
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: 7+FFA1O4FvjuJFeqejpV1McxnHuqeBNRmTHgmHXMLa0=
Subject key identifier: C4:33:88:B1:2C:2D:10:67:0F:E2:F1:D7:F1:78:0A:90:70:6E:28:DE
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 043C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 0435
Signing time: Mon 21 Sep 2026 00:03:41 +0000
Manifest this update: Mon 21 Sep 2026 00:03:41 +0000
Manifest next update: Mon 28 Sep 2026 00:03:41 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: GpxJIB331IMhl6gAY0hIJyneo9yI0dP9E/iy1Z9IyKQ=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: GmrvF9q2dTq3b8GyefG/oexNHNjvwnXO2pwjnxyLh6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Sep 21 00:03:41 2026 GMT
Not After : Sep 28 00:03:41 2026 GMT
Subject: CN=6ab0745d-a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:14:77:c7:7f:55:4c:28:9d:f3:6a:2b:ac:2f:
9d:67:25:3d:8f:53:9b:3a:75:68:15:c5:50:c7:61:
67:ef:11:bd:9f:04:9f:80:e2:e7:24:5a:e6:42:6f:
ad:ce:f4:45:26:4c:ec:fc:eb:6b:28:95:d0:0a:d1:
dd:6c:c8:9b:93:7f:fd:ca:3d:2f:5c:16:8d:85:9f:
a5:9f:f9:d8:a1:a1:87:55:f1:97:ce:3b:9b:c3:12:
18:a6:d1:f3:36:75:bf:02:13:36:3d:29:b4:7e:57:
4e:47:0a:c0:9a:c2:58:ee:f2:0f:f6:0d:37:6f:55:
63:b8:93:1a:93:dc:84:bb:aa:af:8c:de:1b:1e:1b:
04:7b:6d:24:75:3f:7b:b7:b2:ec:79:b5:4f:72:6a:
d0:45:ba:b7:1c:d2:46:37:be:71:9b:cb:2b:cf:c5:
f5:3b:fe:e7:28:32:8c:4a:47:fa:3b:df:9e:cf:a2:
42:82:8b:23:d3:8b:8d:95:4a:88:a3:45:16:05:45:
5c:4e:06:65:f5:2d:2f:06:ba:b7:a5:b6:01:d6:e1:
88:45:fe:c0:a5:6a:d0:fa:7f:6d:35:d4:32:fb:d7:
62:6c:96:51:4f:f3:2e:17:a0:7e:a3:e6:a6:c6:83:
40:1d:d4:00:04:cd:46:78:0a:dc:88:b2:d6:b7:53:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:88:B1:2C:2D:10:67:0F:E2:F1:D7:F1:78:0A:90:70:6E:28:DE
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:3d:3a:38:09:a8:f7:f6:81:3a:1f:80:fb:04:df:ae:f8:38:
0d:be:7e:1d:5e:4e:37:d6:e3:59:79:d4:b1:e2:20:83:a6:db:
d9:90:86:97:93:51:0b:2d:1a:52:13:0e:e6:3b:94:0a:35:bd:
3b:b5:94:53:5c:59:e7:51:c8:56:32:b6:8e:38:91:dc:c9:83:
b1:e3:1f:1c:91:db:3d:af:02:e0:46:b7:22:80:ca:11:5c:57:
54:83:bc:dc:98:60:12:16:9a:d4:79:98:3a:a3:f2:78:8e:55:
c9:72:48:85:bc:6b:52:ac:70:53:25:d2:4f:5c:ce:e4:df:10:
e6:e6:d4:2c:a7:33:0f:f3:f1:e6:c6:c4:0e:9b:4e:e8:9a:c3:
fd:24:47:c3:b9:4f:9f:d3:8c:f9:7c:8d:a7:28:16:24:7c:1c:
66:5f:69:49:ce:98:53:2a:b7:49:a4:51:ae:84:81:66:9c:c5:
76:33:8e:eb:21:2d:03:d3:e7:b9:65:41:0d:f5:29:1f:99:9d:
7c:9f:9b:5c:fc:69:d9:10:0e:ca:f7:70:43:e5:6a:e5:fd:8c:
8b:3f:dd:a3:e3:7d:36:e9:24:9e:f4:70:7e:4f:2d:82:1f:6a:
00:f8:d1:35:5a:43:26:ac:82:fa:a0:11:8a:cb:e7:84:d9:49:
d3:3f:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:23 2026 by rpki-client