
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: 7hIWh8NVNLxl9eOKbKkdquN73p4wPE34VyjQAJeBxzo=
Subject key identifier: 07:DB:04:65:68:91:C4:87:70:A9:45:FF:37:0E:EE:D9:73:6A:E0:66
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 03FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 03F4
Signing time: Thu 21 May 2026 00:33:54 +0000
Manifest this update: Thu 21 May 2026 00:33:54 +0000
Manifest next update: Thu 28 May 2026 00:33:54 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: BVgnEEV8rjp1QhdZbKMJ7HAK0Iw1taO9/kXXFaNaTec=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: v0A241ZziUX3uaVSLzG3z9mBGcQeWrJ5+pSpRLlwUy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: May 21 00:33:54 2026 GMT
Not After : May 28 00:33:54 2026 GMT
Subject: CN=6a0e52f2-e894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:6b:d3:2e:ca:19:5d:8b:2b:76:ef:68:ec:
59:35:7e:c1:e5:2a:16:6a:a7:f3:09:8d:3b:24:9f:
44:e7:0b:a2:f2:7f:8c:7a:24:c4:81:18:3e:ee:49:
b1:81:7d:0c:c5:f9:3a:81:1e:21:35:be:5c:7e:74:
46:5a:54:93:ff:05:ae:23:c3:d0:ac:98:d5:78:ff:
15:c6:10:16:9d:5e:6b:28:2f:6b:ac:20:5e:d0:bb:
95:2e:ea:3d:d6:74:0d:84:a2:83:09:00:f1:52:cd:
5e:6b:a0:d9:35:0e:c5:54:3f:5b:91:40:09:5e:94:
ad:1b:0a:14:aa:64:cf:95:4e:77:94:df:52:9f:9a:
77:2a:d3:db:a5:07:a8:02:f4:cc:d4:fe:e9:4c:ef:
1f:6e:1c:b8:03:73:2f:45:34:cf:a8:b2:c2:b5:78:
7f:45:db:60:0d:c2:2f:82:45:01:50:74:66:f7:f0:
f4:73:d3:be:95:5e:93:7c:08:e5:ad:7b:91:fb:c9:
4b:d5:0b:a2:46:de:08:69:31:e4:a2:73:ac:ce:c9:
7c:56:10:65:1e:60:f0:0a:94:50:50:63:ae:90:1a:
39:02:68:0e:9c:14:a0:dd:36:18:ef:83:df:24:4f:
29:4e:64:84:25:55:3e:f7:bb:70:3c:8c:53:bb:4f:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:04:65:68:91:C4:87:70:A9:45:FF:37:0E:EE:D9:73:6A:E0:66
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:37:84:8f:7e:39:b2:54:47:d2:55:57:0e:e7:de:f8:0c:7f:
28:aa:4f:e9:db:16:87:06:ee:7c:67:9e:23:c8:55:fa:a5:6b:
32:38:46:94:68:79:77:75:07:9a:88:06:8a:76:0a:22:cd:6b:
d0:d3:35:5c:19:72:d6:85:d2:e6:21:dc:7e:12:52:00:ec:88:
f0:a2:99:86:59:b1:71:82:0a:40:3c:e5:40:d3:f4:19:0a:44:
84:22:54:f7:af:ca:ea:2a:8b:4c:bb:e4:e0:8f:1f:cb:3b:53:
eb:ab:18:15:7a:b4:e1:13:6a:7d:0a:e5:8f:3f:6c:a7:51:16:
29:61:ba:a7:aa:78:a0:e2:40:1b:1d:d2:ca:9b:51:a7:eb:cb:
5f:62:b7:f9:17:42:83:9a:16:15:86:33:0e:58:d5:ab:f0:30:
44:77:65:a2:d5:60:43:e0:f3:1c:0c:21:06:e5:9f:d0:88:45:
84:ca:c5:eb:d3:64:51:da:b0:f8:43:a5:5e:ee:66:d4:b3:b9:
32:12:17:9b:33:aa:18:8f:56:e9:2e:88:97:47:92:f6:cf:bd:
11:08:45:47:1a:e1:97:78:3c:a1:6a:c5:cc:f3:35:3e:20:59:
51:c0:dd:b5:c4:dd:70:db:5f:d2:d2:a7:9e:77:81:01:a5:50:
e3:58:a4:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB
MkYxRTlBOTkwHhcNMjYwNTIxMDAzMzU0WhcNMjYwNTI4MDAzMzU0WjAYMRYwFAYD
VQQDEw02YTBlNTJmMi1lODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LNr0y7KGV2LK3bvaOxZNX7B5SoWaqfzCY07JJ9E5wui8n+MeiTEgRg+7kmx
gX0Mxfk6gR4hNb5cfnRGWlST/wWuI8PQrJjVeP8VxhAWnV5rKC9rrCBe0LuVLuo9
1nQNhKKDCQDxUs1ea6DZNQ7FVD9bkUAJXpStGwoUqmTPlU53lN9Sn5p3KtPbpQeo
AvTM1P7pTO8fbhy4A3MvRTTPqLLCtXh/RdtgDcIvgkUBUHRm9/D0c9O+lV6TfAjl
rXuR+8lL1QuiRt4IaTHkonOszsl8VhBlHmDwCpRQUGOukBo5AmgOnBSg3TYY74Pf
JE8pTmSEJVU+97twPIxTu09ynQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfbBGVo
kcSHcKlF/zcO7tlzauBmMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw
OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003
SmhFYlNpaDBMM3VpOGVtcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABDeEj345slRH0lVXDufe+Ax/KKpP6dsWhwbufGeeI8hV+qVrMjhGlGh5d3UH
mogGinYKIs1r0NM1XBly1oXS5iHcfhJSAOyI8KKZhlmxcYIKQDzlQNP0GQpEhCJU
96/K6iqLTLvk4I8fyztT66sYFXq04RNqfQrljz9sp1EWKWG6p6p4oOJAGx3SyptR
p+vLX2K3+RdCg5oWFYYzDljVq/AwRHdlotVgQ+DzHAwhBuWf0IhFhMrF69NkUdqw
+EOlXu5m1LO5MhIXmzOqGI9W6S6Il0eS9s+9EQhFRxrhl3g8oWrFzPM1PiBZUcDd
tcTdcNtf0tKnnneBAaVQ41ikfA==
-----END CERTIFICATE-----
Generated at Thu May 21 13:22:25 2026 by rpki-client