
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier: gVTdMJq9mh0AMb9uAU8hHVVotnTNK7Wwtun1x1n0Fw4=
Subject key identifier: 56:33:39:D3:E6:2A:B7:03:C2:82:4D:87:53:0D:B8:14:76:FB:D7:D6
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial: 053C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number: 083C
Signing time: Thu 24 Sep 2026 23:23:19 +0000
Manifest this update: Thu 24 Sep 2026 23:23:18 +0000
Manifest next update: Thu 01 Oct 2026 23:23:18 +0000
Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: neQyINUnnxRmTTk1jX4r2BR73TtyNI6RCoW2mOdMqds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Validity
Not Before: Sep 24 23:23:18 2026 GMT
Not After : Oct 1 23:23:18 2026 GMT
Subject: CN=6ab5b0e7-80ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:de:67:ca:f0:ac:0a:4c:36:46:b7:90:d5:
91:7a:fe:b1:7e:80:f1:16:66:82:5a:77:4c:81:46:
08:d3:76:1d:07:73:2b:72:78:bd:6b:0a:be:aa:ed:
b4:e3:21:f7:8b:c6:6d:1f:e5:88:d5:4f:53:6b:4e:
41:4b:4a:e6:3a:42:58:94:95:b1:00:13:a0:ef:05:
78:f2:e6:ea:48:f3:6f:3e:b5:07:9c:05:bf:7b:b4:
cb:da:77:2c:eb:00:e3:9f:e0:04:13:bc:c4:02:2b:
07:6c:69:33:d4:60:c8:6f:9f:34:59:38:82:f1:d6:
be:53:6b:6d:11:10:ce:51:c4:56:7e:ef:c8:df:d7:
2d:20:e7:f2:ac:50:86:b1:73:a3:b7:b1:ae:7b:97:
d3:78:e9:d6:b5:a3:bb:81:7c:d5:b8:ea:53:94:d1:
e5:9c:b1:a7:52:ce:11:69:5d:a1:b9:48:62:df:76:
3b:5b:3d:81:e2:4f:f6:89:e4:03:ff:5b:1b:8c:83:
4f:4e:bb:37:66:49:c1:79:9f:3e:c0:a6:3f:aa:da:
de:e8:60:61:e4:e2:c8:1e:9d:53:7a:eb:99:22:dc:
d5:7f:49:c8:03:43:d6:96:6b:fe:a4:68:0a:ee:8b:
32:7c:34:73:f7:f1:ea:0f:49:7f:80:26:fa:5f:c0:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:39:D3:E6:2A:B7:03:C2:82:4D:87:53:0D:B8:14:76:FB:D7:D6
X509v3 Authority Key Identifier:
keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d0:8c:cb:46:ba:6b:01:1f:5e:11:8c:c5:78:3f:46:13:75:
fd:dc:e6:49:f7:7c:df:bc:40:12:a9:f9:07:e0:63:10:f8:6a:
fb:62:16:b2:2e:86:a1:32:42:59:d2:bf:69:a2:46:f2:e8:57:
ed:79:6c:09:ca:54:36:1a:5e:64:fb:a1:f0:2e:0c:ad:84:a0:
c0:86:ad:e2:11:a4:d6:25:03:db:57:b7:70:c8:31:aa:d8:1a:
ac:d7:6b:e6:4f:e8:c8:45:39:5c:df:ee:26:56:d4:95:fc:1d:
9f:c8:88:25:f9:d4:fa:c6:59:3c:1a:be:fb:f5:7e:f6:86:66:
47:db:85:4e:4f:f0:d7:6d:87:55:06:16:29:24:92:24:e5:2c:
12:3d:2f:41:46:56:45:ea:16:6e:db:9a:6d:47:bb:03:ce:26:
25:ef:c6:12:63:4d:f2:42:21:3b:b5:7c:5f:cc:ef:db:e0:08:
72:02:92:12:1c:26:63:5d:8a:b1:10:cf:ee:2a:ac:4e:cd:51:
74:1b:cb:49:e9:4f:60:1f:be:08:4a:1a:3d:cb:f3:e2:09:66:
44:f8:a8:a3:c4:40:38:b6:a6:ea:a6:9e:08:ca:2c:45:32:fa:
c8:02:51:75:71:20:24:0e:7d:04:c1:be:f9:15:cf:7c:51:8c:
52:f8:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:28:18 2026 by rpki-client