
$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json)
Hash identifier: hd5924DQVxoZB3ynBKwtD9Qu9BiS59za+Ivm4m26hVA=
Subject key identifier: 78:36:A4:41:09:EE:0D:79:B6:22:1F:4E:DE:D3:94:DF:F8:3B:F2:26
Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Certificate serial: 1019
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
Manifest number: 1010
Signing time: Sat 04 Apr 2026 17:23:16 +0000
Manifest this update: Sat 04 Apr 2026 17:23:15 +0000
Manifest next update: Sat 11 Apr 2026 17:23:15 +0000
Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: msEmVT+0yx/oKih/pcDJYIit45/vh/U/gYGXs8LXYqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl
rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4121 (0x1019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Validity
Not Before: Apr 4 17:23:15 2026 GMT
Not After : Apr 11 17:23:15 2026 GMT
Subject: CN=69d14904-ed7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:17:69:1a:2c:4b:6a:f3:99:a9:20:b3:41:
67:d6:74:36:9a:b1:69:38:43:d2:8a:ec:d2:3e:65:
af:da:bb:98:4c:75:61:34:f7:4b:61:90:d5:9c:02:
ff:61:c8:dd:1a:a3:cc:5a:09:66:3a:92:f8:2b:88:
ea:31:8d:98:5f:41:f4:1e:9a:e6:ff:04:e4:77:3a:
a8:ae:f1:d8:d3:ce:8c:9c:c7:80:f6:dd:59:35:53:
46:39:a7:ad:03:42:08:01:3c:02:e5:c7:48:e2:6c:
7c:32:a8:60:33:c5:8d:09:6a:09:7f:1b:ef:49:21:
65:c5:e4:02:39:7c:58:d6:09:1c:43:3b:aa:e6:2a:
50:21:9b:75:a4:7b:42:ed:51:6a:d1:7f:82:db:b3:
f9:8b:ae:f0:90:60:62:97:3f:e3:4f:93:37:b5:2f:
cf:36:2d:9e:23:0c:5f:93:95:a0:e1:ca:37:e2:c0:
7c:b6:ce:0e:06:74:a5:c6:73:79:c0:04:9d:15:d9:
36:f1:f2:e7:40:54:80:a0:11:bd:84:f2:3b:77:1e:
13:a3:11:04:d5:36:bd:f5:52:55:e0:65:4c:b7:60:
d4:2d:0f:c1:56:13:ef:60:88:c6:26:5a:36:0a:d7:
1a:aa:ec:24:98:7b:6f:5d:87:f5:e1:12:81:ba:e1:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:A4:41:09:EE:0D:79:B6:22:1F:4E:DE:D3:94:DF:F8:3B:F2:26
X509v3 Authority Key Identifier:
keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:03:02:d2:5b:36:84:77:c0:6a:47:a6:74:e4:6c:8b:0f:53:
7a:e5:ab:1a:58:18:f4:e8:0b:84:f8:af:e5:ea:09:f4:c1:fe:
35:b4:cc:a9:56:74:95:93:e7:b0:01:98:b7:19:b2:ee:29:28:
6d:22:69:05:11:61:16:69:2d:d9:8d:83:f5:0b:53:ed:4a:e2:
74:40:e9:33:1f:2b:b6:a3:3d:f0:45:6e:3d:72:70:19:c6:5b:
9f:43:14:de:60:4b:04:62:10:ea:0a:06:61:12:1f:6c:27:5d:
0f:2c:d4:96:cc:67:68:7b:8a:20:c2:ee:6a:21:f1:62:b0:e1:
b2:23:2b:e6:fe:8a:4a:82:1d:f5:66:b1:bc:de:27:eb:25:a9:
ec:63:25:c0:6f:fe:8c:68:a3:aa:62:77:b6:56:0b:bd:1e:8a:
56:59:f7:31:cd:3c:e9:bf:74:e8:9e:2b:ac:2d:26:4b:68:8e:
74:2f:a3:e8:e1:a4:da:a8:6b:8b:93:15:40:3f:b8:15:74:75:
8c:7a:9c:c4:16:8b:d6:1d:21:51:ce:62:0a:71:88:69:1e:05:
4f:bf:da:49:5d:66:8c:ab:7a:39:ed:9a:38:5e:24:18:a5:69:
d8:5a:c4:b2:f5:52:81:33:b9:a4:b5:9e:21:16:97:7e:63:30:
60:d1:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:33 2026 by rpki-client