
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier: iXVsjIYUFhe24ReogGMolm1lTNsymi41PXVscw+zZYM=
Subject key identifier: FF:CC:3F:02:24:F8:D2:FA:D5:51:CF:E5:10:06:D6:8F:57:FB:A7:55
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 0336
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number: 030D
Signing time: Thu 11 Jun 2026 03:24:01 +0000
Manifest this update: Thu 11 Jun 2026 03:24:01 +0000
Manifest next update: Thu 18 Jun 2026 03:24:01 +0000
Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: aLT3IYoekaLcEFfXsceqsClnMC5d8GiATy2IslUE/y4=)
2: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=)
3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=)
4: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=)
5: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=)
6: C18149885E2611F1A1DDF13A3B7AAC22.roa (hash: xmI2UUP5i6tfROcqiQ2bcD37TknmyJnWrsAGSocm6p0=)
7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Jun 11 03:24:01 2026 GMT
Not After : Jun 18 03:24:01 2026 GMT
Subject: CN=6a2a2a51-b16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:4d:c4:1d:d6:11:31:31:56:aa:68:4c:c7:
71:87:7c:1f:4f:52:c3:01:3b:16:56:0c:85:af:35:
64:8c:cb:a8:f2:b8:33:25:a2:83:19:e7:f2:a5:88:
52:c8:01:f7:02:f1:46:33:92:c7:e5:62:71:a7:fe:
3d:77:fc:63:18:f2:d1:6e:0e:d2:d4:98:9b:ce:03:
f0:b9:b6:db:1f:cb:49:40:6b:dc:e8:53:71:67:a0:
89:b9:8e:90:b8:ea:d8:96:2e:a4:f7:5c:d3:c2:15:
5a:9e:a1:dd:dd:fd:d2:a4:09:7c:6b:8a:6c:b2:21:
92:41:8a:12:07:e0:9c:ee:48:ab:4c:59:45:7c:1b:
97:8c:c2:d1:b3:de:e2:a9:2d:98:f2:67:12:85:f9:
8c:f8:b7:59:be:d2:f9:b8:ac:a0:1d:f5:30:08:2b:
b2:f6:fe:cb:0d:ee:c5:01:1c:d7:b6:de:62:7c:8e:
b9:d6:52:59:35:ec:80:a7:6b:61:47:13:04:ee:a9:
3b:ce:fa:e6:c9:7f:7b:ad:28:cd:1b:90:5d:a9:ee:
56:49:f4:85:5a:30:1b:3e:9f:3e:bd:bf:0d:1b:7c:
e7:a0:7c:f5:22:e0:2e:1f:b5:74:50:ac:35:b8:bf:
e6:08:10:e3:2e:c8:ef:05:04:dd:43:de:bb:dd:e3:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:3F:02:24:F8:D2:FA:D5:51:CF:E5:10:06:D6:8F:57:FB:A7:55
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:d2:2a:ea:03:54:d3:bb:ae:5f:2d:92:5e:35:06:8e:72:1c:
05:4f:df:01:19:13:35:24:5a:a6:1f:ea:79:2f:4c:40:c0:61:
e0:a7:9c:9b:4f:b6:f0:d2:d4:81:4e:04:78:c3:0d:a2:4e:d5:
d6:7f:2d:af:5a:e4:43:2f:f7:2d:ea:31:90:7a:19:57:e7:d3:
eb:0b:66:b4:da:e4:47:6f:1e:30:98:a2:8a:64:1c:3c:23:94:
9a:04:39:64:da:b1:e9:60:fe:6e:31:f0:15:49:a8:40:22:7c:
4d:fc:e8:60:d6:87:09:67:3f:d9:6b:37:f8:9f:3d:59:1e:e1:
3c:27:04:06:d6:77:6f:cb:8d:81:46:c2:c0:ba:45:fa:17:30:
f1:8f:4c:d4:b3:5e:85:60:03:c8:e5:df:1c:9a:47:69:09:7e:
25:fa:27:f6:bd:22:13:71:b6:09:fb:bd:1a:75:ce:74:5c:5f:
4e:8a:2a:c4:fa:d8:3a:dd:e0:3b:2f:b0:b0:14:8b:fd:27:ab:
86:a4:a2:7d:b0:fc:e3:3d:de:cb:9f:3c:6d:6f:ce:74:d2:00:
c3:27:bb:0b:36:16:17:af:96:d7:40:57:68:6b:2f:3b:29:ee:
41:6a:b8:ec:7f:f3:3b:4c:95:04:df:42:59:37:07:89:33:10:
10:83:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:08:36 2026 by rpki-client