
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier: rFWEZrRLQTJ9JQ+tynxNiWnXRcL2i4t9K1Hxc7Rw8Ms=
Subject key identifier: D4:15:13:21:25:42:AF:6D:F8:82:AF:89:B9:99:F2:5D:8A:11:86:EE
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number: AA
Signing time: Wed 15 Apr 2026 06:52:47 +0000
Manifest this update: Wed 15 Apr 2026 06:52:47 +0000
Manifest next update: Wed 22 Apr 2026 06:52:47 +0000
Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: unLUycuio9Lf1Yzt/d7GSGJ/ljfJd/Qj0j5HNhbd0Nw=)
2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Validity
Not Before: Apr 15 06:52:47 2026 GMT
Not After : Apr 22 06:52:47 2026 GMT
Subject: CN=69df35bf-5b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:2a:30:57:52:7c:3d:84:0e:de:b3:ad:70:
6d:c8:d6:fa:e3:7d:43:6b:e3:67:96:dd:13:d8:a9:
1f:47:8a:fd:c8:8b:ab:17:6c:97:d6:50:c9:af:fd:
e8:2c:2b:34:f1:84:f7:7f:33:a5:76:c7:ff:cf:c0:
bd:90:5c:aa:d6:6c:59:af:83:2d:d4:10:a0:9e:e7:
ce:46:46:43:35:a9:44:a1:83:1f:98:1e:07:9e:fc:
7a:cb:14:d8:cb:94:1f:5e:93:01:0d:c4:9f:d5:9f:
dc:02:52:3e:ff:19:5f:3b:b2:9d:a8:81:15:d8:b3:
fe:35:24:2f:54:69:80:b2:fb:5d:75:03:3a:9a:1f:
f0:67:6c:8b:ff:ac:3c:70:db:25:13:b9:98:47:a1:
4f:b7:71:d4:c3:0c:a0:ae:6b:ce:54:2b:93:7b:f4:
e5:0d:fc:d3:82:53:3f:ac:11:5c:1f:d3:66:f9:17:
dd:c4:13:ca:4c:01:11:f9:26:6d:e3:10:9e:61:e2:
d0:db:c8:fd:1d:56:00:9c:ac:72:5b:22:c9:de:0e:
8d:90:f5:6f:38:76:01:71:64:1a:22:9d:42:a2:e7:
d9:f4:0e:0d:36:ba:64:cc:3f:9c:32:bd:58:8f:8a:
a9:33:ec:91:5e:b3:4e:57:5e:d4:04:d3:f3:dd:ff:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:13:21:25:42:AF:6D:F8:82:AF:89:B9:99:F2:5D:8A:11:86:EE
X509v3 Authority Key Identifier:
keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b6:d2:62:6f:09:ce:17:cd:e1:fb:db:19:62:af:12:4a:d7:
48:0c:ad:57:c7:59:97:a0:3b:87:ec:5d:76:7d:d7:12:a1:57:
21:b5:bc:c7:5a:14:5b:93:85:a9:75:7f:c6:c8:a4:9f:47:ab:
27:fb:79:16:d8:33:ff:e7:0d:6a:f4:0d:1d:8b:34:ef:69:7a:
c2:d9:84:82:fe:fc:79:04:1a:87:b9:59:b3:c0:92:fa:65:09:
95:a6:01:81:1c:86:96:5a:af:3e:f8:8f:61:ac:2d:54:f8:b6:
04:eb:56:12:2b:a5:f0:d9:f4:c0:84:24:fe:8e:64:1e:d7:1c:
7a:44:fb:d7:80:c4:98:0d:a9:ad:9c:09:b2:12:2e:3e:81:5e:
4a:af:1f:3f:c3:fe:9e:0a:a0:d9:d4:b8:d7:85:b2:96:d4:75:
ce:77:d4:58:12:6e:72:ec:bc:06:6e:2a:8c:31:25:3b:49:66:
62:91:0f:dd:06:98:71:f0:ba:ba:fc:21:ac:26:e5:bc:c3:4b:
94:a2:e0:ba:ca:ac:95:dd:70:a6:1c:a0:0d:b8:7d:a8:3f:7a:
9e:ec:cc:a9:ec:b7:9c:a6:3f:cf:dd:95:e3:a7:10:27:5c:15:
ce:03:f7:40:78:c6:21:74:06:e0:a3:1f:ef:a0:8b:af:67:c4:
25:7f:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:31 2026 by rpki-client