
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft
File: 8aRhKgbhDvW9ljFz7CZTi31ANzY.mft (raw, json)
Hash identifier: rkA6nsHtNaFdwWMJqH9Otj416DcctljTTGpNFOaXVEM=
Subject key identifier: C2:44:8D:7E:D7:B7:CA:50:6D:98:F5:40:77:15:93:3E:6A:B4:94:B7
Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36
Certificate issuer: /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft
Manifest number: 0F
Signing time: Sat 13 Jun 2026 09:10:57 +0000
Manifest this update: Sat 13 Jun 2026 09:10:56 +0000
Manifest next update: Sat 20 Jun 2026 09:10:56 +0000
Files and hashes: 1: 8aRhKgbhDvW9ljFz7CZTi31ANzY.crl (hash: 8BRigbev+G6uDNiMz3frchy8hpef30MS962lEW3YQMw=)
2: 243C67FE55CD11F19CECB2B5A8833773.roa (hash: Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl
rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736
Validity
Not Before: Jun 13 09:10:56 2026 GMT
Not After : Jun 20 09:10:56 2026 GMT
Subject: CN=6a2d1ea1-db54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:b3:26:90:60:4f:7a:c6:1a:78:b3:1d:18:
8a:63:c6:48:94:10:8a:ef:a6:ee:76:22:a1:b2:eb:
e9:43:bf:27:93:c4:af:43:35:1a:de:f3:8f:df:9a:
4b:8b:13:f4:a8:5f:f1:7b:28:4f:09:1a:c2:2b:a8:
5d:01:01:36:8a:81:8e:0c:e6:21:03:81:43:76:cb:
a2:4e:32:aa:d4:04:80:9b:e4:59:7c:96:6b:36:3a:
bc:88:8b:7c:a7:9f:28:dd:4f:23:7e:54:a2:ef:c4:
9c:ff:ae:53:a6:67:aa:ca:c6:55:18:9f:c5:69:e9:
10:38:a7:4a:8b:e3:f1:00:b3:0e:57:0d:46:fb:ea:
82:08:f9:ba:33:e8:40:d0:b9:23:be:89:c0:63:57:
13:7c:a1:1a:d0:00:dc:04:51:ca:8e:31:2a:41:40:
9e:da:c1:fa:7b:8d:9e:d4:f0:cf:fc:9d:d7:81:0a:
a2:84:7b:3b:7c:6f:35:6a:44:b0:8d:70:1a:58:31:
39:3c:48:1e:6d:dc:fa:3b:05:49:6c:a6:54:d6:ea:
bb:17:c4:4a:38:12:3a:cb:08:8a:ef:33:fc:60:e4:
94:0c:eb:0c:11:b8:68:c1:3b:0f:55:f6:51:b2:85:
64:09:ff:bc:f0:ab:64:f2:e9:10:5e:28:47:a6:6b:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:8D:7E:D7:B7:CA:50:6D:98:F5:40:77:15:93:3E:6A:B4:94:B7
X509v3 Authority Key Identifier:
keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:43:e6:16:15:e3:cd:7e:48:29:0d:a0:7f:9b:ec:b3:b6:
56:61:11:cd:1a:39:95:13:49:a4:0a:74:db:36:41:98:4d:cc:
d2:89:d8:ec:d2:27:c7:30:f2:9e:08:b0:0f:b3:de:50:b1:fa:
b9:33:74:28:df:d3:ae:29:70:37:9b:6b:b3:fd:58:79:90:8f:
9f:5a:d0:2b:ae:35:d3:28:f0:33:fa:fb:fe:f7:e7:67:8f:9b:
d2:73:5a:68:fd:c2:aa:c5:71:89:5c:6f:3c:5b:29:07:b1:42:
0c:c8:e5:03:39:27:8c:42:37:72:84:bd:d1:c9:d9:c0:8d:6b:
5d:2b:83:29:e9:57:e7:75:9c:96:d3:89:a1:7d:c6:c4:30:f4:
84:ec:8a:68:8b:e7:99:a6:8b:ba:b6:a8:7e:34:74:8b:02:7f:
ac:13:db:1b:bf:4d:c1:22:f7:6a:db:02:e7:57:52:ac:54:64:
8c:d0:85:c2:ed:aa:6e:aa:f3:47:34:46:05:4f:0b:37:38:17:
4e:a4:6f:3c:a1:93:26:c4:fe:f7:37:7a:e1:35:40:42:e9:65:
59:ff:e2:86:38:ce:31:75:c4:be:56:ce:e6:51:54:57:57:5f:
92:79:22:a9:b4:24:75:c3:8b:0a:35:ee:d9:91:38:12:20:19:
e8:f2:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:08 2026 by rpki-client