
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: pJXRcDJnv9PF47St8tQeHEjAg5+5tKnYVSerxH3qqsk=
Subject key identifier: F5:3A:B6:D9:23:F3:BE:AE:42:6F:D7:15:C1:8E:18:C3:65:FA:F1:D5
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 0214
Signing time: Mon 27 Jul 2026 04:30:16 +0000
Manifest this update: Mon 27 Jul 2026 04:30:16 +0000
Manifest next update: Mon 03 Aug 2026 04:30:16 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: 98TOR4oOI4oSB62E/lREuEJNZ6LAYqMtU2QJqM2XLcg=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: GuG6Y8Eu3CcfCqJ6rXqMTfXfwCt0ckJ+Jr8hqV3ee88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Jul 27 04:30:16 2026 GMT
Not After : Aug 3 04:30:16 2026 GMT
Subject: CN=6a66ded8-6f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:51:7d:1b:3e:6c:94:d7:05:e6:79:cb:a4:
48:7c:32:80:14:d6:93:86:4d:e3:84:88:0a:2a:34:
aa:46:50:c4:dd:ad:ae:d6:b5:54:08:34:8f:69:d2:
68:0a:14:da:bf:d8:b6:c0:d9:10:83:25:db:e4:c8:
d5:dc:6e:f2:66:44:77:bf:a5:50:8b:d7:c7:d2:28:
bc:f8:19:b1:44:ac:16:40:24:75:51:3a:dd:0d:4a:
a5:09:a0:57:de:94:3a:0f:21:80:70:be:cd:3a:e3:
43:4f:a6:07:d9:8e:a7:d1:a5:ff:46:23:1f:01:59:
b4:ca:22:0b:7e:a9:5c:6c:a5:60:d0:a2:bc:61:61:
bf:c1:a9:b5:20:f3:2d:c2:05:c1:36:b1:f3:7a:90:
1e:f3:7a:d4:6e:79:39:72:bc:18:4a:65:fc:82:57:
75:43:a6:0f:52:12:85:7e:d2:d5:e3:3f:5c:8b:f3:
87:17:2a:ec:28:bf:6d:d3:55:d5:d2:ea:38:d6:a7:
26:33:42:c6:e3:0b:a2:5c:04:5f:7e:f8:93:00:ba:
c1:8f:94:b8:e4:05:aa:eb:9c:6c:e4:c5:c7:ca:23:
95:41:42:50:23:60:9b:41:00:3a:d1:fa:80:e7:fc:
3e:f6:94:03:7e:7c:a7:f7:36:3e:25:d8:40:73:0b:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:B6:D9:23:F3:BE:AE:42:6F:D7:15:C1:8E:18:C3:65:FA:F1:D5
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:73:c4:d7:11:a8:09:f1:63:5c:b2:91:67:1c:db:e5:e5:bb:
75:6f:cb:22:08:59:98:91:15:ba:df:02:77:82:05:ca:91:93:
ac:31:7e:ca:2b:85:eb:c7:40:2e:32:38:b9:6e:77:34:7c:14:
6a:22:cb:46:ae:50:d0:a7:e8:ec:61:1d:fc:f9:8d:ba:d9:63:
e0:7d:a3:e7:d8:57:d3:8a:17:2a:8d:d8:d0:3f:bb:0f:59:5f:
40:06:41:f4:30:c1:c7:f1:7f:37:91:db:df:68:a4:42:5a:ca:
b8:22:83:33:89:77:13:c0:f1:ba:8c:79:8b:5b:cf:cf:6d:dc:
06:1f:e2:c9:71:3c:1a:57:50:a8:4e:3f:f1:86:dc:cc:ac:db:
3a:c3:da:cb:d5:80:0c:32:dd:ae:2d:46:57:db:d2:b6:a4:7a:
5b:19:37:49:6b:f8:56:01:a8:9a:84:ef:40:ca:bf:cd:cd:b0:
7c:a5:ff:b7:d9:a3:df:bc:a0:14:52:3c:61:ba:99:5b:0e:31:
ea:0f:a2:cb:f6:78:c8:67:db:97:4a:b1:7f:7e:66:5b:73:02:
66:e4:a9:c3:33:78:64:37:45:55:16:6e:6d:b2:ef:bb:96:95:
c4:02:6e:52:ae:0f:fd:c8:e6:ed:31:3c:75:5c:74:82:a9:78:
61:40:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:49 2026 by rpki-client