
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier: EqGBENbhEuiji563ojP9AOaV6EoSSf+dao46DXVidys=
Subject key identifier: 99:64:A0:0C:75:9B:0E:52:C4:9E:1E:3A:96:C4:46:DD:56:C0:21:50
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial: 084F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number: 083B
Signing time: Fri 12 Jun 2026 21:01:50 +0000
Manifest this update: Fri 12 Jun 2026 21:01:50 +0000
Manifest next update: Fri 19 Jun 2026 21:01:50 +0000
Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: RzlYKftACr8pyUI9CRWEBNXMwayrUF4u9r/2+cJDv9Y=)
2: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=)
3: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=)
4: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Validity
Not Before: Jun 12 21:01:50 2026 GMT
Not After : Jun 19 21:01:50 2026 GMT
Subject: CN=6a2c73be-0d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:f9:10:0e:19:85:ed:43:8e:44:f5:22:f7:
7d:43:13:a0:d9:bd:03:de:82:1e:cc:02:0f:9c:a4:
87:73:b0:2d:69:d8:94:b3:79:74:66:8a:11:18:58:
ba:db:70:7b:10:d0:ac:92:fe:6d:e5:06:a1:08:8e:
dc:e1:01:07:99:35:68:da:39:b8:2b:21:f2:f7:79:
e7:79:07:0e:11:a8:85:a1:90:d7:07:63:ad:bd:d4:
4e:9e:0f:3f:48:89:b0:a8:52:d0:2d:50:ea:8a:1e:
24:5d:f8:fe:ae:a9:8d:2d:ee:39:e7:27:ee:15:bd:
c5:f2:fa:67:df:f8:85:d7:b8:c6:60:87:99:82:cb:
08:eb:ca:90:cb:00:f0:53:c8:4c:83:35:f9:f4:35:
e4:36:4c:1d:f6:61:ea:b0:53:df:f1:72:a5:22:0b:
c6:43:fd:8f:29:c7:25:16:bc:b9:9e:ce:b8:d8:8c:
d7:94:8b:98:9c:d3:dc:aa:88:61:0d:ee:8f:b8:97:
f6:1a:eb:a2:db:73:c4:ea:4d:1a:03:25:10:60:12:
7f:46:ad:68:bd:61:d6:c2:c9:8b:90:77:57:ee:9f:
6d:9e:30:09:f4:00:ac:d0:19:2a:8f:36:99:bc:15:
8a:68:14:65:25:e8:36:a4:89:7b:63:7e:ac:a0:18:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:A0:0C:75:9B:0E:52:C4:9E:1E:3A:96:C4:46:DD:56:C0:21:50
X509v3 Authority Key Identifier:
keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:1c:72:62:df:f9:92:7b:43:d4:79:9e:ef:e2:d5:59:bf:
45:59:e8:02:32:83:5e:01:d5:bc:ca:e1:d1:cb:0f:f1:d3:db:
20:b5:e8:6c:a4:8a:4f:5e:74:c8:80:04:32:5f:9d:f5:60:fa:
22:e8:0e:75:3c:a2:e0:88:63:85:8f:e6:fb:3a:ed:c6:d7:f9:
33:dc:16:97:cb:b8:e0:5e:bd:2d:20:65:25:37:c7:02:c2:86:
40:1c:c7:51:ad:97:20:7d:ee:61:21:ed:ef:40:d0:4c:67:34:
62:72:a3:53:53:fa:74:a9:9c:20:6b:83:44:d8:bc:1f:1b:d5:
3c:5e:91:5d:ef:b6:1d:9a:9c:05:b4:c2:91:6d:5a:70:2a:17:
4c:87:8a:38:36:c2:c6:0c:6f:f4:8e:ab:26:27:78:22:35:aa:
36:6e:7c:22:8f:3d:18:b9:a2:27:73:d3:1a:46:b2:4f:53:7f:
93:f7:90:01:5d:5f:fe:20:d1:1e:1f:50:ae:d2:f3:ca:a6:85:
13:55:a8:03:7b:59:ff:26:54:d7:49:c5:19:31:b5:6e:d2:b4:
6b:60:d4:67:9b:90:e5:64:48:8b:50:23:be:36:3f:58:18:79:
0a:72:06:e2:58:35:53:98:45:5f:31:6e:1c:41:9e:5d:74:60:
3d:75:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:26 2026 by rpki-client