
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier: dZf/mZVud2wcdPTo8VZQMnJDfUrAe5IgfCezKD+44+0=
Subject key identifier: 59:CC:98:39:A6:36:99:95:3F:4D:8B:B3:EA:3C:18:F6:3A:B4:F0:CA
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number: 4A
Signing time: Sat 28 Feb 2026 23:55:35 +0000
Manifest this update: Sat 28 Feb 2026 23:55:34 +0000
Manifest next update: Sat 07 Mar 2026 23:55:34 +0000
Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: CXBxku79n7F2xb8di3dV4bg1K6vC8lLMa+cYR3phWC8=)
2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: cZEumhKRL1OxAifgyf4FGxQYkuP7+gq2SZ1K3WxbiAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Validity
Not Before: Feb 28 23:55:34 2026 GMT
Not After : Mar 7 23:55:34 2026 GMT
Subject: CN=69a38076-7948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:0b:1f:29:2a:bf:a7:03:c3:47:7b:de:4a:
3d:41:a1:ed:9e:37:fb:05:03:34:37:f3:cf:43:1a:
bd:bf:fc:ef:c4:3e:8d:45:97:a3:82:ed:b7:d7:a8:
c0:e8:38:db:fc:a1:c3:b5:23:45:ff:cc:c3:08:a7:
d4:c1:56:6b:7c:ba:5e:56:14:8b:41:44:7b:fe:de:
d4:b7:1b:29:49:42:7f:43:11:9f:e8:13:92:84:a7:
f4:96:48:5a:34:c7:8e:82:f8:fe:49:f5:34:64:30:
3e:05:19:99:cf:84:05:d0:04:fa:72:29:30:16:9b:
f3:be:83:33:40:59:f6:3d:50:a7:2c:c8:7f:30:b5:
8e:3e:ab:fb:63:e9:a8:42:6e:29:83:63:bc:ea:b5:
00:4c:ee:39:57:f3:e8:c0:32:70:89:73:79:18:eb:
f5:ff:be:1d:13:16:da:e6:8c:39:f9:47:a0:c5:cd:
68:23:cb:5e:88:80:1b:52:e4:bb:c6:45:33:17:37:
e6:19:bf:a7:20:33:6d:06:f2:62:f1:70:2b:98:db:
9b:5c:b1:11:d8:12:79:1b:99:a9:4e:92:e1:15:3a:
7c:66:99:7f:15:9b:d2:43:17:ec:d1:e8:e7:cb:36:
42:5f:16:2b:0f:bb:b2:7d:a3:3c:16:3a:34:13:81:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:98:39:A6:36:99:95:3F:4D:8B:B3:EA:3C:18:F6:3A:B4:F0:CA
X509v3 Authority Key Identifier:
keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:df:6d:fd:32:c1:9e:74:9e:fe:18:99:27:5f:88:c8:33:41:
30:23:b1:8e:82:e5:80:ef:0d:e5:91:31:8a:47:25:fc:35:d7:
94:87:8b:8a:80:01:c7:d0:4a:6a:10:9a:3e:c1:14:b0:41:13:
7f:3a:eb:2c:86:f1:5d:49:4c:58:9c:76:90:59:87:36:ac:9d:
fd:7b:ed:64:c8:44:35:ef:a2:a6:0e:3e:c1:69:f7:8b:27:46:
f7:bd:d7:b3:86:74:17:de:8b:3e:1d:a2:c2:04:c1:01:2e:5c:
c1:3b:f7:0a:41:bf:78:6a:b8:2d:46:4c:16:f0:01:8e:4e:70:
a9:17:34:00:f4:66:ab:1a:6b:cb:4d:72:31:cc:1b:99:7d:b9:
fb:b0:42:5b:a2:5a:ae:e9:3e:b7:28:43:a5:68:9c:cf:e9:94:
f3:b9:57:24:bd:57:12:f1:d2:c9:11:0f:9c:65:90:33:e0:7e:
e3:28:01:aa:2d:e5:dd:ba:99:47:9b:18:67:2a:36:d5:3d:b5:
7b:af:6a:23:98:2a:4c:dd:c3:61:37:eb:5d:14:44:4c:71:78:
73:0b:99:7a:af:2a:92:14:bf:d8:74:8b:8f:13:78:ff:b6:f6:
36:8f:08:3f:42:11:05:10:34:2f:fa:cd:65:55:31:5e:e1:75:
02:19:ed:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:48 2026 by rpki-client