
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier: T74OeNXTAP1WRkBqx+vLmuKLY1ym48s/tpSnA0owY1g=
Subject key identifier: EF:84:A6:1D:F8:7F:6C:0F:65:24:18:B7:D3:C4:43:9E:2D:25:74:50
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number: 9B
Signing time: Mon 27 Jul 2026 00:01:16 +0000
Manifest this update: Mon 27 Jul 2026 00:01:15 +0000
Manifest next update: Mon 03 Aug 2026 00:01:15 +0000
Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: zD2/j7Lm7jqYE+/TcwQM8prm27wSoDA5uvckwMwHiuQ=)
2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Validity
Not Before: Jul 27 00:01:15 2026 GMT
Not After : Aug 3 00:01:15 2026 GMT
Subject: CN=6a669fcc-e7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:e7:db:90:dd:62:73:33:0e:b4:59:51:9d:
5b:b0:6d:fc:1c:17:6c:b7:81:cf:9f:13:25:29:9a:
43:0c:ba:d7:4d:b6:6c:90:2b:01:bf:7a:0e:cf:5b:
6d:fe:16:af:e3:36:bd:2b:7e:b8:6b:17:db:ba:5c:
19:24:2b:98:84:78:2a:9e:97:1d:25:29:82:2a:7c:
68:d2:68:7b:f1:e7:8f:70:96:f9:49:94:e4:1a:d5:
a8:1e:b4:05:55:04:e7:a8:6e:ab:4f:ac:fe:22:5c:
13:0b:94:30:c3:7a:45:38:6b:4b:e9:07:8b:42:17:
f6:3f:01:ca:c0:0b:71:11:03:43:da:b0:2d:88:45:
78:b0:82:8e:f8:cb:9c:2d:0f:5e:c1:54:95:3b:be:
88:99:b4:5c:52:59:35:46:67:a1:27:78:f6:81:35:
3e:60:03:43:7d:10:13:c9:6f:03:9f:e5:98:77:85:
c5:8c:8f:5f:71:4b:9b:f0:c3:84:ee:2c:2f:95:ed:
b8:41:41:17:35:60:fc:43:8b:3a:fd:21:67:05:30:
dc:82:a6:1a:c8:46:5a:29:eb:e8:22:1f:35:97:38:
ff:53:d6:5f:c9:8d:6d:ff:0a:88:08:92:b3:97:b3:
9a:b2:4f:e4:cd:65:7b:3a:c2:b6:86:38:16:f7:b5:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:84:A6:1D:F8:7F:6C:0F:65:24:18:B7:D3:C4:43:9E:2D:25:74:50
X509v3 Authority Key Identifier:
keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:29:b1:68:7a:ac:8b:54:20:ae:fd:b3:77:d9:e4:6c:a6:71:
0c:a8:4e:5a:6e:e7:b5:88:77:98:42:db:5a:6d:ec:99:17:30:
ab:43:2f:f2:e7:27:e6:29:99:9a:d8:f5:a9:32:e5:3d:e7:df:
76:fb:cb:a4:24:8a:1b:67:e1:0c:dc:30:f2:d3:03:48:27:ce:
dd:d0:b9:d7:3d:d5:da:8c:05:a4:2f:9d:ca:d0:de:76:0b:23:
e7:3e:31:d4:3a:e1:4e:e0:7c:5c:40:58:5a:30:e9:b9:2e:0d:
bd:a4:66:1e:c0:f2:fb:7c:8d:c3:af:1f:84:ab:fd:95:bc:dc:
f1:79:d9:16:1c:71:df:8e:8f:6d:a8:31:1f:62:b3:7f:64:e8:
02:d2:de:61:c5:9c:34:06:d4:6a:08:f3:97:cf:6f:1e:6e:e2:
9b:e8:61:e6:14:36:e6:f8:f9:43:46:6b:c7:ef:7d:4f:15:2e:
e6:af:c2:7f:1f:34:b3:57:ec:de:a9:16:5e:b7:0d:f4:04:44:
f2:13:93:9c:8c:89:e8:c9:90:41:01:80:13:c9:f8:48:29:df:
9c:5c:3b:4d:ef:3b:dc:ab:bc:cf:bb:7d:a1:2a:18:76:49:9b:
21:c9:f0:f5:ef:0d:07:03:06:5e:4e:1e:90:8d:4c:97:07:66:
35:cb:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:00 2026 by rpki-client