
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: xg0v/VZnv6yPzL1FYpMeV0kbtH3D5vNChu/wfTOiHUw=
Subject key identifier: 99:B5:2D:8A:5B:9C:82:3E:F8:7B:28:08:2E:0B:C7:B9:D8:A1:08:AD
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 051D
Signing time: Sat 04 Apr 2026 23:29:09 +0000
Manifest this update: Sat 04 Apr 2026 23:29:08 +0000
Manifest next update: Sat 11 Apr 2026 23:29:08 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: cJxNNXfEiBgJ4nETYOzqbywqgKZTTr35fSTGcTmhS/0=)
2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: D/dR6ENuXfLHFUetoYZThX1l/t7V6zP5wZaCcQHU3VY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Apr 4 23:29:08 2026 GMT
Not After : Apr 11 23:29:08 2026 GMT
Subject: CN=69d19ec5-3b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:c5:07:22:99:2e:19:27:7f:26:61:0e:5c:
fb:e7:e2:c9:56:2b:bd:ba:1a:c2:ee:0e:62:b0:52:
0f:e8:7e:c0:11:cb:cc:9a:7b:b1:fd:29:68:c9:f2:
3d:95:00:9e:61:6a:3d:f1:86:fa:ef:f0:23:c4:12:
ea:08:e8:9d:77:0d:5d:8a:95:df:a0:4b:71:9a:a4:
29:d1:7b:92:04:07:92:73:24:a4:a8:ec:01:d1:bf:
33:ce:8d:29:79:30:cb:cb:c4:c1:c0:d0:7f:3e:e6:
df:d6:1e:ef:88:99:ac:5b:e9:c9:99:a8:0d:ec:91:
1d:19:db:de:ea:dd:a9:5f:cf:22:40:c7:d6:e1:4e:
83:a6:1e:ce:7d:f9:ef:29:6f:00:51:81:8e:57:d8:
b8:fe:2b:08:dd:ba:82:bf:ce:dc:9d:b0:ab:ac:05:
65:e5:6f:70:3c:8e:f7:fa:19:5c:f8:bc:e5:39:ef:
15:32:38:f9:b6:27:7c:57:99:d7:70:b3:b2:5c:76:
ab:08:97:15:ab:f9:1a:78:d8:1a:df:5e:86:02:e6:
bb:fd:a7:70:c3:84:6d:86:6b:91:21:2d:7b:dc:69:
ae:18:01:2f:e6:85:5d:1c:0b:52:3a:12:1b:3a:f9:
c6:ba:6e:20:e7:f1:cf:5d:da:a0:e0:47:44:29:ac:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:2D:8A:5B:9C:82:3E:F8:7B:28:08:2E:0B:C7:B9:D8:A1:08:AD
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e5:00:5d:e5:7a:af:43:07:d5:da:3d:b8:74:b4:ff:f8:4f:f2:
91:a6:c7:15:67:74:eb:ee:9f:dc:19:a2:16:1d:d1:2c:fb:44:
6e:13:0f:0e:0e:72:d5:78:e5:5c:ae:1c:bd:5b:3b:df:8f:f0:
90:9c:f4:cb:f0:6d:a8:e2:2f:b8:81:6f:5e:a3:e5:8e:b0:35:
ac:a9:73:aa:f0:83:c1:2d:ee:cf:e2:f6:f5:4f:8b:8d:30:9b:
6e:9a:2c:4e:61:35:c5:03:0e:36:14:e0:11:07:b5:aa:92:2b:
93:e6:b4:fc:f3:5e:e8:b0:36:35:74:10:59:bf:07:be:39:40:
29:ef:19:2a:70:4a:b7:28:f0:6a:5e:d5:83:59:3a:db:39:5b:
45:ce:bd:f3:ae:9c:e6:d4:a3:9e:1c:54:a0:16:b0:d2:ff:62:
a6:41:9d:f4:79:85:39:fa:4d:05:b0:34:ff:e3:50:98:ce:47:
77:1a:84:f1:df:ae:9c:d1:2f:a6:bf:b8:16:08:9c:45:a7:c9:
33:0c:f5:65:8f:2c:39:3b:a3:f6:27:c5:17:65:6e:6a:98:8b:
a6:b0:c9:cc:10:5a:b5:b1:87:ee:d0:52:40:33:80:4a:8a:a2:
77:47:db:4d:a3:56:2b:f5:b4:0c:f7:37:57:89:04:6b:c2:52:
da:c7:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:15 2026 by rpki-client