
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json)
Hash identifier: RZlJsU2CLexbY40L0c3pF14+hBOwhh05uLoa29x7Q6w=
Subject key identifier: 75:89:74:A7:86:C7:D0:48:9D:54:74:8A:02:F0:2B:AF:86:94:17:C3
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial: 04F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
Manifest number: 04D9
Signing time: Thu 16 Apr 2026 23:44:19 +0000
Manifest this update: Thu 16 Apr 2026 23:44:19 +0000
Manifest next update: Thu 23 Apr 2026 23:44:19 +0000
Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: YGmi4+CoE5NkeKr+TFd+izRe3AmoB+QweSF1YOGP49U=)
2: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: opYG/THp6f3xNs9Il1aHZ0xQHhnpdVv74lxCqnBEIkw=)
3: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: 7M/BKi2irGP7xUYkb1R2uXaPgUqFTRpAka0mw8Km5ZI=)
4: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: sj+k2CBEk9o8Kiy3NDbS/AgiJ7I778UPHLaqip2rU0g=)
5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: JiYJBdKkc4+24n7PEkPckVDCC3V1amNAGcKt36T/kNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Validity
Not Before: Apr 16 23:44:19 2026 GMT
Not After : Apr 23 23:44:19 2026 GMT
Subject: CN=69e17453-f132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:fa:b9:17:34:6e:49:b9:73:04:78:cd:19:
ad:54:7c:75:7e:24:fe:2f:fd:90:2e:3f:1d:86:cd:
c6:bd:d6:6a:da:50:55:62:bc:bb:e7:40:bb:99:ea:
f4:d7:1f:da:f2:5b:0f:30:86:bf:82:3f:21:a2:a4:
ee:6e:05:b2:a5:ac:19:ef:7e:74:b9:c8:f9:e7:3d:
22:32:49:80:c1:a9:f2:49:08:00:0e:03:0d:54:ae:
01:be:21:c8:fc:8a:54:81:4e:21:36:4b:0e:a7:a6:
0c:3f:ae:2e:4c:e1:f1:5b:76:04:0c:aa:80:e3:a7:
0c:dd:49:16:d3:f3:ce:5f:21:27:6e:7a:e6:6d:4d:
ea:2a:8a:2f:c3:ff:b1:85:08:67:d3:9f:bb:4e:62:
98:3b:99:5d:e8:20:c9:4f:86:02:d1:c4:ea:c8:2f:
8b:82:1e:2d:69:ec:10:fe:a8:1c:c0:63:85:ca:bc:
1d:65:7f:dc:cb:c7:97:18:80:a8:f1:7f:39:2d:55:
02:f5:08:e9:c8:a0:78:43:19:5c:f4:a7:e8:c9:61:
bc:29:2b:12:c8:7c:ec:81:a9:d0:f8:21:9e:14:f0:
cc:53:8c:b6:46:32:fc:48:f4:36:6c:9e:4a:9c:4f:
f2:44:7b:2f:a0:22:63:3c:b1:d6:c1:09:5e:ca:df:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:74:A7:86:C7:D0:48:9D:54:74:8A:02:F0:2B:AF:86:94:17:C3
X509v3 Authority Key Identifier:
keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b9:7c:55:b8:a6:83:2c:6f:b1:9e:09:3e:65:c2:70:82:ed:
a9:16:89:f5:d6:e4:64:9e:a3:1b:68:d6:a1:8a:7e:cd:12:ee:
ef:33:16:e4:dc:44:d1:16:5f:03:68:d4:af:5d:6b:a9:9e:17:
16:c1:3b:58:96:e4:fd:cf:e0:8d:50:01:0f:c9:20:46:ec:f9:
1c:c4:b1:2a:e0:bd:2f:1f:5a:c2:0d:1b:54:35:d3:b9:a6:4b:
ce:8c:24:07:71:cc:de:66:5c:ab:a1:dd:fd:f2:a8:69:44:25:
bf:9a:38:84:2c:68:07:92:57:b0:49:cd:10:f9:7d:ac:e0:40:
03:88:d1:db:ba:50:86:1c:44:93:ab:b0:97:e0:15:ce:f2:c9:
20:df:17:84:fd:59:d3:5c:14:1e:12:16:9d:70:c2:56:43:9f:
35:56:ee:f1:5e:a5:92:75:04:05:66:6f:31:d3:c1:9d:8a:bb:
a1:ad:ce:58:36:0b:19:27:15:cb:6d:8e:33:46:b4:e3:5f:b9:
e5:43:be:27:12:83:67:ff:ac:14:fc:64:39:18:54:41:bc:25:
a6:7f:95:a3:e9:9d:6d:5d:39:31:c5:e7:10:ce:03:53:6a:b3:
16:fc:d6:0e:55:71:89:e2:0d:b8:1c:b6:c8:51:37:12:38:03:
24:67:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:38 2026 by rpki-client