
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: D+i2rShmuw9cSR+SDZbi8DDC6TiCG326daEVgjQXP9k=
Subject key identifier: D8:3B:E3:F6:39:10:CC:BE:DE:92:1D:50:C1:1B:DE:57:A3:AF:DE:29
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 01E3
Signing time: Sun 19 Apr 2026 03:09:52 +0000
Manifest this update: Sun 19 Apr 2026 03:09:51 +0000
Manifest next update: Sun 26 Apr 2026 03:09:51 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: DGkK/4XqT2IsZ5QYjzk6nhWFElIfsaXAYOjXznP3hlY=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: GuG6Y8Eu3CcfCqJ6rXqMTfXfwCt0ckJ+Jr8hqV3ee88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Apr 19 03:09:51 2026 GMT
Not After : Apr 26 03:09:51 2026 GMT
Subject: CN=69e4477f-fa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:b6:0d:20:00:13:f6:6a:b6:8b:6a:72:08:
96:0c:47:3c:b4:d0:f5:c1:4c:4e:13:7c:86:bf:38:
17:2c:0e:18:c7:f8:c9:65:67:ea:73:8e:e9:5f:d9:
f0:2b:63:f2:73:f0:6c:b2:25:b5:f8:6a:ef:91:2c:
e6:98:fc:fb:29:4c:92:67:d7:63:01:ea:cb:44:33:
e9:1d:5d:96:1d:37:39:06:fc:0a:af:a1:cb:cf:b5:
60:16:22:2d:10:d9:d0:19:fb:7d:22:09:09:44:ee:
7a:6c:ce:2a:c3:3a:52:9a:12:fe:0d:d1:a1:d6:80:
a2:c3:1e:da:a4:aa:85:3e:72:2e:1e:94:0b:9b:59:
7b:d7:2c:e6:d3:34:85:fc:38:9b:08:c9:a5:ce:f2:
1c:6e:f6:00:0e:27:99:80:cf:f2:17:48:e1:7a:d6:
f9:15:48:93:98:b0:e2:42:f8:99:89:eb:91:d2:bd:
13:b0:56:7f:40:40:03:db:2c:52:9a:61:79:ef:88:
f0:ca:9a:a6:55:c1:f1:a8:58:4b:b3:c3:4a:ab:f8:
ad:ae:71:4a:58:79:f5:3a:03:e0:09:8d:02:56:ca:
0e:4d:d3:c9:5c:36:73:73:21:00:37:f1:05:86:2d:
1b:f2:2e:17:23:14:52:67:ce:5d:11:d3:a2:25:3d:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:E3:F6:39:10:CC:BE:DE:92:1D:50:C1:1B:DE:57:A3:AF:DE:29
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:8f:a4:08:d0:56:41:97:9e:4a:b0:a6:53:af:2b:5a:e8:dc:
e0:6a:28:5c:37:2e:71:be:21:b0:73:e4:d7:10:58:51:77:c5:
69:da:20:ce:a1:ea:d8:06:e9:51:f6:5d:1d:a2:d0:8c:e9:b0:
d3:61:eb:24:51:d6:f3:c3:97:e4:81:9e:3c:c4:49:88:b0:4e:
27:d2:6e:a4:fd:91:ed:81:68:34:ea:07:24:6a:85:2b:13:38:
22:f2:7b:3a:0b:2e:0e:cb:19:4d:49:cc:22:09:36:d0:02:41:
e6:93:c6:96:07:d5:54:75:d4:0b:b4:aa:37:36:98:7e:15:e4:
57:53:19:dc:1a:ec:93:42:32:9a:3d:37:9f:88:62:d4:82:97:
09:ce:8e:c8:a1:f8:11:6c:ce:60:13:69:d7:c9:7e:8a:8a:1d:
5d:54:00:b1:1f:62:18:8e:c8:fb:6e:b9:bd:9f:16:56:96:fb:
60:b1:09:54:c0:c4:b6:e2:51:30:51:b3:76:c5:8d:60:45:8c:
e3:0e:3c:85:8b:4c:46:da:02:11:14:be:dd:d0:e1:1c:0e:54:
8b:8c:04:eb:39:3e:88:9f:dd:49:41:22:88:fb:5f:85:9e:35:
d4:0a:c0:97:82:0b:6a:92:8c:96:b8:c4:59:9a:30:35:c0:0c:
af:2f:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:53 2026 by rpki-client