
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json)
Hash identifier: mmWjHKR/V2E6UPONHADGlt5BHRofnyq7OIYEYQYIHYo=
Subject key identifier: 0C:ED:69:91:AB:46:47:54:85:DB:05:2E:18:71:42:BB:4D:21:3D:3E
Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Certificate serial: 0A03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
Manifest number: 09E1
Signing time: Thu 16 Apr 2026 19:49:09 +0000
Manifest this update: Thu 16 Apr 2026 19:49:09 +0000
Manifest next update: Thu 23 Apr 2026 19:49:09 +0000
Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: lv2j33K1UiYoo96Z8duOpeWd27zWewQDFrLHR03v/eA=)
2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: 0FWKl6V2UsAeRLSYgRMr9fF+nuXljQkdSIOnzl7uC2U=)
3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: jPruOReU41tiy9WKYUDnZKPfOqm/FjV3E9pMcApFq0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Validity
Not Before: Apr 16 19:49:09 2026 GMT
Not After : Apr 23 19:49:09 2026 GMT
Subject: CN=69e13d35-ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:a9:ef:e0:e7:f5:77:f2:bf:ae:99:c1:39:
e6:3e:1a:b9:9f:46:7d:94:6d:aa:7f:65:b7:d1:24:
7a:7d:1e:ab:05:c1:5e:ec:cf:af:e5:b2:30:6e:3d:
52:69:8c:2e:2e:9f:a8:84:34:cb:47:15:83:5d:9a:
89:99:a4:64:60:b5:42:f5:12:ab:58:b9:21:38:11:
4a:0c:cc:d2:d8:a0:3b:b6:d5:53:50:b3:c3:b9:37:
ff:eb:5a:07:da:fb:de:3d:a5:a3:d6:ca:dd:4c:64:
f3:81:20:63:8f:b9:c2:66:cf:ed:e2:b0:81:ab:ec:
2a:98:7a:b2:84:6e:9c:db:4a:81:3a:d6:7c:57:62:
25:b7:06:42:d3:7b:e8:91:77:07:af:21:43:f0:34:
b6:08:4b:d7:41:15:36:5e:8c:9d:b9:94:51:a9:60:
9b:4c:80:79:b3:f3:d9:65:c4:40:d0:4e:36:de:7b:
a7:b2:0f:d9:7b:65:9b:bb:9f:2a:13:bd:95:ea:ce:
7c:8f:03:e0:5c:ae:ed:37:e7:7f:28:da:bf:36:33:
99:30:27:79:33:c1:97:b5:5f:26:8c:de:26:dc:fc:
1d:35:80:cd:85:10:79:4e:a9:c1:00:1d:8e:88:6a:
3e:e9:71:f5:69:52:dd:ab:12:ca:5b:f7:de:d7:89:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:69:91:AB:46:47:54:85:DB:05:2E:18:71:42:BB:4D:21:3D:3E
X509v3 Authority Key Identifier:
keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:61:4d:5b:cd:07:3e:78:58:74:58:66:3b:11:8b:ed:2b:
92:f2:28:15:c0:57:eb:05:cd:ee:18:8d:7b:a5:7d:e7:ff:4b:
d8:dc:73:f6:ac:f4:66:2d:83:0d:aa:42:9a:d4:82:8a:ba:f0:
34:0e:fe:4c:76:88:ff:8c:27:6b:60:85:e8:26:83:dd:a6:36:
5d:92:18:52:7c:f9:9a:54:e6:e8:6a:a7:83:cd:e1:a3:96:45:
47:c9:9c:fc:f6:9b:7d:c1:8a:c4:4e:d6:81:e2:22:d0:21:24:
02:e1:cc:64:fc:00:41:35:37:13:4c:9d:48:ed:97:61:8e:2f:
9b:54:83:11:02:1c:87:43:c1:cd:01:a3:28:7f:1f:f7:77:0c:
86:57:4a:be:6b:35:05:c3:c8:68:6d:eb:fd:31:0a:82:69:82:
da:e1:09:69:cc:91:8a:03:ee:f5:42:a8:a1:c6:4f:53:0a:e5:
76:44:5a:2b:17:71:ff:94:58:eb:4a:c0:fc:71:0c:d6:ea:eb:
38:f8:56:d3:1b:a6:dd:c3:8d:93:e7:b8:a6:93:69:8c:e0:1e:
1b:20:99:42:c4:a9:bd:fe:02:a2:2f:bf:b3:a6:a6:9a:12:6c:
fb:9a:1a:93:d0:78:85:a3:cf:ac:e9:00:fe:bc:40:d3:18:ef:
81:0d:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:45:59 2026 by rpki-client