
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: ToNHH7GAZsNh8m+aUZ/Fz8uT1lmExzsOtR4xYqlm5ls=
Subject key identifier: 0D:3C:21:22:C9:AD:0F:A9:B5:09:0B:4D:41:81:15:7F:A7:50:BA:2F
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 042F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 0428
Signing time: Thu 27 Aug 2026 00:04:53 +0000
Manifest this update: Thu 27 Aug 2026 00:04:53 +0000
Manifest next update: Thu 03 Sep 2026 00:04:53 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: b2TNOjyYlZXB50kK3u/Pv3sMwb+sD+5kwEdhjZHgvyE=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: GmrvF9q2dTq3b8GyefG/oexNHNjvwnXO2pwjnxyLh6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 23:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Aug 27 00:04:53 2026 GMT
Not After : Sep 3 00:04:53 2026 GMT
Subject: CN=6a8f7f25-52af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:48:01:58:82:a6:2b:db:fc:9c:c5:db:10:13:
bd:59:9b:c3:6e:8a:52:d5:04:df:4e:ea:b1:c2:cf:
56:c7:9c:eb:d1:b1:bf:8a:56:5b:a8:d5:65:53:7d:
af:d2:23:10:97:d7:2a:69:70:9d:1e:5b:2f:5b:56:
20:53:02:ec:24:de:d5:40:0e:20:66:46:85:a9:b5:
5e:b6:d8:a6:11:01:f7:41:ab:09:45:68:3c:66:25:
98:81:2c:a2:92:02:4b:f3:25:73:a8:b4:58:67:13:
82:f3:0a:ce:57:6a:48:3b:b2:9a:c4:7c:74:b1:07:
1a:a0:c8:65:e5:65:e7:f6:28:99:34:68:32:b5:67:
e5:c2:a9:ac:c7:a6:1b:0b:27:a3:65:c8:95:a4:cb:
0f:f9:2d:7d:1d:8c:ea:a6:3e:60:64:12:5d:a8:62:
ff:27:5e:0d:73:37:0e:9c:eb:7e:d2:9c:f7:0d:55:
ec:5e:2e:00:bd:dc:28:63:39:7c:af:1c:77:54:e4:
69:e9:55:4a:19:07:1a:f7:ec:bf:19:35:5e:f4:f1:
6e:0e:e8:90:2e:01:f8:fc:32:83:48:53:e5:f1:c8:
8e:1b:00:01:88:70:5a:f2:a4:d4:62:98:87:e5:d5:
47:04:b4:2b:1e:44:93:90:0c:c1:fb:72:e5:9a:2b:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:21:22:C9:AD:0F:A9:B5:09:0B:4D:41:81:15:7F:A7:50:BA:2F
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:78:dc:4d:ce:95:5b:dc:19:3a:ec:aa:95:35:44:18:6f:39:
fb:e3:b4:ec:27:41:1e:39:bd:c0:ae:eb:2b:d7:06:f9:bb:79:
a6:52:96:43:4e:ca:59:63:5e:0b:09:ac:85:62:c9:3a:58:ba:
5d:e6:e1:2b:2b:fd:22:4e:bf:d0:5e:2b:69:2e:33:9b:07:08:
a6:a6:03:a3:a3:3f:00:7e:d9:5f:77:42:4b:41:ea:c4:db:c7:
ca:59:de:af:11:e6:93:04:f9:ac:e7:80:28:22:24:db:64:37:
6e:34:4c:fe:e9:3a:64:2d:be:55:c0:8c:b2:a3:8f:54:cb:e0:
58:eb:d1:09:8b:73:62:e2:90:7e:d5:d0:39:6d:7f:90:b4:8d:
eb:9e:a9:87:98:d9:87:c6:57:6c:73:2c:e6:fc:ca:24:b6:2b:
5d:88:2c:6f:ae:5e:82:1b:7d:3a:51:b1:67:03:ec:fe:04:9e:
84:7f:af:db:62:84:25:71:56:9f:31:6e:d9:f0:45:e0:55:57:
b2:1f:b4:43:09:6a:ec:ed:cf:2f:2b:bb:cc:80:2d:a4:19:37:
8e:cb:77:e0:21:c4:81:d2:20:58:61:10:24:45:d8:a1:b7:5f:
95:2b:10:de:80:5a:04:a0:88:90:0b:d9:b4:64:3f:df:49:b3:
7a:31:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:58:58 2026 by rpki-client