
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier: ef7mJ5TGzyfVNpN0bVmvEW9zhrlM9xs6WGPB3cUeFPw=
Subject key identifier: 03:ED:A5:FC:21:43:6C:48:A5:03:58:83:72:BE:17:B8:01:6D:00:D8
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number: 84
Signing time: Fri 12 Jun 2026 23:13:42 +0000
Manifest this update: Fri 12 Jun 2026 23:13:41 +0000
Manifest next update: Fri 19 Jun 2026 23:13:41 +0000
Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: 8MSAwAZ6mWFwpQPPyaCjVzupFMjw4hQiq/ko/svjMOU=)
2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Validity
Not Before: Jun 12 23:13:41 2026 GMT
Not After : Jun 19 23:13:41 2026 GMT
Subject: CN=6a2c92a5-a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:08:cd:c0:a7:ee:9a:37:69:81:7a:a2:44:
a4:8d:8a:e4:2c:4d:81:4d:0f:96:65:09:c4:ac:3d:
5e:71:2a:3d:0b:86:76:33:5f:62:bf:d7:22:97:89:
4d:c0:ca:0d:26:cd:cd:e9:8a:4d:e0:f4:ad:e9:70:
6c:e5:e5:0c:44:62:09:34:09:c8:89:61:c9:84:ec:
8a:92:26:8e:c8:33:85:fb:6c:3c:60:f0:f6:73:1b:
8a:20:04:05:21:76:1c:1f:9e:dd:5b:da:b8:9b:a4:
a0:57:44:dd:b0:9f:ec:f8:cd:30:a7:f3:12:ea:ff:
16:3d:0f:4f:6c:9e:38:a5:51:f8:a6:15:a4:f9:9d:
d0:9f:da:4b:a3:86:fb:e6:9a:74:08:58:8c:d1:85:
e8:e6:d1:55:41:ca:24:10:26:1c:82:f5:b7:95:1a:
74:6c:73:42:f2:c4:53:e6:45:16:02:01:99:07:47:
e9:f7:ba:dd:00:7f:77:c5:ed:1c:87:58:b5:e4:4b:
5c:f2:44:ad:fc:00:97:e1:db:d8:dc:b3:e9:8d:71:
a0:c3:b7:0b:92:63:41:80:86:de:13:99:8a:76:6f:
5a:4d:12:ef:84:af:af:2b:86:da:f7:54:c9:7a:6d:
50:c8:8e:7e:13:20:42:80:c3:40:e1:e1:08:87:18:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:A5:FC:21:43:6C:48:A5:03:58:83:72:BE:17:B8:01:6D:00:D8
X509v3 Authority Key Identifier:
keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:35:3f:8d:08:27:01:5b:8c:df:73:0c:45:a5:70:ae:47:a1:
af:8d:fd:ac:ea:9c:92:0a:54:36:9b:dc:e7:a2:66:04:76:56:
3d:32:62:da:b4:10:7d:3a:45:26:6f:f7:f5:06:09:76:cf:2a:
a5:c1:cd:dd:0c:e1:04:52:e9:07:d3:d6:e0:b4:f6:28:47:7e:
8a:6c:22:64:51:45:3c:8e:96:26:c8:4d:30:86:bc:87:bf:65:
13:c7:3c:cf:3f:ab:4b:ae:d7:16:83:bf:b6:b0:77:3c:f8:63:
0c:75:9a:0d:60:4a:c9:6a:1f:b7:af:7c:f3:0f:13:b3:5b:bf:
b1:e7:29:e3:56:b6:ab:00:e5:f2:1b:ba:5b:46:e5:bb:78:b0:
5b:7a:f2:4f:ff:30:73:5a:b2:6b:c3:05:07:39:cb:03:41:3b:
21:c1:57:f5:9f:22:ed:3d:8d:04:14:81:21:bb:a7:b3:cb:68:
b3:b1:e7:41:2f:fc:ef:93:6e:58:56:f9:7b:41:5d:13:0d:a0:
f4:22:91:c4:81:8c:4f:d8:d5:94:a4:53:e9:3d:15:8b:3a:db:
95:3b:ea:5d:fa:21:ac:f0:f9:a1:46:93:0a:09:8e:d8:e6:8d:
04:b8:ac:d4:fa:14:60:06:5c:ed:23:23:fc:6e:6c:e2:32:c7:
6c:42:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:39 2026 by rpki-client