
$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: M+qLVKHlShilYAT54rwPngrspkG8MHsGooR0LbfP29k=
Subject key identifier: 4F:DC:78:60:1D:8B:A9:1A:84:7A:F9:CF:FF:17:19:A7:BC:82:2C:B3
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 0222
Signing time: Sun 05 Apr 2026 02:18:52 +0000
Manifest this update: Sun 05 Apr 2026 02:18:52 +0000
Manifest next update: Sun 12 Apr 2026 02:18:52 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: UkyXJRsozdHqE5Tn3EXhnTJHqbXGBZGF/MVPZ1uj5j4=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NqQKBASAXdv1LlkB9yqcFqDG6FI2OUjfgdiKy6gJA/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Apr 5 02:18:52 2026 GMT
Not After : Apr 12 02:18:52 2026 GMT
Subject: CN=69d1c68c-c8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:b7:80:7c:08:f5:4f:c4:21:d5:09:81:c3:
6c:28:50:7e:d1:c5:3d:63:6f:0c:ed:fa:9d:a3:b0:
ac:c8:46:88:02:ca:45:9a:fe:4b:25:21:e3:f6:7c:
e2:84:19:56:fa:a1:50:40:78:34:c7:25:2e:b3:0f:
31:8d:93:9a:15:36:4a:5e:23:bf:18:fc:ca:26:2c:
23:63:4c:7c:b0:9d:5e:30:93:d0:b7:41:3b:04:51:
5f:4e:6b:5f:6f:1b:db:bb:ba:ee:8f:3a:00:67:55:
8a:50:5d:ec:e5:70:50:83:b7:0e:ca:26:bb:83:fd:
92:9b:df:7a:7f:5a:59:f3:fb:f9:59:d3:78:bc:24:
9f:72:45:9b:09:50:8b:5c:f6:96:41:46:6b:e3:4a:
14:fe:cb:17:2f:df:d3:69:0a:69:f6:c8:17:96:12:
ad:aa:b5:a6:0e:9b:d0:ff:c5:72:2d:91:f2:91:cc:
c9:0e:3f:d4:34:2b:37:d5:2c:3a:94:d8:0c:6f:67:
67:1d:a6:f8:cc:cd:48:d2:93:22:94:3d:36:70:50:
e5:e2:28:14:fb:27:03:ca:62:e1:de:8c:2e:15:0a:
61:41:ce:31:24:04:77:38:1b:b7:85:0e:30:b8:c2:
38:a1:7c:89:82:1a:b1:d2:6d:4b:dd:e6:fa:7c:d4:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DC:78:60:1D:8B:A9:1A:84:7A:F9:CF:FF:17:19:A7:BC:82:2C:B3
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c0:1a:f8:7a:58:64:5c:c6:fb:24:c5:6a:fd:dc:33:5f:a5:
d8:d9:75:5e:15:df:7d:6b:13:77:01:0d:8e:be:49:4d:3f:d6:
4f:f3:89:dc:d2:6d:8a:f6:3e:2c:d7:00:cf:72:bf:21:ce:2c:
27:a1:7d:8d:93:fa:10:57:6c:34:20:f4:a5:4a:70:fc:5e:2f:
fb:cc:7e:20:62:d7:94:d8:d4:40:9a:9f:54:95:75:c8:64:87:
28:d2:45:5e:86:21:c7:8a:37:aa:47:b3:d7:e8:0e:2f:c5:a9:
c3:28:3d:55:be:5b:69:2b:4c:c7:d3:54:a1:5b:33:35:51:bf:
11:72:23:02:f9:d5:15:03:7c:48:c5:c9:f5:ef:03:a4:31:d9:
d4:4f:7a:3a:7f:8f:7f:a9:8c:fd:32:b0:e6:2c:7d:61:b8:ed:
51:b8:49:44:3a:18:96:7b:2a:13:2d:38:9e:d0:bf:82:95:41:
ba:56:7f:70:48:9d:88:4c:1b:b6:06:2c:5a:07:da:e3:60:d9:
e4:00:f0:a6:58:bb:f6:c6:d7:a7:ab:97:fe:47:1f:48:8b:2c:
2a:d3:3d:39:16:71:ee:54:86:78:8d:cb:9d:14:0f:bd:cf:33:
93:54:bb:93:55:b7:fc:e6:bb:8b:e1:23:d0:ff:95:a8:a5:ae:
4c:49:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:01 2026 by rpki-client