
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier: kUzr5BZ6vH7nO/r6OayE9ZzNTbonDW6Ucj2GO4I5hJI=
Subject key identifier: 44:17:0E:F7:D6:6D:BB:EC:04:1D:15:EA:03:C6:6F:90:28:89:95:4C
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial: 04EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number: 0793
Signing time: Sat 18 Apr 2026 23:42:09 +0000
Manifest this update: Sat 18 Apr 2026 23:42:09 +0000
Manifest next update: Sat 25 Apr 2026 23:42:09 +0000
Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: azURX9eyVjgoACNw/dRB5KqTY1WqG+VlnrXcI276w/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1258 (0x4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Validity
Not Before: Apr 18 23:42:09 2026 GMT
Not After : Apr 25 23:42:09 2026 GMT
Subject: CN=69e416d1-0754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:33:20:01:eb:79:36:30:5a:9e:f8:7c:87:
ef:c9:03:56:60:83:73:fa:7f:cb:3e:c3:ba:88:a6:
4e:51:f2:46:2e:53:4f:b4:8a:8c:18:7b:a0:86:0f:
35:b1:90:aa:56:4f:0b:bb:ee:c4:dc:ae:0d:3f:8c:
f0:0a:63:98:f0:bd:d7:74:7b:3c:ff:5a:51:56:81:
39:a4:81:c4:d6:84:6a:72:ef:49:2f:48:cd:2f:98:
5c:a6:fe:a9:d2:d6:39:f5:05:eb:56:a0:bf:a6:63:
30:f5:e9:03:8a:ce:43:a8:ae:3c:30:3a:af:55:95:
68:71:be:68:0e:ce:ae:76:29:82:93:9e:96:e7:44:
17:6b:41:04:6f:26:79:c9:b8:3f:d4:54:a6:ae:3d:
5f:99:93:a1:b6:a1:94:04:34:13:c1:66:2b:6a:3b:
5f:b2:f5:10:7e:37:76:2d:5c:a4:d0:cc:ca:85:69:
26:47:3a:1d:d9:18:7b:6e:ab:47:cd:e3:22:32:cb:
c1:91:87:ac:57:44:f3:f6:5e:cc:c5:c5:33:15:48:
d8:9f:73:67:8a:3c:41:0b:7a:6e:77:52:56:20:66:
d0:c2:46:f8:4d:4a:9e:92:8d:bc:b7:a1:bc:08:5f:
d5:82:f8:e6:79:8a:55:1d:3d:45:fb:16:9e:28:ae:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:17:0E:F7:D6:6D:BB:EC:04:1D:15:EA:03:C6:6F:90:28:89:95:4C
X509v3 Authority Key Identifier:
keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:33:2e:7d:13:f0:cb:38:d6:37:09:b0:67:63:73:02:d4:81:
2e:45:94:93:fb:6d:2f:de:b8:30:66:49:dc:f8:31:aa:38:40:
0d:86:3e:09:61:52:7b:4d:5b:7d:fc:ec:2d:a9:0f:6c:bb:93:
cf:cb:48:1f:10:2e:ba:81:15:d9:74:15:cf:cf:a0:e7:8d:11:
0d:d8:6b:9c:24:cf:09:10:a1:90:d5:71:d3:ff:64:02:3b:94:
dc:48:02:85:35:ec:45:26:8d:2a:df:09:26:1a:9f:9a:93:d1:
d1:7a:51:c2:86:81:12:f2:47:51:aa:e9:48:ef:2a:17:be:a8:
01:cd:65:19:a6:5d:ee:51:f8:89:e7:8c:67:7d:7b:a0:be:6e:
55:fc:a8:79:92:fd:18:ee:10:17:77:93:37:66:60:95:35:9a:
96:6d:6c:39:f0:70:95:a8:f4:06:b3:eb:c4:18:91:bf:ec:ab:
12:02:db:c5:6e:c5:73:1d:06:c4:22:21:b8:b8:6c:51:fa:5e:
d9:62:5f:80:be:a4:5e:49:62:2a:8e:95:63:ed:ae:34:98:1d:
72:9b:62:5e:0b:7b:e3:68:7c:2b:d5:70:10:46:31:6a:6a:e0:
c6:d9:29:ba:cb:62:25:7e:04:69:c0:4c:f2:9a:c3:70:7b:5f:
e1:ba:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:15 2026 by rpki-client