
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: S8crO+yXIQ7m+ZkRGxDRKSvVTG3aulhHgFuHdzO2DIA=
Subject key identifier: 7B:52:96:94:EC:BF:59:59:ED:E6:93:C5:95:FD:12:83:19:DD:95:84
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 03E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 03E3
Signing time: Fri 17 Apr 2026 00:25:53 +0000
Manifest this update: Fri 17 Apr 2026 00:25:52 +0000
Manifest next update: Fri 24 Apr 2026 00:25:52 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: TAg832uJzx/Uyyn0XsB1tZN27dS+VApkKbJRjKYT8PU=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: v0A241ZziUX3uaVSLzG3z9mBGcQeWrJ5+pSpRLlwUy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Apr 17 00:25:52 2026 GMT
Not After : Apr 24 00:25:52 2026 GMT
Subject: CN=69e17e10-1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:ef:61:26:82:6f:34:09:2d:32:c9:62:86:
18:03:5c:71:42:4b:59:71:d7:7c:68:65:b2:28:ed:
bc:79:38:dc:c5:a7:d5:b2:f8:14:e9:e0:7b:13:3c:
42:89:3f:e3:6b:9a:67:b4:28:98:e6:e3:8e:fe:37:
15:4a:fd:8c:55:b7:59:98:10:c0:89:08:05:80:8f:
89:8c:92:3b:1d:6d:14:14:92:84:2c:24:d8:f1:4a:
28:5c:4a:28:75:54:27:07:69:2c:92:5f:c6:85:e6:
43:1e:52:d3:4b:1a:3c:8b:54:b4:98:3d:00:ba:9d:
b4:24:dc:51:85:f7:72:a4:55:61:5b:92:97:75:4c:
59:c1:5b:c4:34:95:a2:79:88:39:98:9a:76:8a:13:
aa:b2:65:e1:61:63:a7:51:92:a5:0f:e0:4a:a3:59:
24:39:2f:99:28:33:9d:5b:26:39:fb:fe:f3:9b:dc:
bb:8c:04:08:c0:ad:e6:56:2c:ff:e2:85:53:8f:e6:
ee:e7:52:65:49:e0:7e:c1:24:05:02:c7:42:8f:6a:
2b:4d:d3:9d:ec:1e:24:18:39:38:21:b5:c6:b2:c8:
c5:0c:5d:cf:c9:c1:7e:cc:42:de:58:51:6c:9f:7e:
4b:8d:db:9e:e7:fc:91:9c:f4:5f:c8:04:67:4b:80:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:96:94:EC:BF:59:59:ED:E6:93:C5:95:FD:12:83:19:DD:95:84
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:87:be:dc:90:06:02:2e:38:96:9a:58:f7:0e:a3:38:94:
cc:e1:09:82:dc:88:bc:b1:cb:b5:c4:76:03:db:3d:8a:bd:00:
52:6b:3d:c6:37:ee:54:60:e2:9e:04:ba:83:d0:43:dd:e7:0e:
b4:2b:5f:52:a9:a1:46:00:65:f0:cc:c9:68:1c:a0:11:bb:ef:
9d:46:12:b3:1c:38:7a:14:8a:69:fb:d1:f6:66:4c:a4:38:1c:
77:99:83:23:bf:c9:cc:99:4f:0c:a1:fc:02:ef:3d:ca:49:40:
b9:64:34:9d:a0:79:c1:f8:fc:8c:65:51:23:bf:80:00:6e:83:
0d:57:6d:83:70:a8:8b:f9:bf:15:14:a4:56:17:ec:f7:5e:fb:
2e:c1:58:13:48:f8:ce:6a:e9:07:ae:29:ea:a5:c2:7d:bc:7f:
2b:15:12:5d:34:18:b8:fe:4b:cd:36:91:ea:13:d0:99:59:38:
d8:87:f6:1d:ec:57:46:11:6d:0c:d7:ee:11:9b:f3:bd:56:af:
a6:62:ba:f9:cf:d3:60:52:8d:84:0b:2a:62:e8:2f:85:3b:2a:
06:90:30:f5:f7:36:ac:24:aa:b9:a7:9a:12:ac:cf:65:95:d2:
03:5e:34:42:5e:f3:2b:43:40:7c:72:f6:ea:b3:b5:f9:69:d5:
f3:51:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:38 2026 by rpki-client