
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
File: 8bck5A2FxU9R1iHHL4lskXXJsRk.mft (raw, json)
Hash identifier: s+0foDbxSzfOUPayfA07UIlpI/l0WoHPL6MyfnPR+bo=
Subject key identifier: 5B:35:B4:E0:32:87:17:30:9B:64:CA:59:6E:44:98:80:0C:9C:AE:51
Authority key identifier: F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
Certificate issuer: /CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Certificate serial: 0AF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
Manifest number: 0ADF
Signing time: Tue 28 Jul 2026 19:42:31 +0000
Manifest this update: Tue 28 Jul 2026 19:42:30 +0000
Manifest next update: Tue 04 Aug 2026 19:42:30 +0000
Files and hashes: 1: 8bck5A2FxU9R1iHHL4lskXXJsRk.crl (hash: ZmkuHBJe4d3VV19m/eChV6yHs83csVddV8ccktuCoi8=)
2: 354725E6763311EABAE64466C4F9AE02.roa (hash: Q9E2SohQHAyGeXQSdbGe7wwkbtB6hL54JNkPQsa0EIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2805 (0xaf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F5, serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Validity
Not Before: Jul 28 19:42:30 2026 GMT
Not After : Aug 4 19:42:30 2026 GMT
Subject: CN=6a690626-c1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:dc:b8:e4:8d:9c:5b:44:c2:d1:bf:65:55:
01:6c:26:fd:7a:70:f4:ca:2f:f7:28:e4:b7:c8:1b:
cc:07:fc:22:22:e8:ac:34:57:37:80:ef:ed:db:57:
ab:c6:ea:46:d6:0d:a7:33:31:72:7f:a9:33:e0:92:
b0:9f:d7:d9:40:15:f0:60:34:f1:65:08:30:6f:e2:
d4:33:ae:de:a1:f3:da:0f:1b:36:7c:de:fb:2d:58:
42:36:6b:76:dc:bc:70:d4:1b:de:ab:e6:11:fa:b0:
e0:19:30:80:23:8f:4e:0b:72:b2:22:a1:a0:86:5a:
2b:1a:68:04:0f:19:8a:78:0a:87:46:0f:8e:8d:f8:
b9:33:d3:00:c8:84:2d:fc:9b:81:f1:29:66:70:74:
de:6c:b7:6b:bb:aa:99:87:ff:69:48:a4:8d:28:15:
fc:b2:4b:c2:b3:31:ba:9c:3c:b6:c1:1e:9c:b0:86:
c8:f3:41:af:32:20:ff:bd:67:0e:1e:be:6c:59:19:
50:a4:f7:13:0b:fa:0e:5c:e2:ae:bb:9b:93:51:c2:
99:fd:41:84:60:38:0a:cc:01:8f:13:60:c8:2e:3e:
e7:12:e5:ca:c3:38:80:8d:0d:fa:16:29:39:3c:25:
7e:4e:70:c9:e0:48:b7:8a:12:23:ba:7a:7a:e2:56:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:35:B4:E0:32:87:17:30:9B:64:CA:59:6E:44:98:80:0C:9C:AE:51
X509v3 Authority Key Identifier:
keyid:F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8c:0b:96:a9:f9:ad:9a:9e:f2:4a:86:88:49:c9:b1:1c:74:
22:0c:6d:ed:30:ac:48:a8:66:0d:f3:a9:bb:cb:f7:04:77:99:
16:ce:40:88:ec:cd:64:1c:c3:19:f1:eb:a4:31:49:04:f6:c6:
5a:12:54:5d:a3:6f:41:2d:69:6f:18:21:37:48:8f:96:77:6f:
1b:f6:55:2b:63:1e:e1:31:13:9e:23:19:fd:6f:f0:a3:8c:f9:
8d:93:35:95:19:e3:48:a2:0d:1d:0c:4c:a5:d4:72:b8:c4:3e:
06:09:96:05:03:93:f2:06:ad:0a:1c:67:0c:71:a7:6f:49:a1:
15:bc:d6:9c:8a:bf:86:e5:c1:c3:76:e7:4a:dd:9d:ac:f1:43:
b3:68:3b:1f:f2:73:99:40:c7:c4:3f:d1:14:69:9c:91:96:ae:
c6:8f:b1:17:bd:53:f1:50:57:0d:b0:9e:c5:08:4e:49:f3:60:
12:9d:07:2e:8b:ef:66:48:95:ed:25:52:26:32:9c:5c:9b:4c:
13:9e:99:39:49:93:11:18:11:e9:7b:08:65:b4:b9:5b:a7:87:
9e:95:2d:a8:6b:8b:22:a0:e7:09:12:4e:f1:17:ba:82:b0:ca:
9d:3b:87:cb:e3:bf:9d:3f:03:a5:3a:0a:cc:3e:3f:bf:09:a1:
e8:29:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:41 2026 by rpki-client