
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier: XU/DBArfBDl+gDNcUU2IwxJihQgZu4Be4538Yz260Ys=
Subject key identifier: 3B:3C:68:D2:27:93:17:84:AC:32:AF:C0:DB:2C:F8:39:5F:AF:DD:C2
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 034C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number: 0323
Signing time: Sat 25 Jul 2026 02:11:22 +0000
Manifest this update: Sat 25 Jul 2026 02:11:21 +0000
Manifest next update: Sat 01 Aug 2026 02:11:21 +0000
Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: +TC7+VBv7IzfmKyhSdMtPtTUMqE/8YUpiYtQGF12J1Y=)
2: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=)
3: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=)
4: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=)
5: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=)
6: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=)
7: C18149885E2611F1A1DDF13A3B7AAC22.roa (hash: xmI2UUP5i6tfROcqiQ2bcD37TknmyJnWrsAGSocm6p0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 02:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Jul 25 02:11:21 2026 GMT
Not After : Aug 1 02:11:21 2026 GMT
Subject: CN=6a641b4a-3cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:f2:55:31:9c:dd:0a:f1:bc:ca:c4:44:1f:
48:d2:47:40:50:cd:3b:8c:ac:da:be:ae:b0:1a:a4:
0c:7b:33:3b:08:f0:ef:c7:df:a2:bf:95:11:82:fa:
cb:d9:65:a4:ea:b0:54:a8:06:86:98:30:c8:5c:77:
85:3f:4a:24:f4:9a:72:8a:e1:c6:37:c9:f7:14:41:
fc:ef:ce:9a:12:f8:6a:ea:81:84:ae:d4:61:60:3d:
b3:7a:80:7f:52:72:4c:7b:4f:8e:1d:e2:8f:fa:b8:
c0:ce:10:83:ac:f5:8b:5b:74:a2:0f:68:fb:a5:5c:
99:11:79:7c:99:05:40:4f:f7:0d:d7:e0:3d:de:41:
66:9f:66:f7:e1:83:64:85:44:78:a0:39:16:17:f1:
b0:2c:12:4c:97:ca:7d:f3:40:b3:1e:a1:60:39:b5:
c5:ae:8f:34:65:25:a1:29:55:5a:58:b6:fb:f2:e9:
1b:4b:21:b6:75:26:31:e2:51:cf:b2:cf:a5:9d:19:
e4:8d:35:ea:be:99:79:47:f1:1a:02:2a:53:dd:19:
82:89:ba:2b:1d:1e:1b:e1:27:8b:ab:8c:0a:80:93:
9b:46:4c:cf:3f:63:2a:ed:83:51:39:0d:4e:c4:34:
bf:12:70:38:44:f4:0d:3e:a2:a4:52:0e:ef:fa:53:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:68:D2:27:93:17:84:AC:32:AF:C0:DB:2C:F8:39:5F:AF:DD:C2
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:4a:3f:22:f2:aa:1d:2d:ef:a1:5a:fb:7a:31:dc:d3:84:c0:
38:d0:68:af:32:c7:d8:ed:34:e4:46:fb:77:80:ac:c6:c5:ff:
2f:27:e1:91:8f:eb:d0:c5:0f:09:4a:2d:96:b1:88:34:2c:f3:
7f:15:df:46:51:ea:ee:49:a7:fa:7f:95:d0:89:e8:43:5f:38:
93:07:91:e5:e0:44:13:b1:eb:3a:5e:a2:d5:03:9f:92:9d:07:
79:ee:0c:ae:53:f1:f7:12:05:41:44:6f:63:53:ce:92:6c:d1:
fe:f9:c0:5b:4e:db:9b:8d:03:48:ec:53:8b:bb:fa:a6:6e:b1:
cb:f4:79:d7:ab:64:f2:f0:96:3d:c0:8a:5b:75:3e:35:cf:53:
89:e7:db:0c:cb:67:05:b3:3a:cb:86:91:51:b0:03:7a:1f:4b:
b3:22:f4:1b:a2:02:dc:74:67:d6:a0:fe:8d:51:94:ed:92:5b:
d9:c8:a0:f3:ca:18:6f:8d:b0:2d:37:c7:3b:5b:df:61:8f:15:
e7:01:91:77:63:48:ad:30:4e:01:75:e1:70:b4:fb:a6:f2:75:
fd:bb:5a:58:cc:fa:7b:7c:28:7a:f0:23:b4:12:f6:95:fe:dd:
ec:82:00:40:89:c8:87:c7:cc:28:e1:46:f0:38:e1:cd:aa:19:
f9:ed:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 18:59:58 2026 by rpki-client