
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json)
Hash identifier: 1QbXmpF0wAT53b2qD/angDLYgycvi//iledHHoxWf/s=
Subject key identifier: 14:36:43:09:34:E2:0C:72:4E:7E:EA:34:7F:C9:85:27:C9:72:3E:81
Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43
Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
Manifest number: 017A
Signing time: Sun 05 Apr 2026 04:03:30 +0000
Manifest this update: Sun 05 Apr 2026 04:03:30 +0000
Manifest next update: Sun 12 Apr 2026 04:03:30 +0000
Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: JhGXfEygNLt3+NgV6FM2Q74be0CKLvNc5UaGxAlG+w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl
rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
Validity
Not Before: Apr 5 04:03:30 2026 GMT
Not After : Apr 12 04:03:30 2026 GMT
Subject: CN=69d1df12-ac36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:5a:51:ba:cf:6b:d1:ea:4a:a8:fa:a2:5c:
93:e5:69:ec:5e:f8:e5:c9:7b:3d:48:c6:7d:f7:51:
3a:c4:a8:9b:66:eb:63:0b:32:86:cf:cc:a0:f5:dd:
2f:93:7a:ea:e2:25:fd:34:b0:fd:7b:0b:63:11:e3:
b5:16:3c:8a:e4:9c:9a:4f:af:93:9a:2a:1c:15:51:
ba:10:09:90:8d:f9:b4:11:0f:73:86:d3:5a:bf:0a:
75:29:cc:e5:65:c1:b3:52:f1:5e:91:7b:d0:88:38:
87:f8:99:55:af:ae:b1:d1:1a:03:fb:0f:05:3d:3e:
09:29:b4:c6:33:68:eb:77:14:85:e1:d9:cc:0a:75:
39:2d:c1:26:ff:49:ea:12:68:83:64:aa:87:0e:06:
2a:1d:b8:30:de:99:a2:9a:93:b5:f8:80:91:9e:b1:
bb:f8:d4:24:8e:ee:8f:20:f5:a6:92:88:93:d0:d8:
0d:54:7f:45:ef:25:1b:e3:3c:1e:8b:1f:5a:69:da:
7a:cb:ee:a1:88:ab:a6:e3:58:f7:b3:f6:e1:e9:02:
77:cc:c1:5b:ff:27:ed:52:cb:9c:e9:67:26:cd:92:
5a:44:29:b2:8c:7b:ef:c1:94:5b:37:da:81:49:c8:
fc:67:e6:75:95:b8:f3:d7:7e:c9:35:df:06:cb:81:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:36:43:09:34:E2:0C:72:4E:7E:EA:34:7F:C9:85:27:C9:72:3E:81
X509v3 Authority Key Identifier:
keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5a:dd:97:1a:5f:5f:93:8e:42:b9:be:22:3e:45:49:b6:ac:
28:e2:fc:36:08:52:43:cf:bc:06:5c:71:e7:e6:c9:ee:36:26:
ec:a8:35:53:ab:8a:53:d1:7d:66:64:e8:02:f7:39:14:3e:02:
3b:0a:c2:e9:e5:4e:aa:d3:2b:28:e4:ee:17:ce:a0:ca:02:4f:
0c:4a:f6:03:df:87:05:c0:fd:2f:56:de:72:d8:a3:4e:05:30:
f3:46:0c:95:cf:c0:35:8f:31:68:b4:42:25:a3:c0:df:88:d5:
e1:65:31:02:2c:c9:74:86:47:a9:3d:f8:5a:c6:88:7c:84:43:
97:bc:2a:63:6e:d3:07:24:e2:ae:f7:cd:e4:c4:8f:d7:36:2f:
16:93:e8:b6:4b:68:f4:df:06:58:35:d6:9d:d2:7c:bf:3f:a2:
a9:51:42:76:cd:e1:7e:0b:1e:c7:01:4e:39:f6:3f:b8:af:76:
d4:6a:21:db:3d:5e:3c:1c:f1:5c:04:df:be:bd:0e:49:d8:25:
66:f0:39:d2:cc:8b:2a:47:40:6d:55:54:08:d2:b5:85:ec:db:
bb:83:eb:66:7e:23:b8:14:bc:2f:67:3b:74:32:ba:65:64:01:
16:4c:34:7b:19:d9:d3:bd:61:57:19:e1:63:a5:01:c1:db:5a:
fd:93:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:53 2026 by rpki-client