
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File: 8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier: KMWBMM5QvglQ2cSYBVkCKtfddf9lVcZCE5k6ue2ApL8=
Subject key identifier: 29:0D:E0:51:04:32:23:E5:74:E7:B0:FE:07:CD:58:7A:BE:05:A0:81
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number: 55
Signing time: Fri 17 Apr 2026 07:50:51 +0000
Manifest this update: Fri 17 Apr 2026 07:50:50 +0000
Manifest next update: Fri 24 Apr 2026 07:50:50 +0000
Files and hashes: 1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: boalRZJPscLfCqLGWfnRRFYStDTkTuegb+fXGL/p04c=)
2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: ivbdN4NvvnbB10SMOQMCGpQDBPImMhiYIJBpIIj7B+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Validity
Not Before: Apr 17 07:50:50 2026 GMT
Not After : Apr 24 07:50:50 2026 GMT
Subject: CN=69e1e65b-13e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:4f:6e:37:1c:2e:a9:6a:c4:af:f2:28:ea:
3c:31:7a:2b:0e:11:34:01:21:7f:c2:b1:39:51:03:
98:da:86:32:cd:b0:d3:9a:96:24:01:c7:dd:3c:01:
d4:17:e6:c1:16:5b:22:25:a3:70:2c:28:f1:6a:ac:
63:37:ac:ea:c8:92:2e:8c:fa:18:81:77:67:14:d4:
fe:40:73:7e:5f:cc:11:31:e0:f8:e1:16:e9:82:cb:
7f:27:9b:a0:3f:cb:aa:88:b6:d8:72:73:2a:0b:e4:
81:2a:29:97:a0:15:fc:79:b4:f1:a9:13:ae:b2:28:
2d:83:49:9d:71:a7:00:04:7e:50:ea:e1:80:55:ef:
38:7f:c0:8f:e9:df:ca:df:1e:67:2e:2b:d7:4d:45:
96:66:16:45:da:63:93:8c:41:31:5d:22:c6:5a:bc:
ad:63:d7:d4:b6:e8:a8:12:31:aa:89:dd:cb:88:23:
3e:7f:80:8c:6f:9f:e2:79:dd:5a:0e:50:d7:00:d8:
db:73:10:9c:e4:46:07:62:18:82:e6:b8:4c:dc:54:
e9:88:ca:1d:11:90:15:e1:8a:cf:79:50:1c:36:6f:
e4:0d:a4:b4:be:1d:57:87:9c:f9:62:f2:0a:22:8c:
e8:4b:ef:2f:fd:18:63:da:d7:73:6a:8a:a3:42:0f:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:E0:51:04:32:23:E5:74:E7:B0:FE:07:CD:58:7A:BE:05:A0:81
X509v3 Authority Key Identifier:
keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:89:87:3b:d8:bf:2f:a1:f8:fd:24:04:f2:1e:42:59:2b:5c:
ce:33:e8:b9:0e:62:39:44:71:98:99:08:16:84:f9:dc:0c:c3:
0f:9f:b1:e6:15:5f:0b:87:d1:93:5c:f9:92:90:7d:a2:75:39:
bf:ca:d2:0f:54:80:ec:20:3d:62:eb:81:e0:53:34:85:3e:20:
e8:43:c7:d1:5a:98:4c:fa:49:fc:41:e0:91:2e:06:f0:f4:d1:
6a:67:dc:6c:f6:c6:6d:e0:04:fe:ae:23:fc:53:82:b2:8e:24:
cf:cb:77:0c:ea:1e:14:f3:f7:d7:a2:29:7f:bc:7c:f9:d1:86:
0c:80:83:78:57:29:6b:71:5f:07:07:f8:bf:54:aa:00:4f:b3:
01:e4:ef:8f:7e:fd:b2:fc:8a:2a:97:fa:53:87:cb:57:68:cb:
ec:55:05:fe:08:c4:5c:0f:98:a3:6e:2b:93:3e:9b:67:3c:b2:
e2:4b:97:36:fe:57:43:54:15:05:07:6b:7b:bd:6e:9f:a6:3b:
1c:b8:2d:2e:de:63:96:e6:05:4b:6e:e0:c5:fb:fe:62:f1:14:
26:f9:a5:22:ef:82:52:04:fc:39:d0:94:e5:9c:e9:59:c2:3d:
7e:c9:ba:b2:bf:d3:a0:32:4c:4c:07:f0:17:34:c6:17:6d:05:
63:3f:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:11 2026 by rpki-client