
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier: v0bkvzx+IHm72O8Y+fbAPFny8dzfQOLV7RPdib/JiYU=
Subject key identifier: 62:1B:FF:DD:72:14:80:E3:4B:98:70:9D:6A:6C:0A:F0:9D:F8:41:1D
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 0337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number: 030E
Signing time: Sat 13 Jun 2026 01:15:50 +0000
Manifest this update: Sat 13 Jun 2026 01:15:49 +0000
Manifest next update: Sat 20 Jun 2026 01:15:49 +0000
Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: AAwjtwZEz8IhlRNTd+CQpHXPe7CZC92nCztORR2zEjg=)
2: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=)
3: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=)
4: C18149885E2611F1A1DDF13A3B7AAC22.roa (hash: xmI2UUP5i6tfROcqiQ2bcD37TknmyJnWrsAGSocm6p0=)
5: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=)
6: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=)
7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Jun 13 01:15:49 2026 GMT
Not After : Jun 20 01:15:49 2026 GMT
Subject: CN=6a2caf46-6c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:60:3a:e3:bb:e3:3d:a5:86:d2:75:7e:2f:
e5:56:2d:ba:e8:d9:a9:98:b0:17:23:72:8a:82:fe:
e2:0f:f3:c4:19:7c:0a:1c:d9:7f:b3:7f:de:55:bb:
3c:02:dd:fb:ea:3d:51:4e:29:86:be:74:95:b9:65:
de:49:12:7a:d8:09:df:0d:54:20:bc:48:b6:0b:a5:
51:e0:64:99:c3:a6:cd:c1:a5:59:d4:6a:43:72:39:
9f:cb:0e:eb:f4:a9:8e:c7:9a:f9:03:88:aa:4f:40:
71:3c:da:0e:41:79:47:e9:cb:c2:7d:96:8e:97:68:
75:d7:95:6b:8a:cb:57:e7:53:ca:d4:52:e0:27:7a:
db:d1:18:94:d3:69:93:e7:60:3e:0b:11:39:1f:5d:
db:3b:e7:ef:2d:9e:8e:a2:17:2a:e8:ff:e1:6a:4f:
ec:bf:e7:41:13:80:89:00:b1:09:b7:1f:ad:4e:a9:
1f:2a:93:57:63:9b:2d:6e:f8:7b:21:44:71:2e:b0:
ba:5b:d3:c4:19:96:d0:84:a8:c6:fa:b4:39:fb:f2:
2a:f1:3c:d2:e6:d4:af:b5:39:7b:4e:87:e6:c1:be:
87:40:8a:64:82:cd:12:40:86:2e:04:72:ec:45:f9:
a8:a2:39:66:34:03:c2:28:a3:72:00:19:de:41:1b:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1B:FF:DD:72:14:80:E3:4B:98:70:9D:6A:6C:0A:F0:9D:F8:41:1D
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:c9:db:0d:7d:f0:4f:bb:9d:9f:73:7f:91:94:d2:89:02:3f:
09:89:b2:14:90:c8:ef:b8:80:57:f6:a6:ec:13:b9:32:ff:6d:
9c:4f:24:f8:44:d0:eb:7d:78:91:3e:96:e7:17:6a:bf:82:91:
76:d4:f5:f0:a7:bc:05:ef:6b:12:fe:0a:94:3a:81:53:cd:08:
a1:15:14:78:0e:ce:15:87:80:b1:ab:62:1d:4d:1e:aa:d1:25:
61:c8:d9:a9:a7:76:97:2d:e7:b1:67:14:b2:1b:fc:b3:0d:ca:
03:1e:72:dc:6e:f9:c5:1e:cc:bc:f5:d6:44:69:f9:28:b7:74:
0f:76:2a:16:44:9e:c8:aa:a5:33:e1:a6:29:00:a9:a4:cd:8b:
a2:6a:a2:bd:fe:d3:d7:ee:61:fb:b4:f5:90:0f:8b:56:47:35:
58:b8:31:96:eb:77:00:d6:c9:87:52:1c:52:36:bb:41:3d:a3:
be:b6:65:f0:9d:7c:76:47:dc:33:0c:71:fa:88:d5:62:90:40:
1e:2f:37:0b:fe:53:26:fc:6c:bd:8f:1a:c6:93:84:87:7d:24:
b3:24:44:34:4b:b4:0f:23:37:a7:58:c6:01:6a:54:17:45:03:
df:4c:33:80:75:48:7e:0d:ee:d5:61:77:9b:15:00:d5:f0:01:
d7:62:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:58:30 2026 by rpki-client