
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: d3CZpQU17cJbz3EN73i0653UIlU/C/4QCYg2NdXqzCo=
Subject key identifier: CF:11:20:00:63:97:8F:AE:13:9B:EC:B0:0C:05:7D:8F:0C:A1:69:BE
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 03DD
Signing time: Sun 05 Apr 2026 00:19:10 +0000
Manifest this update: Sun 05 Apr 2026 00:19:10 +0000
Manifest next update: Sun 12 Apr 2026 00:19:10 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: yL6yXHlAG7LqpHM8KsykHdjg3KrJwgnT/CKtem+154c=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: v0A241ZziUX3uaVSLzG3z9mBGcQeWrJ5+pSpRLlwUy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Apr 5 00:19:10 2026 GMT
Not After : Apr 12 00:19:10 2026 GMT
Subject: CN=69d1aa7e-a4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:d1:e1:67:18:5a:72:80:fc:1c:9f:a6:ba:
b6:49:f5:98:22:5f:54:6f:e1:9f:95:2d:f8:cd:4b:
53:6a:48:f8:c0:3b:1a:92:ac:a2:3d:30:1c:87:2f:
6d:8f:d2:d4:33:fc:b7:5d:29:c1:73:64:80:15:05:
18:8b:6a:e6:0e:8b:cb:78:17:98:59:90:9b:34:46:
9f:4e:19:af:f9:7b:1c:af:81:92:5a:21:18:71:4f:
bf:ad:2d:78:a1:59:23:39:1d:9b:55:e7:ca:d2:49:
e3:4e:ef:60:c7:5b:ed:76:e7:7e:cc:a7:5d:4f:58:
33:b8:96:17:79:02:6e:f3:54:88:0f:69:cf:6e:ac:
51:a4:ff:52:1f:cd:d0:23:24:e1:4b:7b:41:a1:06:
1b:3d:0b:70:e9:53:16:67:00:1c:02:3f:58:8b:f7:
9e:82:33:36:df:35:61:9e:40:37:73:0c:86:61:95:
b1:3f:3a:ef:dd:29:c5:2f:8a:54:a8:6a:63:30:20:
72:6e:18:3b:16:9f:86:11:70:9c:a0:09:a6:72:b9:
6b:b2:12:58:ef:62:91:60:09:1e:9f:a9:c1:e8:c8:
15:72:3a:55:9e:1d:5e:30:17:9e:4b:c5:e4:28:a9:
52:69:2d:85:78:1e:28:06:17:e5:fc:a3:a0:ed:9b:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:20:00:63:97:8F:AE:13:9B:EC:B0:0C:05:7D:8F:0C:A1:69:BE
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:be:f2:38:f4:49:ae:1b:8e:ab:2f:26:a4:34:31:82:31:ef:
e8:49:cf:b0:f6:ea:40:b7:8e:83:40:1c:88:76:d5:42:7e:b7:
f9:64:0e:e2:94:ff:56:d2:81:a8:68:9c:f4:72:e0:e4:57:60:
ed:fc:b1:5e:2a:36:46:06:49:68:2f:2b:c2:a3:ce:a2:0e:dc:
37:0d:9b:ac:31:c5:d1:ca:ed:27:6a:30:ea:8d:2e:26:ab:b2:
84:1c:7c:94:dd:e8:a8:77:a4:4f:09:00:f2:ad:35:0b:6f:42:
c3:c4:59:53:ef:99:65:d0:fd:bf:49:f6:dd:b7:45:e6:ac:80:
28:0f:b7:b6:03:54:d7:26:5e:2b:da:17:7f:0f:8c:c8:24:6c:
4e:4d:0f:a6:3d:c8:72:b1:18:79:49:2a:8d:73:f8:99:c3:11:
0c:65:82:4a:32:c4:16:92:5c:69:47:20:e2:86:f1:38:0b:de:
4b:9a:d7:6c:49:8f:ae:43:1c:e8:a0:a3:6c:20:b1:70:8c:3d:
bb:a3:80:bd:5a:6e:3a:92:e5:5f:45:f4:5b:00:3a:9f:87:2d:
9d:ee:fc:2a:b7:50:9e:3b:bc:d2:34:75:9c:8c:fc:39:5c:58:
48:05:14:d3:12:1a:08:c5:f5:a9:d7:07:b1:10:52:7c:aa:24:
55:02:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:47 2026 by rpki-client