
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json)
Hash identifier: jpBMV61ZFG6CxZdBskDeOfbRm8blkY0kpKFEM8YF5g4=
Subject key identifier: 1D:56:D9:76:2B:62:0B:BD:70:D4:C0:33:81:FD:7C:D1:7C:4C:94:11
Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Certificate serial: 0955
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
Manifest number: 0941
Signing time: Thu 16 Apr 2026 20:04:58 +0000
Manifest this update: Thu 16 Apr 2026 20:04:57 +0000
Manifest next update: Thu 23 Apr 2026 20:04:57 +0000
Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: Eq8krDXXR5a9ebWsiEbvZvgeHoHfJK2IxbkOhgYBcX8=)
2: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=)
3: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389 (0x955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Validity
Not Before: Apr 16 20:04:57 2026 GMT
Not After : Apr 23 20:04:57 2026 GMT
Subject: CN=69e140ea-47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:29:71:e7:c9:65:8e:3d:28:18:4a:f3:ed:
69:58:d9:c0:de:be:80:87:f9:f0:e3:b0:38:57:dd:
62:05:15:88:72:67:45:49:41:2d:1e:0b:68:8d:8a:
d6:27:84:cb:c7:37:e7:ae:bc:4e:10:ef:e0:be:fe:
c1:2d:a5:ac:ce:74:ca:de:6d:e4:3d:d6:83:9a:6c:
fb:d1:be:46:81:ce:90:3d:15:39:6f:d4:43:38:f1:
59:6a:9c:41:d9:07:92:30:4a:06:7c:6c:5c:63:6c:
e2:ca:49:16:15:18:dc:07:8b:84:fc:86:da:05:84:
0d:f5:19:85:2b:35:36:7f:8e:bd:13:c0:10:36:6e:
d1:28:eb:da:cf:3b:97:c7:d6:35:59:7e:2d:9b:c1:
61:c1:52:21:79:d0:87:e7:86:49:e7:95:68:d0:e5:
5f:02:97:a5:36:4d:03:74:70:61:03:f4:d6:50:7b:
e9:f2:68:67:43:0d:77:5a:83:1d:c8:e8:84:af:25:
26:b7:28:ff:44:06:06:19:e8:a2:dc:cc:eb:de:d8:
bd:be:3e:77:3c:85:04:56:e6:6e:dc:1a:e5:d6:50:
02:98:b0:5a:9f:6e:b6:93:ff:de:dd:b6:6a:72:d8:
00:e0:66:98:76:bc:ba:83:c2:bc:77:c1:76:1a:f5:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:D9:76:2B:62:0B:BD:70:D4:C0:33:81:FD:7C:D1:7C:4C:94:11
X509v3 Authority Key Identifier:
keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:cb:27:99:98:58:63:6c:5d:76:db:e7:72:ae:1a:51:e5:8f:
d4:54:e6:6e:56:b4:ec:dd:79:49:f2:51:b0:00:37:e6:1f:f4:
14:16:4a:60:55:a1:68:d8:f2:71:99:60:88:89:69:fa:a3:a6:
8c:b8:c7:8c:c2:8b:78:f5:ed:77:45:35:15:d6:bc:ff:13:20:
af:06:d9:75:61:c0:b8:09:f9:92:0b:a8:a6:f9:ad:55:18:42:
ae:47:20:d0:5f:c6:0a:74:c7:1f:2e:49:76:73:33:b6:58:3a:
07:1a:fa:19:c9:3f:ae:22:37:bd:cc:bd:95:0d:01:58:c6:34:
5f:e9:ea:b7:de:64:fd:b4:7f:62:1e:83:dc:57:55:0b:78:14:
c3:a2:14:39:19:58:99:76:f5:7f:ce:48:dc:ff:56:94:de:17:
75:09:3f:be:4c:24:c3:3c:a0:3f:ec:09:be:2d:7b:10:36:ef:
e1:f9:f7:77:19:ec:8d:72:12:8c:08:ce:a8:27:56:55:b3:18:
fb:3b:b2:25:b5:1f:47:21:52:73:4c:40:f5:aa:e7:3a:cc:5c:
3f:4d:d6:de:2a:e4:f9:c0:0a:e5:4c:8a:2f:73:09:78:03:29:
d7:e5:63:94:1e:69:e2:0e:9e:3f:b3:16:0c:ae:8c:50:9e:b5:
40:49:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:08 2026 by rpki-client