
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier: quidqXI1/NWpnYTqO7wX3IO1QWO+zRXjSa86mDnyldA=
Subject key identifier: 6B:7D:50:7B:65:18:3D:3D:71:6A:F5:BE:51:22:A8:EE:37:70:7A:B9
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 0364
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number: 033B
Signing time: Wed 09 Sep 2026 01:05:02 +0000
Manifest this update: Wed 09 Sep 2026 01:05:02 +0000
Manifest next update: Wed 16 Sep 2026 01:05:02 +0000
Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: 0bZWWHZOChqE2J/QmR16R9ApSwdQLhl+sGntuB9gNkk=)
2: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=)
3: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=)
4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=)
5: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=)
6: C18149885E2611F1A1DDF13A3B7AAC22.roa (hash: xmI2UUP5i6tfROcqiQ2bcD37TknmyJnWrsAGSocm6p0=)
7: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 01:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868 (0x364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Sep 9 01:05:02 2026 GMT
Not After : Sep 16 01:05:02 2026 GMT
Subject: CN=6aa0b0be-c6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:28:74:76:ae:d2:7a:d5:b2:32:d1:c9:88:
6d:11:58:18:9f:85:88:b1:fc:f9:ed:6c:af:71:16:
7b:f0:48:97:da:cb:ca:d6:8f:f9:a6:d0:e8:15:5b:
9e:a3:ee:3f:b2:28:ab:b3:91:3d:6b:5d:cc:a7:e5:
10:33:43:ae:34:59:a0:6c:2d:b4:17:39:b7:41:1a:
08:f2:80:90:53:28:e4:3d:69:1c:fd:ae:a6:4e:57:
44:7c:9b:40:d6:6d:f7:af:b2:a8:66:48:c4:38:43:
02:f4:5e:20:08:3b:2b:9b:ea:d0:f8:41:8d:73:93:
e8:0e:27:77:a5:14:6a:39:33:f1:04:b2:4c:95:3c:
92:93:3c:28:cc:e2:4f:db:ea:23:68:13:34:6c:af:
c1:db:83:fd:c8:c4:f0:59:d5:c8:92:fa:5d:8a:96:
35:c2:e6:1f:a8:df:43:23:f0:07:8d:7b:4b:12:8e:
54:90:bf:70:96:97:f8:6b:77:a0:95:6d:ca:b9:57:
2a:5d:73:91:6f:3b:0c:da:6f:45:4e:b2:f6:3e:41:
8a:20:8d:ea:0e:db:b9:46:7a:46:bb:6f:6b:a2:f8:
6f:fc:00:f0:04:c3:5c:24:b1:c0:47:83:6d:60:e3:
b8:5e:87:06:97:7e:2e:a8:00:29:4a:24:cf:2e:c1:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:50:7B:65:18:3D:3D:71:6A:F5:BE:51:22:A8:EE:37:70:7A:B9
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d3:8e:75:e6:1a:47:9e:a1:b6:33:87:1a:45:5b:d8:7c:30:
2d:61:8b:b3:93:50:ac:53:d0:c1:34:4d:cb:f7:73:32:d5:b2:
cf:9d:2d:cb:14:8c:b5:64:87:e2:85:e4:3f:7e:18:89:1c:c8:
02:25:23:76:38:b4:92:46:d3:30:86:07:f8:36:59:3c:da:b9:
85:a1:a5:24:05:2d:65:b1:fe:53:43:c9:c2:32:47:ee:dc:1c:
2e:cc:7c:a9:7b:16:1c:3c:d3:d1:27:3a:f7:35:fe:f1:44:03:
90:06:ff:2d:ce:44:bc:b0:de:42:ce:27:b0:fd:80:be:a7:57:
d3:31:58:ba:9a:99:15:d5:83:41:e3:51:94:6e:40:1e:c6:c4:
6a:ec:2c:5a:9d:43:d1:7e:e6:22:b0:1b:6b:0e:08:33:35:38:
3e:68:51:13:08:3b:85:c3:3c:b4:20:d3:7e:d5:e7:fa:c1:20:
b8:e2:01:f1:26:e0:2b:61:26:06:33:5c:12:a6:19:05:d0:f6:
43:56:18:d3:ba:14:9b:86:66:a3:89:c4:e2:e5:98:54:03:78:
06:f2:40:ba:25:d2:16:76:6c:5a:f1:72:03:d1:40:14:27:15:
01:d2:9b:3f:57:98:9d:2c:d6:2b:33:14:34:98:8a:49:12:d4:
7f:33:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 00:11:41 2026 by rpki-client