
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier: QO4BwqrD+YlkalHcFE4Z1ORaqP5/Xx83lfpAENS+btM=
Subject key identifier: 5F:46:C3:BB:B4:0C:01:D1:EC:85:81:EC:BD:2C:99:2B:0A:7E:94:2E
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number: 02EA
Signing time: Fri 17 Apr 2026 01:14:33 +0000
Manifest this update: Fri 17 Apr 2026 01:14:33 +0000
Manifest next update: Fri 24 Apr 2026 01:14:33 +0000
Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: +KqrdTTwk8/bdhJGPa+oIn6W7KelEiHek17sL7EZoxQ=)
2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=)
3: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=)
4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=)
5: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=)
6: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=)
7: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: OvljHmGaqlHVvH/NKwVEhE+BSY1Ndq3kJG4YsbW7t7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Apr 17 01:14:33 2026 GMT
Not After : Apr 24 01:14:33 2026 GMT
Subject: CN=69e18979-c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:85:2a:18:b1:ac:9c:2e:e6:cc:cb:49:a3:
f9:07:92:48:0a:72:10:b0:ea:86:77:7e:a9:1b:26:
46:78:b6:c8:b6:ec:80:02:05:8b:1c:1e:7c:65:9e:
a8:35:f0:02:48:68:e6:ac:12:72:26:82:43:58:48:
e4:57:72:cf:46:a1:09:b5:92:ca:17:a7:9a:a9:6e:
6a:89:93:df:f9:8b:a1:18:fc:ce:2c:ac:aa:5e:9c:
2b:32:9e:e7:5d:bc:dc:9f:75:c2:49:cb:fb:78:0b:
07:4a:7e:4c:cc:d7:64:cd:15:20:81:4e:04:4d:ff:
b1:c3:83:b6:9b:76:2c:a4:00:fe:15:b3:cd:75:fd:
62:1f:ba:7a:a4:7d:dd:ba:73:a3:3b:4d:da:49:66:
d9:d8:5e:c2:fd:0a:4e:f3:bf:86:a6:d6:19:e5:27:
e7:54:95:7b:db:c0:63:f5:57:27:94:ee:0d:a5:bb:
29:11:eb:14:ae:d3:44:87:e7:4d:f9:7b:22:73:8c:
ea:a0:af:e9:d6:74:8f:b3:f7:6d:c8:30:18:25:20:
0b:5d:0c:68:63:d9:16:7a:ce:85:b1:f8:01:7f:d1:
e8:b4:4b:63:d8:e8:3a:27:f5:dd:77:10:5c:38:17:
c4:e6:11:36:20:25:3a:8c:94:a8:2b:0b:64:69:4f:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:46:C3:BB:B4:0C:01:D1:EC:85:81:EC:BD:2C:99:2B:0A:7E:94:2E
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:7e:ac:cb:72:ad:40:56:f5:70:1f:73:b9:8b:24:6d:15:e5:
a3:74:4a:6e:34:32:c1:62:40:ed:b3:e2:1a:ca:e5:87:9e:69:
c1:0c:10:72:cb:8d:a8:ee:5f:11:c6:7c:cf:35:04:0b:ec:5b:
e4:63:dc:9a:e9:da:9e:ad:4c:40:ec:d9:0d:51:20:2d:f5:d9:
7e:43:9b:80:3f:a3:27:b7:86:b7:50:2b:f3:0a:bb:a1:fa:69:
dd:c1:0e:4e:b5:45:3e:5e:b0:32:6e:d5:72:1d:6c:84:8e:78:
5e:a7:af:1a:17:cf:6d:dc:25:d6:34:25:bf:a0:a6:8f:ce:eb:
b5:59:58:93:c9:d2:46:96:ab:b7:e1:43:e8:28:a8:a0:26:c5:
31:21:ea:6e:a3:29:a0:9e:d4:e0:59:b2:c2:d2:93:ed:86:49:
ba:fe:8c:9c:9b:ca:c3:a4:7a:d4:a4:65:3d:95:47:7d:a5:96:
57:cd:6e:45:00:88:3a:3f:a2:8a:7a:f9:99:e7:ff:25:5e:8a:
3b:b4:3f:1a:d7:48:02:b7:2e:6b:15:00:b0:20:f9:45:37:79:
50:3b:bb:fa:3e:1b:b9:9b:21:f0:a9:9f:e8:63:47:bb:1f:3d:
a9:f7:c9:c5:17:d7:31:f7:db:a4:ed:96:af:70:c5:87:47:13:
46:94:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:05 2026 by rpki-client