
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: ajVBFK1V2+ckn6dug7xPh0Vg373h+gSgM/XvV2TQMxs=
Subject key identifier: B9:CF:E6:02:70:C5:2C:58:67:0B:B4:DB:69:F8:B5:43:BF:F8:5B:9A
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 01C8
Signing time: Sun 01 Mar 2026 04:29:41 +0000
Manifest this update: Sun 01 Mar 2026 04:29:41 +0000
Manifest next update: Sun 08 Mar 2026 04:29:41 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: wAz5KI7MmMFFHtHHxQUk7MR80h3hHIGcGyumW9ifydk=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: rJhU0HNeCO7s+q3+M9x1ayjXSA/Nsx02UCSMMgX+AUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Mar 1 04:29:41 2026 GMT
Not After : Mar 8 04:29:41 2026 GMT
Subject: CN=69a3c0b5-79fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:d7:14:13:0a:ac:7f:c1:a8:5f:90:09:35:
61:69:fd:0b:1a:aa:fc:18:46:e9:13:b3:ca:c3:15:
4a:05:7b:6e:0b:c7:0b:ba:33:e0:63:d9:fc:ef:a9:
76:52:7f:e2:e0:e8:20:83:bf:09:5f:9e:88:b3:3e:
c8:88:2a:77:2b:76:12:96:e9:01:cd:0c:ec:37:8e:
ee:4b:79:ab:55:c1:23:e8:42:e6:8b:12:29:ff:f2:
db:29:03:c6:4a:03:87:13:25:76:e3:db:cf:83:00:
e1:bc:4f:ac:68:6d:26:2d:df:59:28:bc:3a:4e:28:
51:e5:ec:8b:d1:83:ae:9e:16:13:01:28:44:b5:a6:
cc:02:3e:72:0a:84:52:95:0b:dc:17:76:2d:38:ce:
b1:2e:25:7e:3f:0e:4d:bd:16:c7:de:7b:46:89:db:
17:b4:8e:ba:ee:59:13:66:37:d7:c9:d8:f6:ea:b2:
41:84:89:e0:2d:9a:72:b8:18:f5:31:7d:f4:b9:52:
80:54:12:26:8a:e5:05:ef:4a:ee:8f:9b:a8:ae:84:
4a:2e:2b:0e:89:30:13:62:97:01:fe:d4:fb:51:51:
32:d3:d5:59:27:46:e5:23:95:7e:bd:35:f1:28:28:
c4:f5:49:5f:72:43:4f:4a:ac:3e:0e:c5:ee:b3:27:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:E6:02:70:C5:2C:58:67:0B:B4:DB:69:F8:B5:43:BF:F8:5B:9A
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d1:0a:99:d2:ed:83:fe:cd:7c:64:a6:bb:86:b7:27:1c:24:
c8:89:fe:3d:48:63:34:9e:1b:a6:7b:cb:39:5c:14:ee:ec:73:
01:03:e2:ef:4c:3f:5e:74:81:98:e7:1b:15:b6:cd:b1:ee:61:
18:d9:13:f9:5f:50:58:13:fe:ac:c8:8b:27:34:89:cb:f7:4c:
93:e4:d2:9d:bc:1b:b5:8b:00:bf:60:6d:93:7d:06:af:26:93:
a3:ca:de:a8:4d:b1:15:19:b9:cc:77:bf:78:69:69:d4:a8:a2:
d8:15:d6:6f:c1:22:47:c0:4d:f8:5f:71:af:cc:2a:59:db:bb:
7e:58:38:f9:9e:3e:a7:2a:7c:a4:5e:3b:ee:4c:5a:5a:34:77:
c1:e4:64:52:1f:92:89:34:f0:0e:d2:91:79:0b:18:99:78:f0:
0a:b6:c9:88:c8:c4:c0:af:db:fc:a3:22:5c:16:63:3e:6e:7e:
aa:93:28:96:ed:07:79:b0:42:f1:f5:73:96:da:67:64:b5:22:
e4:2b:15:2a:bc:2a:56:50:e3:f7:16:bd:ba:70:2f:52:7a:92:
03:2a:4e:0f:47:99:e9:58:7c:ea:c8:34:83:ed:22:9f:5b:df:
67:76:8e:72:bc:fe:2c:da:d9:7b:11:98:24:c2:ee:e3:2e:e4:
c8:06:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:48 2026 by rpki-client