
$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
File: R-8IU6LX3qJJt8P694FpyPjbx-k.mft (raw, json)
Hash identifier: 5pxbgseO5Pv45V/bV6E+lRR1vXheYM05lWv0O6lY2eM=
Subject key identifier: 32:7E:A6:9D:23:C2:27:72:5D:C9:CC:9D:9C:19:6F:AE:A7:31:CC:8B
Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9
Certificate issuer: /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
Manifest number: 9E
Signing time: Wed 19 Aug 2026 07:57:00 +0000
Manifest this update: Wed 19 Aug 2026 07:57:00 +0000
Manifest next update: Wed 26 Aug 2026 07:57:00 +0000
Files and hashes: 1: R-8IU6LX3qJJt8P694FpyPjbx-k.crl (hash: 0zwbSu90yAWm/AxiGY7UjV7YN0qO5Kh3TQidtcpfwVU=)
2: 6F324D3CAB2811F08D96D563C4F9AE02.roa (hash: kD5lmzkNkNAiRMyL5raIyZmwcauj/GPpt1ud3VtpSR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl
rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
Validity
Not Before: Aug 19 07:57:00 2026 GMT
Not After : Aug 26 07:57:00 2026 GMT
Subject: CN=6a8561cc-baa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:e2:7d:5d:0b:41:e5:b2:0a:f6:a8:05:a5:
90:a4:02:d9:1d:5d:5c:69:e4:d4:61:5e:28:2f:62:
d5:46:d5:fe:55:bd:44:32:ab:49:4e:ef:19:75:a2:
0b:4f:ad:d3:eb:af:f9:a6:0b:04:13:93:b4:a1:83:
84:73:53:d0:6c:34:73:6f:d3:95:59:bb:9c:cf:f8:
3a:a1:a3:90:e5:74:4b:1f:62:8f:a5:5b:3a:1e:7a:
76:8f:b5:84:a5:f3:a0:56:d3:23:52:86:1a:17:a3:
0c:7e:8d:56:72:04:ee:19:be:5f:df:8a:9a:30:a3:
72:21:59:8e:f5:6c:08:e6:6a:7f:3b:6f:bc:1e:83:
06:0b:aa:7d:ba:ba:54:52:c4:79:9e:c4:9b:28:43:
09:f5:5c:3d:ae:3e:d8:45:44:99:15:f4:fd:12:29:
b1:73:c9:19:64:4c:bd:3f:a8:80:f6:70:27:38:6e:
13:73:9d:34:c8:e9:c3:c3:6b:8e:44:5a:f2:71:e4:
07:ff:c3:55:51:a0:6b:67:8e:35:fe:04:7b:7f:2c:
7a:da:8f:17:da:2f:5c:71:e4:c8:bb:94:9b:83:8b:
09:dd:39:49:58:1a:34:ec:06:fd:da:90:77:e9:b1:
64:f2:ad:09:58:4c:b9:b0:7b:dd:0a:21:54:d9:c6:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:A6:9D:23:C2:27:72:5D:C9:CC:9D:9C:19:6F:AE:A7:31:CC:8B
X509v3 Authority Key Identifier:
keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7a:cd:ab:0c:7c:4f:56:5d:c4:44:cb:9a:04:c7:6d:ae:b0:
dd:be:17:d0:88:7d:66:21:cb:d5:3a:2f:7d:0c:ed:e3:28:9f:
92:f7:0a:07:2f:5a:9d:ac:02:b1:8e:23:52:04:4f:b0:05:ef:
93:5a:bd:17:aa:36:b1:ff:07:4d:d9:68:88:0b:8b:bc:ca:d4:
1f:3f:2d:f5:b6:d5:82:a4:16:50:ba:9b:ee:8c:61:48:1d:40:
ff:be:2f:03:d0:f5:54:8a:4e:af:54:5b:d4:ef:1d:ac:f5:a2:
2b:51:89:c0:2b:3d:a1:5d:b3:01:54:f5:76:e6:03:18:ca:9d:
d9:3f:ce:41:a0:1e:ee:e2:40:a8:3f:d9:5d:04:35:4c:98:68:
59:cf:4b:0c:27:5c:a9:7f:d1:29:ff:3b:5a:6c:30:78:01:1a:
8b:3c:19:fc:1e:3d:b8:60:62:68:69:00:0b:1c:d7:cd:a9:01:
79:17:d5:1a:31:bd:2f:1a:b7:1a:cc:c3:13:74:84:87:e8:07:
96:f7:75:f7:ba:1b:7f:e8:10:b7:f9:ab:5b:c8:44:21:b7:b1:
f1:04:e1:37:1c:11:68:df:25:65:73:51:19:16:18:7d:ec:7d:
75:66:11:f3:6f:d6:72:c6:dd:7e:47:93:28:b5:08:e9:d0:c2:
82:ca:7e:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk0NkYxMTAvBgNVBAUTKDQ3RUYwODUzQTJEN0RFQTI0OUI3QzNGQUY3ODE2OUM4
RjhEQkM3RTkwHhcNMjYwODE5MDc1NzAwWhcNMjYwODI2MDc1NzAwWjAYMRYwFAYD
VQQDEw02YTg1NjFjYy1iYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXbifV0LQeWyCvaoBaWQpALZHV1caeTUYV4oL2LVRtX+Vb1EMqtJTu8ZdaIL
T63T66/5pgsEE5O0oYOEc1PQbDRzb9OVWbucz/g6oaOQ5XRLH2KPpVs6Hnp2j7WE
pfOgVtMjUoYaF6MMfo1WcgTuGb5f34qaMKNyIVmO9WwI5mp/O2+8HoMGC6p9urpU
UsR5nsSbKEMJ9Vw9rj7YRUSZFfT9Eimxc8kZZEy9P6iA9nAnOG4Tc500yOnDw2uO
RFryceQH/8NVUaBrZ441/gR7fyx62o8X2i9cceTIu5Sbg4sJ3TlJWBo07Ab92pB3
6bFk8q0JWEy5sHvdCiFU2cbdywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJ+pp0j
widyXcnMnZwZb66nMcyLMB8GA1UdIwQYMBaAFEfvCFOi196iSbfD+veBacj428fp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTQ2Ri8yNUQ1OThERUFC
MjcxMUYwOENGNzlFMTNDNEY5QUUwMi9SLThJVTZMWDNxSkp0OFA2OTRGcHlQamJ4
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ItOElVNkxYM3FKSnQ4UDY5NEZweVBqYngtay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTQ2Ri8yNUQ1OThERUFCMjcxMUYwOENGNzlFMTNDNEY5QUUwMi9SLThJVTZMWDNx
Skp0OFA2OTRGcHlQamJ4LWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjHrNqwx8T1ZdxETLmgTHba6w3b4X0Ih9ZiHL1TovfQzt4yifkvcKBy9anawC
sY4jUgRPsAXvk1q9F6o2sf8HTdloiAuLvMrUHz8t9bbVgqQWULqb7oxhSB1A/74v
A9D1VIpOr1Rb1O8drPWiK1GJwCs9oV2zAVT1duYDGMqd2T/OQaAe7uJAqD/ZXQQ1
TJhoWc9LDCdcqX/RKf87WmwweAEaizwZ/B49uGBiaGkACxzXzakBeRfVGjG9Lxq3
GszDE3SEh+gHlvd197obf+gQt/mrW8hEIbex8QThNxwRaN8lZXNRGRYYfex9dWYR
82/WcsbdfkeTKLUI6dDCgsp+ww==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:53 2026 by rpki-client