
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier: 1eLxrVYD7VR8kt2qtxr1T4RdgWfHefREuppsNUTUu4s=
Subject key identifier: 8F:4C:6D:52:F1:1B:CC:39:54:B5:D7:AF:ED:29:30:19:F5:8B:2C:43
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial: 0E57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number: 0E14
Signing time: Thu 16 Apr 2026 17:48:03 +0000
Manifest this update: Thu 16 Apr 2026 17:48:02 +0000
Manifest next update: Thu 23 Apr 2026 17:48:02 +0000
Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: RzrPMdD1GDA3q5h4orux36LlQlc66yF+J0yVtPjkV+E=)
2: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: MqeW/D/8P52Csk263/GYlr8+c8ERIR8aUwn81bPGMe4=)
3: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: W/zwkT3q1SimSGPL2qz0EdwTK1p2ucrY5Ozs9Diao7A=)
4: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: gAfym6hfoPW5lreTFEqRc7a46jF6gekxCIRIP4eys1Q=)
5: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: OMljntVkgQs+vfOk+Rb1tcPgapnLq21/6pFdv7k+86s=)
6: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: njqCophIvGbWqZOEZO7iH5P4olbdrXCLsypP82DCs2Q=)
7: CDA4E0082E6511F19AB402C39E833773.roa (hash: rh39GitPC7cxp3eJsYGmMJX7W8w6fDSBPZHHe7mWb+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Validity
Not Before: Apr 16 17:48:02 2026 GMT
Not After : Apr 23 17:48:02 2026 GMT
Subject: CN=69e120d3-8582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:10:81:1c:09:c8:4d:cb:d4:1c:ff:8b:79:
02:6e:2e:52:b4:cb:07:54:c1:bc:0b:78:96:98:ba:
99:ce:3a:43:52:ab:04:2f:ca:e8:c4:a8:20:da:c0:
35:c0:36:02:aa:b2:b4:16:d3:19:52:9b:a2:67:88:
83:61:27:69:33:e0:00:37:3a:9a:b5:7d:c1:df:a2:
41:06:e6:64:f8:a2:7e:19:2d:53:51:ea:0d:b7:96:
83:07:7d:c5:55:ee:86:1c:68:4b:98:4f:f6:b5:16:
ec:cc:c6:e1:15:9c:64:85:b5:2b:fa:72:3c:60:5e:
17:a7:61:7f:9b:3f:26:b6:6e:c5:9b:49:d0:b3:63:
52:15:f4:87:ee:aa:06:42:0e:6d:31:af:2f:43:0a:
2d:a9:9d:96:f0:11:8b:9e:f1:37:df:c4:c4:56:fb:
1d:ae:8d:db:28:a3:4d:f1:d7:37:a0:ac:81:a6:b2:
a6:63:78:a8:b4:a8:18:be:1b:44:0d:9e:07:bc:d4:
25:c9:a5:ac:0b:1b:f4:f9:22:68:e3:38:ad:ea:bd:
4f:c6:46:f4:6c:e4:7e:29:7f:b1:7d:9d:f9:8a:ad:
27:82:c1:58:77:9b:68:3d:ce:df:36:0f:53:3e:95:
06:eb:e4:8a:38:9d:64:4a:2d:8d:33:87:35:28:d3:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:6D:52:F1:1B:CC:39:54:B5:D7:AF:ED:29:30:19:F5:8B:2C:43
X509v3 Authority Key Identifier:
keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:a7:3d:6d:52:f9:b7:32:b8:0f:44:96:38:12:c0:ee:7d:65:
c2:fc:16:f4:34:48:4d:ac:6c:5e:8d:f7:46:7c:d2:19:d4:1f:
75:4b:d7:b7:5b:0f:5e:2f:a1:25:ac:97:ee:e0:c6:6f:af:54:
90:d5:6b:f7:69:48:fb:3c:36:ab:b5:44:b5:80:6c:66:90:ef:
ee:ae:5c:21:cb:54:34:b9:1b:84:a2:07:2b:f1:8f:60:b0:f2:
55:e1:f3:b8:ed:42:56:e1:28:d1:e1:3e:24:fe:fd:cc:4a:73:
29:41:c4:1e:8a:44:18:72:3d:39:44:c9:fa:0b:4e:33:12:50:
f5:c7:4c:99:10:86:cc:4d:94:65:24:f1:35:42:8b:b4:d8:56:
54:78:75:74:06:a4:55:14:98:a4:e2:9f:3d:76:27:a3:d8:9b:
22:9b:52:6e:2e:84:72:47:a3:18:ba:4a:c0:92:9e:a2:66:ff:
2b:11:fb:6f:08:4b:d0:1c:81:37:28:5d:e3:ac:6a:21:ad:bc:
46:12:89:27:eb:95:ab:a8:73:29:d0:6f:c4:a7:6c:b4:67:c2:
3c:95:b0:b0:f3:b9:be:72:bd:f2:57:54:05:d7:4a:f9:9d:e5:
7f:90:cf:e9:06:f0:2a:a6:70:e4:5f:cb:96:4d:73:47:68:61:
59:ce:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:34 2026 by rpki-client