
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json)
Hash identifier: 7xISlW/1ZGKJ9V+pI0sDLVwuzT7zacPyq2Mpa1RkyIY=
Subject key identifier: E7:C1:70:43:F0:7A:06:78:B4:01:31:2F:F7:DE:4F:5B:7E:F7:80:24
Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11
Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
Manifest number: F4
Signing time: Fri 17 Apr 2026 06:01:06 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Fri 24 Apr 2026 06:01:05 +0000
Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: 0n/jcHJfGVCEICZn2WTGFmVifia/hPOV2UJ+b9+muNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl
rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 24 06:01:05 2026 GMT
Subject: CN=69e1cca2-680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:2c:3f:8a:f4:10:b5:7a:41:4d:e2:0e:f1:
b2:f2:2d:a0:10:39:c9:11:cd:cc:e2:23:38:44:66:
5b:a8:5f:a2:2e:f9:3c:85:3a:98:aa:78:a5:d6:fd:
d1:54:a7:ea:a2:b6:12:35:55:6b:04:47:0c:c9:b5:
a2:84:52:45:ef:34:63:77:99:47:b9:b6:e8:d8:51:
20:09:86:bd:02:f4:ec:5c:e9:74:e8:45:06:bd:db:
eb:4a:2c:6a:45:3b:2c:11:bf:66:1c:6d:de:df:4b:
38:53:18:70:fe:77:64:cb:e3:4f:ef:87:d6:cb:41:
14:26:93:e8:68:74:51:52:b4:a1:c2:ae:e6:17:c0:
a7:c0:af:ad:3e:0f:e5:42:3c:c8:ac:69:e9:ec:4a:
41:6f:40:c5:f5:0e:d1:92:91:78:ca:cb:b7:50:b5:
e0:f0:fa:8a:cf:2f:7b:3e:d9:b1:31:47:b0:31:8c:
31:40:85:a2:8a:c7:d2:94:4f:18:e2:60:b8:e9:b4:
d1:75:c4:c2:6c:50:f6:08:4b:52:25:26:73:75:54:
3e:a1:f5:51:ca:56:50:d7:df:cb:85:75:37:bd:f6:
d7:79:3a:9b:9b:9b:ef:15:48:af:cb:bc:aa:db:8b:
f1:d5:b4:c8:97:9b:11:81:4e:18:cb:cb:c9:db:f9:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C1:70:43:F0:7A:06:78:B4:01:31:2F:F7:DE:4F:5B:7E:F7:80:24
X509v3 Authority Key Identifier:
keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:dd:7c:84:c1:79:06:fa:2d:b5:5f:61:40:33:68:36:fb:
03:19:8f:a5:18:6b:46:f0:a4:98:60:bd:aa:80:a7:3e:11:6a:
b0:38:a5:b0:29:0f:6b:b5:c7:b6:29:28:66:6e:55:20:0d:56:
0b:36:2b:b9:35:61:b9:22:c9:63:be:4e:a0:5c:29:38:8d:6c:
87:c6:b7:08:7e:c4:da:59:47:1f:57:25:c6:0f:39:9e:ca:dd:
80:b5:33:f0:76:e0:b7:aa:e7:68:ee:13:6e:72:62:d9:82:7f:
65:ba:0d:6d:24:b6:2e:1c:01:10:26:46:4b:58:d3:2f:40:5b:
1c:07:1d:bb:4d:40:83:57:5b:e1:1b:20:5f:d2:02:15:8a:16:
ae:43:b1:d4:ed:aa:46:24:5a:d9:26:47:dd:28:3d:78:0e:62:
29:0e:ef:6e:e5:17:ae:fb:fa:91:dd:69:af:eb:2a:9f:57:74:
4b:1d:c5:cb:e9:25:fb:9d:d0:be:70:29:ca:35:1c:1b:68:85:
19:7e:72:82:fc:ed:c2:cf:7c:07:1e:25:21:6a:47:86:eb:6d:
f3:c6:c8:2e:c1:21:ba:50:68:ee:9c:16:0f:61:c5:02:4d:c9:
b5:0f:65:ab:32:86:e4:c5:38:49:97:56:f0:c4:35:13:b6:1b:
50:f1:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:40 2026 by rpki-client