
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json)
Hash identifier: ZmQrRd1eH6y2oa5I7LJ7UnXW3VUjdjgpnxzeL4opS04=
Subject key identifier: BC:E0:D3:90:1C:0E:FD:D8:C6:65:10:9F:97:32:77:61:9A:C3:5B:85
Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Certificate serial: 0686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
Manifest number: 0680
Signing time: Thu 16 Apr 2026 22:24:29 +0000
Manifest this update: Thu 16 Apr 2026 22:24:28 +0000
Manifest next update: Thu 23 Apr 2026 22:24:28 +0000
Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: 3jaxJUzAkBGN9AA20t4XqnLVzjl1wfOrch4bwJMxt8g=)
2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: AhupnDtMSD4TtHr+//XndsYvjztQztws6hAAHBlZ7Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Validity
Not Before: Apr 16 22:24:28 2026 GMT
Not After : Apr 23 22:24:28 2026 GMT
Subject: CN=69e1619d-845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:e9:67:ff:86:0e:2b:8f:91:e4:dd:9e:c6:
01:f0:93:bf:58:ba:a4:ee:3d:ff:50:aa:9f:71:7a:
27:db:71:40:f7:f9:5c:85:23:9e:8c:23:77:8c:66:
04:a6:0b:a8:c3:12:cf:6d:cf:6e:40:f1:df:a2:2a:
a5:f6:f6:52:41:c7:a3:8f:73:2d:1d:1a:70:3d:b7:
1b:98:a9:5a:9e:3f:c7:fe:c3:43:a4:ce:91:91:50:
3c:7b:ae:84:11:66:b0:b1:90:f2:2b:ce:34:e1:6a:
ab:b8:9b:16:bc:a3:c2:62:c1:67:0c:45:7f:89:0d:
af:c0:e7:b0:3a:fe:fb:f2:ea:cb:07:3a:08:8a:33:
39:e2:68:1b:73:e9:97:f2:ec:73:39:07:43:49:aa:
9c:ce:06:e9:84:1b:30:86:38:3c:c6:5c:27:43:f6:
89:a4:cd:86:7c:04:de:25:36:4c:b0:1e:44:4a:42:
e0:0d:73:f7:5d:d0:18:0a:9f:81:95:0f:cb:ea:9e:
b3:2a:55:76:df:a5:7d:4c:95:b8:73:33:c1:9a:58:
26:3c:48:43:c1:8c:a8:73:f1:59:6a:39:2e:53:e7:
1d:e4:47:c6:aa:a0:c8:12:95:71:a1:89:d5:3e:bb:
c7:63:a1:75:07:ca:0e:54:8e:ee:14:af:fd:fd:db:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:D3:90:1C:0E:FD:D8:C6:65:10:9F:97:32:77:61:9A:C3:5B:85
X509v3 Authority Key Identifier:
keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:a8:ca:e6:20:fb:9b:a3:7f:22:c5:5b:9f:fb:db:d4:76:2e:
73:65:2d:fe:58:82:73:a1:b4:95:d1:8e:22:59:82:04:41:3e:
e4:1a:85:b2:79:0c:11:fd:26:1a:3f:74:0d:61:8b:d3:04:53:
1f:f9:73:54:ff:e7:72:35:dc:78:8a:9c:d6:28:8a:f8:db:be:
50:e0:bd:79:f0:4c:f0:ff:88:52:ef:cb:86:24:27:84:ec:d7:
d5:58:af:79:a8:16:01:bc:84:11:3e:a1:fb:8e:76:b6:11:78:
8d:2b:8a:83:3b:dd:e1:5c:8d:ed:70:8e:44:cf:cc:cc:44:39:
1b:70:2c:b9:47:90:0c:6d:44:8d:f8:b5:1c:1c:27:d6:ad:d4:
2d:85:54:88:13:f8:b6:9c:7a:e1:ee:0e:04:34:e2:bd:af:dd:
9d:24:5b:f0:48:a1:0a:e9:6b:7c:10:5a:b6:b2:3c:79:9e:62:
42:19:bb:c8:5a:20:89:1b:6d:4a:7b:30:43:39:6a:09:76:9a:
1b:b0:7e:ba:e3:05:f6:6b:c9:b7:cc:16:65:8b:f2:4b:e4:85:
69:00:86:6e:1a:bb:d9:f6:85:5f:69:bf:b7:d7:25:e0:e0:29:
89:88:18:a5:a3:a2:1f:08:ef:dd:e0:d8:6f:d7:ae:5c:06:de:
59:59:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:06:41 2026 by rpki-client