
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier: Wf6ANmG4NMxlzHP4ag/WzVapN4KfTSxNrqy3H7qi2eA=
Subject key identifier: FA:DA:E1:AD:9A:F2:DF:21:64:83:28:4A:A3:E6:F6:80:5E:B8:43:11
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number: 01B2
Signing time: Sat 13 Jun 2026 04:01:05 +0000
Manifest this update: Sat 13 Jun 2026 04:01:05 +0000
Manifest next update: Sat 20 Jun 2026 04:01:05 +0000
Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: Pbm2cQV2PW2J9FIQgthMIdLreIO2f97ATmBVxccwLQg=)
2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: /7z7IB560Zyid1gAT+cg8GKzeif1WiKdRUALH0UbtFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Validity
Not Before: Jun 13 04:01:05 2026 GMT
Not After : Jun 20 04:01:05 2026 GMT
Subject: CN=6a2cd601-0222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:d0:be:e3:8b:8a:31:3c:3f:e3:7e:60:42:
ae:90:68:97:48:5c:57:12:9d:cf:a0:17:a5:40:fa:
e8:99:7d:e5:da:a4:1f:4e:29:4d:ad:18:82:76:18:
a9:0a:98:0e:f5:5f:91:20:17:c1:63:28:e1:d7:ef:
eb:01:c7:29:71:dc:fc:37:d2:5d:38:61:87:09:f3:
88:e2:a0:84:d6:e0:f9:fc:14:69:2b:e4:71:73:da:
7c:b6:7a:7a:bb:dc:48:9c:26:c8:94:dd:1c:a7:b5:
9f:c9:89:fa:df:e8:dc:96:98:42:6b:d0:9b:00:14:
ad:a5:47:5c:ae:37:99:4d:b2:e2:db:e6:69:4c:6c:
3f:3b:6e:f5:5f:65:00:0f:9c:fd:bc:2b:3f:93:49:
f0:75:1f:14:e6:d4:17:d8:d5:35:40:6b:4b:6d:d3:
f7:05:50:d5:02:8d:a3:6b:9a:ef:03:c8:41:f0:55:
17:f1:76:cd:7a:4f:85:ed:86:a3:5a:93:9d:16:76:
44:43:a9:6d:ee:93:ac:9f:55:d6:d7:43:a3:bc:da:
ea:b8:cf:97:71:12:aa:ac:37:1a:60:63:68:dc:e2:
fb:c0:99:49:8b:ed:e1:9d:ee:bf:14:7d:76:6c:be:
99:d8:75:3a:00:65:97:f1:3e:16:c7:76:60:60:34:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:E1:AD:9A:F2:DF:21:64:83:28:4A:A3:E6:F6:80:5E:B8:43:11
X509v3 Authority Key Identifier:
keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:57:3c:dc:26:72:c9:b7:a7:8e:7b:bc:1f:bb:da:98:36:c4:
d8:f4:34:db:96:d3:fd:5b:5d:c6:0f:7f:f8:31:20:94:b3:76:
52:48:de:db:1d:d6:49:b1:53:6b:c1:9f:6d:dc:1d:6b:12:bb:
94:ce:2b:73:ab:93:62:5b:6c:a4:cc:08:98:40:34:9e:14:04:
11:20:0d:e6:9e:28:5a:07:5c:89:cd:fd:02:1d:93:35:09:a2:
b1:b1:3e:53:fb:ac:56:f8:12:81:4d:2e:4d:c6:ea:52:81:e6:
93:b5:da:cf:48:ce:97:de:c0:5c:37:6b:2f:a9:f1:93:c3:d7:
6a:91:46:50:b7:3d:01:28:f1:0a:4b:a9:1f:79:d5:07:9f:d6:
d4:a8:2a:d6:37:7c:3a:f2:cd:58:fe:57:98:95:c0:24:ae:2b:
3a:4b:69:be:5b:55:83:fa:ce:f8:a7:f7:1f:f7:e9:50:9c:59:
92:ea:9a:c6:84:00:5c:41:a1:8c:9d:25:4f:41:ac:83:af:af:
66:66:0f:17:6a:71:b4:b2:08:d8:13:a4:92:db:95:83:9b:98:
00:29:74:19:13:ab:fb:22:74:1b:14:b5:5b:d1:da:e0:8b:b5:
2f:a1:58:ef:bd:9c:9f:78:58:9a:2a:c1:d8:27:90:02:58:30:
74:74:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:29 2026 by rpki-client