
09:d2:0b:c1:4d:88:8b:11:ff:b2:8b:c6:6c:f7:18:1d:5e:f9:
eb:9e:86:e8:3d:cf:ef:a6:9f:71:8a:87:5e:4f:13:e0:a5:39:
12:88:c3:99:3e:37:b0:45:a8:a5:c1:45:7f:1e:00:47:65:a5:
c7:76:22:77:f6:71:6b:30:53:ef:de:a5:5b:21:3c:76:66:ce:
c9:8d:57:de:02:b9:70:e4:77:06:67:68:12:d5:fd:00:06:5d:
aa:87:ca:fe:f9:a9:e1:a9:8d:fc:13:cb:29:a6:a9:ca:06:79:
8c:2d:f1:a2:77:1b:89:3e:5c:28:a2:8e:e7:33:24:91:b6:a9:
fc:9d:70:36:a1:a3:ae:8d:72:7c:ad:14:60:4b:fd:f9:51:a2:
4b:22:1b:f9:bd:27:7d:db:ba:cc:90:3e:8d:da:61:df:8d:86:
87:86:86:81:c0:10:77:2a:f9:39:f3:2d:b9:f0:b6:2f:91:f3:
e0:4d:5f:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5
NjgzQTNBRTMwHhcNMjYwMzI2MTU0MTAxWhcNMjYwNDAyMTU0MTAxWjAYMRYwFAYD
VQQDEw02OWM1NTM4ZC03Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4E822J/HjTnm6mvnMUdMn+VM1mX05HO6oDeM3j6qZWgw9kXh0PgS9EqdKWL5
L1C1pYTNuIlU+4AkcypgAnqQiJCiY6xSz0DaWzupfKp8UfQuZoAF1GrODV1GYqod
YnZKGXU6Yq5CdG/U8/IWpodTXqbINToH04WwaolGH3OSW+SkYKpvY5+JqZCat+3L
BOvhUjaBJqcBTMt54pef+jd8BkkXOdasPbmPX/K4gmlsXrCbZ4X3Xya/sxgzhugZ
mRIdwLGgUXgd9PM4Vu4ljWHRmrf/28RpD8v1rPyfg+wDa6kVDu2RBVboDXSjfrcZ
CSfUtIvceRG+FUT1JS9Re+cC2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFo8XFkT
sGgUl8Md/7GSBtiT78lpMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB
QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG
ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnXU3YKgOnI0LX8AFXul/wBD86/nOBwVdvzbrX9ggA1XDVQAdevEInQOLqVMT
n1MRdKfKC51zZXgO5abwpuzbib7v59jwoFNyCdILwU2IixH/sovGbPcYHV75656G
6D3P76afcYqHXk8T4KU5EojDmT43sEWopcFFfx4AR2Wlx3Yid/ZxazBT796lWyE8
dmbOyY1X3gK5cOR3BmdoEtX9AAZdqofK/vmp4amN/BPLKaapygZ5jC3xoncbiT5c
KKKO5zMkkbap/J1wNqGjro1yfK0UYEv9+VGiSyIb+b0nfdu6zJA+jdph342Gh4aG
gcAQdyr5OfMtufC2L5Hz4E1faQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:09 2026 by rpki-client