
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json)
Hash identifier: YJ8Ad2T1FgPXG6pV35zldPEr35dDs/FS5rIsjVT71Ro=
Subject key identifier: 52:4B:09:D5:47:A4:0C:6E:18:81:72:22:4A:60:62:46:F9:BF:DB:C5
Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Certificate serial: 0972
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
Manifest number: 095E
Signing time: Fri 12 Jun 2026 20:08:26 +0000
Manifest this update: Fri 12 Jun 2026 20:08:26 +0000
Manifest next update: Fri 19 Jun 2026 20:08:26 +0000
Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: Snyqdfh8m1goqiP+8xcjczT06hhwvH4v9xYBjCP+pQ0=)
2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=)
3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2418 (0x972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Validity
Not Before: Jun 12 20:08:26 2026 GMT
Not After : Jun 19 20:08:26 2026 GMT
Subject: CN=6a2c673a-3eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:c5:10:11:80:49:a1:6c:f8:da:ad:ca:bb:
59:88:46:ff:09:fb:04:35:01:ef:03:d6:6e:10:f8:
06:8b:99:21:d4:7d:ac:04:3b:d2:bc:c5:a7:a2:d0:
08:2f:ec:72:39:c6:6a:ff:d2:fd:e6:ac:07:53:e7:
72:6f:94:8d:43:90:a0:77:50:46:6b:77:a8:54:6c:
a8:7d:0b:e2:0c:58:9c:15:19:94:b3:3d:fa:9d:7b:
b2:9d:b0:4a:84:a3:f8:4a:f2:d6:a8:ba:99:9b:9b:
f4:40:87:0c:bd:68:3e:b1:8e:17:7d:55:29:78:f0:
0c:9b:2b:bb:54:59:76:ca:d4:7e:7c:34:72:cf:14:
6e:d8:72:65:a4:37:50:e1:b8:8c:39:96:5b:42:17:
6a:ad:60:e1:6f:fa:99:2c:15:39:73:17:f7:f1:b8:
7a:d9:b0:8d:9a:59:7b:5a:f3:19:88:e3:e6:e1:8f:
24:95:65:0d:fc:be:68:3e:87:b5:2f:88:4f:b0:0e:
01:1f:1d:6e:65:96:15:9a:3b:60:bb:ab:30:ec:bf:
1d:a6:be:9d:cf:54:a3:86:ac:4f:69:7f:8f:a7:65:
61:5d:5c:77:4b:ce:59:59:43:ad:1e:2e:a6:b3:17:
06:b2:35:e6:42:71:6a:3d:bd:db:36:cb:74:7e:61:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:09:D5:47:A4:0C:6E:18:81:72:22:4A:60:62:46:F9:BF:DB:C5
X509v3 Authority Key Identifier:
keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:fe:3e:23:99:fa:ea:44:01:f1:ee:4f:f3:4e:83:8a:09:3f:
7f:77:55:c6:98:5b:e2:1a:16:45:11:16:09:85:b0:7e:c0:0f:
79:33:34:a1:7f:0f:64:78:a8:c6:77:c0:0d:78:83:3e:be:9d:
87:02:f4:eb:40:9e:d4:1c:17:e0:1c:3d:82:c7:36:76:b0:ec:
14:bd:e2:5c:1b:00:7c:2a:77:b3:27:18:53:c2:28:6c:bd:8f:
5e:2d:e5:92:d1:9a:f5:58:46:fc:ef:2a:e2:98:53:29:30:ac:
9f:20:9c:2f:76:d2:6f:38:ed:aa:05:69:7a:37:9a:bc:79:ac:
51:cd:9f:ad:25:f1:f8:2b:e8:c5:cd:82:fb:01:51:2e:1c:ed:
f3:70:63:9c:70:3c:95:54:8b:7c:46:2c:1d:a3:66:33:dc:61:
a7:80:f2:96:df:e9:b9:30:01:b5:e4:06:85:76:c5:5c:d5:99:
f0:11:02:63:17:42:c8:a9:b0:1b:f8:41:30:52:8f:28:cb:e1:
57:b7:7a:8e:c8:cd:b5:90:0b:1f:ad:ad:e1:15:23:42:75:18:
3d:65:0c:68:67:61:c3:75:ba:3d:4c:9e:18:1c:ce:99:31:89:
d5:9a:74:42:56:cd:91:22:a1:23:61:c4:eb:4b:6f:02:b1:86:
58:50:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:53:49 2026 by rpki-client