
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier: KRdkq55Du/niONjJjD7B39OfTpax2YeoNRHgSRSlO38=
Subject key identifier: E3:E6:61:41:55:BF:6B:98:AB:B1:3E:29:60:27:C0:73:39:BA:ED:DA
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number: 082F
Signing time: Wed 20 May 2026 21:03:17 +0000
Manifest this update: Wed 20 May 2026 21:03:16 +0000
Manifest next update: Wed 27 May 2026 21:03:16 +0000
Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: oQyFgxKKjYwp3bNoLhIR+iTnwnF+jzQxxxG5SWZPi8c=)
2: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=)
3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=)
4: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Validity
Not Before: May 20 21:03:16 2026 GMT
Not After : May 27 21:03:16 2026 GMT
Subject: CN=6a0e2194-97fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:12:c8:ef:3f:9d:4d:a8:49:ff:9e:29:ea:
cb:00:54:02:2d:38:d4:77:44:be:49:3d:31:09:8a:
c8:77:28:55:af:fd:7e:1c:df:fc:fd:d0:d1:52:a8:
4d:d9:4c:03:19:d0:94:d8:26:ff:d8:2d:54:24:4c:
70:eb:cc:3d:11:4f:3f:b1:5d:e0:c7:e3:47:df:63:
eb:65:f8:a3:a5:ee:84:16:4e:26:1d:c9:95:ca:89:
f6:a5:d5:7f:b8:dc:84:df:9f:10:60:cd:55:0f:92:
75:0b:8a:3a:34:00:15:ae:70:4d:07:a9:d9:cc:ab:
28:64:33:cc:98:3a:30:1b:f5:86:1e:62:0e:23:04:
20:d1:b9:2a:d4:51:38:3c:79:1b:fa:05:81:37:78:
3b:cd:75:6e:78:6d:87:00:ae:88:d8:1e:ae:4e:e5:
c5:f4:16:c7:8c:42:bb:1a:ea:11:9b:03:42:1a:c8:
9d:1a:76:87:32:69:2b:6f:0b:62:e5:a8:8d:56:22:
32:2d:ad:f2:b2:e3:12:01:a9:c2:c8:99:0f:61:42:
3f:ab:62:d7:15:1f:4c:20:9e:98:9c:36:64:79:15:
22:7a:c8:54:c8:79:fd:db:53:c4:89:75:23:7f:b9:
0b:68:af:60:3a:cd:ee:69:42:16:06:35:8b:e6:99:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:61:41:55:BF:6B:98:AB:B1:3E:29:60:27:C0:73:39:BA:ED:DA
X509v3 Authority Key Identifier:
keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7a:64:40:5e:8c:76:c1:b2:54:5f:f9:7a:97:69:5f:a7:b0:
6b:b4:5f:da:ff:eb:61:4c:c7:f4:89:0a:a1:17:14:e1:0e:34:
ad:50:23:d7:aa:bd:99:dc:68:5d:27:0e:1f:cb:82:7f:3b:67:
c4:06:77:67:5d:fe:26:63:e3:25:58:cb:50:42:75:7e:8a:55:
18:6b:8f:af:f5:4a:07:3d:09:7d:11:46:cb:a8:8e:32:9b:3e:
41:8e:0a:74:85:d6:da:9f:f4:8e:65:2d:99:63:4c:94:90:60:
72:6f:b3:72:c0:55:f7:0c:87:9c:5c:d9:72:19:96:d0:bb:d6:
fd:8d:0a:ef:9c:1c:31:27:d2:51:db:af:21:0c:00:6b:48:6b:
58:09:de:57:32:5c:05:e4:4a:b7:12:4a:79:a9:72:83:49:8c:
82:06:76:05:56:c3:08:de:84:c8:b1:da:22:5f:ec:67:88:23:
5d:31:ed:45:ad:a7:a2:c5:77:9f:a4:1a:4d:82:6c:ff:cb:42:
2e:ad:14:84:10:b4:ae:40:6f:f2:8e:d8:44:28:b0:81:ba:74:
ec:e5:ea:b1:eb:33:c5:d5:0c:a6:93:ad:80:7e:d5:c5:22:f8:
e8:86:66:8a:ec:4e:a6:98:1f:fb:52:d1:9c:f0:9d:fc:1e:55:
91:ad:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:43 2026 by rpki-client