
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: LBMsRTZ+KkCHFLJgG4IYv09cUW+HDFHWKrCSPuemCGc=
Subject key identifier: 8F:99:7D:52:23:E7:E2:C5:04:52:BB:17:8E:EA:55:60:BC:E5:18:17
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 03CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 03C9
Signing time: Sun 01 Mar 2026 01:26:38 +0000
Manifest this update: Sun 01 Mar 2026 01:26:38 +0000
Manifest next update: Sun 08 Mar 2026 01:26:38 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: qtyZL7VloaujW9nLvI9+6g0iMlbfhigixBmPgkmYLgs=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: S7JF/bNkGQBKzWyyMCIfasqHndqaViHJP5nFlj8AfpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 974 (0x3ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Mar 1 01:26:38 2026 GMT
Not After : Mar 8 01:26:38 2026 GMT
Subject: CN=69a395ce-4463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:e9:6d:c6:8d:0d:a3:c5:dd:06:de:df:df:
fc:92:17:3c:a8:e0:ce:64:b8:49:dd:84:23:7a:1a:
e1:cb:a5:b5:91:e3:6f:24:1f:f7:c7:92:c7:9d:56:
3e:b7:1c:db:49:3e:02:d8:f2:41:70:43:54:e8:a8:
ae:60:73:79:17:00:f6:1e:d6:00:82:ca:6a:2d:c6:
26:5a:dd:01:7b:61:14:a8:68:be:44:fa:a9:b2:4d:
56:25:57:10:8d:a0:72:be:3e:20:ef:85:fe:cc:05:
13:25:ac:ff:7c:67:11:58:cd:29:c2:3f:50:a5:51:
5e:d2:6c:54:4c:28:56:0e:ee:a7:7b:23:d8:2b:79:
d4:7d:90:10:65:86:73:77:b2:30:94:27:2d:04:27:
e6:42:ed:6d:ca:17:75:01:80:dd:94:6d:0c:52:d8:
92:e3:d6:00:ed:76:1c:90:ce:1a:1e:a1:dd:28:59:
35:ed:a2:1d:1f:6b:5b:98:d2:3b:e7:5f:c2:bb:ed:
3c:a2:86:ac:25:58:c7:0c:8d:b5:6a:ef:3f:b5:7e:
19:f3:da:4e:96:d0:2e:db:2b:ed:6d:4e:d3:2c:66:
fa:25:f8:c9:38:c2:3f:7b:5c:4a:20:17:2d:47:98:
80:7c:b4:40:e3:f3:5d:4f:6a:e8:6b:4e:79:ce:9f:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:7D:52:23:E7:E2:C5:04:52:BB:17:8E:EA:55:60:BC:E5:18:17
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:22:e4:06:ec:73:f1:1b:cb:dd:63:d4:1e:77:e9:7c:b4:cd:
95:ba:f5:68:60:ed:a4:7f:e5:b0:86:c1:26:25:27:cc:99:d6:
92:71:57:b2:3b:64:1c:df:5f:78:22:48:6a:52:88:39:d9:1e:
85:a5:8b:18:df:83:c8:bb:4d:cb:2f:f4:09:56:3b:3f:04:81:
d0:2b:d7:21:83:1b:77:2f:6d:23:3a:26:e5:70:d9:0c:1b:c5:
08:9b:42:21:19:ed:63:e4:75:0d:d1:f6:f5:66:8f:11:16:55:
3f:49:8e:d5:ed:84:bf:53:1a:6f:32:6d:d9:61:c3:a8:90:80:
b1:21:1c:48:67:ac:d4:a0:06:a7:8c:06:71:fd:de:7c:09:14:
8e:20:f3:87:b0:60:75:34:ea:eb:0b:d9:be:63:0b:92:f1:9d:
fd:73:62:27:f6:09:e2:cd:38:ac:5a:fe:bf:01:f1:9b:23:97:
f7:f9:9a:3d:44:c5:65:ff:03:9e:e7:c1:93:47:3b:f8:2c:d3:
7c:46:ac:50:70:92:b3:bc:de:d7:4d:9d:0f:45:4e:d1:77:47:
f0:5e:6d:bd:5f:b7:95:dd:20:a9:5e:f7:14:5d:8a:4e:15:14:
83:c0:2b:66:ae:6a:c9:c7:6d:be:a3:34:43:d5:a8:2c:ed:21:
3c:70:a4:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB
MkYxRTlBOTkwHhcNMjYwMzAxMDEyNjM4WhcNMjYwMzA4MDEyNjM4WjAYMRYwFAYD
VQQDDA02OWEzOTVjZS00NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0aTpbcaNDaPF3Qbe39/8khc8qODOZLhJ3YQjehrhy6W1keNvJB/3x5LHnVY+
txzbST4C2PJBcENU6KiuYHN5FwD2HtYAgspqLcYmWt0Be2EUqGi+RPqpsk1WJVcQ
jaByvj4g74X+zAUTJaz/fGcRWM0pwj9QpVFe0mxUTChWDu6neyPYK3nUfZAQZYZz
d7IwlCctBCfmQu1tyhd1AYDdlG0MUtiS49YA7XYckM4aHqHdKFk17aIdH2tbmNI7
51/Cu+08ooasJVjHDI21au8/tX4Z89pOltAu2yvtbU7TLGb6JfjJOMI/e1xKIBct
R5iAfLRA4/NdT2roa055zp+kmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+ZfVIj
5+LFBFK7F47qVWC85RgXMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw
OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003
SmhFYlNpaDBMM3VpOGVtcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjyLkBuxz8RvL3WPUHnfpfLTNlbr1aGDtpH/lsIbBJiUnzJnWknFXsjtkHN9f
eCJIalKIOdkehaWLGN+DyLtNyy/0CVY7PwSB0CvXIYMbdy9tIzom5XDZDBvFCJtC
IRntY+R1DdH29WaPERZVP0mO1e2Ev1MabzJt2WHDqJCAsSEcSGes1KAGp4wGcf3e
fAkUjiDzh7BgdTTq6wvZvmMLkvGd/XNiJ/YJ4s04rFr+vwHxmyOX9/maPUTFZf8D
nufBk0c7+CzTfEasUHCSs7ze102dD0VO0XdH8F5tvV+3ld0gqV73FF2KThUUg8Ar
Zq5qycdtvqM0Q9WoLO0hPHCkmw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:50 2026 by rpki-client