
$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: VhOGjAmJNmNJfOjRhQfa28z3gQfcb/hrJ7gd/pKP24E=
Subject key identifier: 31:3C:20:43:21:40:BA:E1:82:4D:C4:76:23:BA:02:38:55:A7:30:E4
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 0228
Signing time: Fri 17 Apr 2026 02:27:23 +0000
Manifest this update: Fri 17 Apr 2026 02:27:22 +0000
Manifest next update: Fri 24 Apr 2026 02:27:22 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: ReZXbySrgCVwdwNazjYGdUOgqvdeGg09bi1/Xw+iR8c=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NqQKBASAXdv1LlkB9yqcFqDG6FI2OUjfgdiKy6gJA/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Apr 17 02:27:22 2026 GMT
Not After : Apr 24 02:27:22 2026 GMT
Subject: CN=69e19a8a-c44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:17:45:a9:77:d0:11:66:e2:d6:e1:64:f9:
0d:36:1d:34:d8:ef:86:a2:81:8f:3a:c8:f4:d2:dd:
bd:d5:dc:08:4e:b7:28:84:5f:9f:a9:9e:d2:dc:f4:
41:95:fd:fe:58:fd:44:29:c5:2d:4e:d6:61:45:05:
1c:79:51:62:cb:bd:03:f5:c7:23:09:c8:af:96:22:
e2:42:f9:2e:15:5e:64:ca:5f:0c:84:b4:b3:73:fc:
ae:8c:06:bc:d1:7f:9c:17:19:4f:bc:d1:d4:fe:d3:
e9:7a:a0:de:66:db:4e:0e:a8:0b:e9:ce:e4:27:3f:
52:a7:27:7b:e2:5f:19:16:a2:3c:cb:29:4b:73:5c:
b1:81:8c:69:34:88:f9:f1:0c:8d:e5:3b:be:ad:7a:
15:af:67:98:11:6c:57:6d:cb:b6:86:29:f7:a1:f4:
23:b6:8c:3d:36:19:ad:74:4a:14:97:21:9b:e4:10:
b2:15:64:51:84:56:23:81:7b:d0:ad:c5:7e:de:da:
50:ad:6f:08:61:b8:43:79:f1:94:f4:eb:64:cf:71:
66:7e:29:1f:da:b7:5b:e9:97:3f:28:7e:eb:28:ae:
b9:ee:98:7f:35:c6:58:d0:22:c8:0f:9e:26:ce:b3:
65:eb:01:91:36:35:df:57:66:7d:13:0f:a5:6d:1e:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:20:43:21:40:BA:E1:82:4D:C4:76:23:BA:02:38:55:A7:30:E4
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:ce:14:5c:5c:af:56:9c:34:31:37:d7:41:c4:af:88:c3:
7b:19:2f:89:ff:4e:4f:37:b5:7a:80:26:11:13:03:d4:a6:f5:
71:97:47:6e:8d:95:4f:ee:db:78:50:3d:ca:12:c4:3f:7f:6a:
ff:85:a7:40:b0:6a:24:84:2f:5e:98:74:50:8f:60:e4:db:0d:
aa:5e:b8:51:29:67:fb:89:76:c7:11:d6:92:ac:b5:e6:c3:4e:
43:8a:eb:ed:db:45:2f:6c:f2:27:12:af:71:74:d0:78:01:25:
14:81:1b:62:3a:c8:29:0a:20:78:9b:b6:21:39:c4:f5:03:65:
e6:d5:a5:b6:8c:0a:d2:b7:f0:d1:35:e6:17:38:63:9c:4e:c1:
0d:de:b5:c7:15:2c:9e:e8:ed:3c:c9:0e:09:d2:2c:5f:65:a7:
67:12:07:e1:73:f8:83:a9:ac:74:27:8f:e9:6e:28:2f:eb:63:
da:8f:b9:da:d8:ef:29:30:a2:b0:10:96:6d:f5:5d:55:4e:8e:
1a:35:c1:5b:45:ef:be:6b:ee:65:6d:16:6c:23:3e:58:0d:e0:
b8:d0:2f:c1:b7:18:6f:5c:0e:d5:18:69:df:17:db:57:72:dc:
f6:b1:7d:e6:02:3d:a6:bf:5d:f6:15:fe:fd:01:72:bf:b5:b7:
d7:fc:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:18 2026 by rpki-client