
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier: biy/cg4jlVHPsHXm19ZFHyH7WlLH9P8GZ+Wg6wcGSq8=
Subject key identifier: 97:2C:47:4D:14:6E:C4:83:8F:EE:E9:E5:FD:9C:2A:63:CC:98:AD:18
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number: 0717
Signing time: Tue 08 Sep 2026 22:10:30 +0000
Manifest this update: Tue 08 Sep 2026 22:10:29 +0000
Manifest next update: Tue 15 Sep 2026 22:10:29 +0000
Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: aC5eABzmPxz0cO49PpxRB05WbTI4k4ohUE1FlFxSCNg=)
2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=)
3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=)
4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 22:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Sep 8 22:10:29 2026 GMT
Not After : Sep 15 22:10:29 2026 GMT
Subject: CN=6aa087d6-e646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:53:05:cb:f1:ed:c4:1a:0f:a6:d5:ed:66:
39:24:b9:fa:e8:d0:62:ea:4e:c1:d3:71:a8:67:58:
01:a9:fd:6e:79:bd:85:f9:56:89:1d:df:40:db:87:
0e:f8:61:18:f4:f3:e4:a4:f5:80:e3:f1:fd:9e:11:
58:54:be:40:c8:12:08:94:95:9b:a3:f3:fb:06:45:
b3:a2:8b:24:8b:69:63:35:6f:69:89:b2:7b:52:39:
c6:00:c1:80:cf:2e:fe:38:7b:b6:58:4e:cf:43:1f:
7d:f3:bb:b4:ca:e0:42:fa:a7:d2:cc:1f:ec:3b:35:
f5:86:82:3e:74:50:f8:ac:83:aa:e1:d4:d0:82:f6:
80:07:eb:fb:49:2b:b2:7e:a4:60:2e:fc:17:29:fc:
4a:e4:4d:a5:77:f9:aa:de:a8:c1:44:df:7b:69:df:
37:f0:01:1a:47:68:25:2c:4a:1a:62:06:4b:8d:db:
08:9b:b2:b5:64:d0:5f:cb:b9:26:97:94:e0:25:be:
3d:5e:f0:37:1b:22:a0:03:f2:6f:7b:6d:21:a0:b5:
f9:e1:ec:f8:51:c0:f7:e3:6d:9e:ab:7e:bc:9b:57:
ea:e9:72:4c:1b:bf:ba:37:af:94:e4:b0:d3:86:e8:
ec:78:88:90:d0:75:da:b1:de:b2:fa:52:20:8f:20:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:47:4D:14:6E:C4:83:8F:EE:E9:E5:FD:9C:2A:63:CC:98:AD:18
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:d6:5b:03:61:39:eb:5b:d3:db:15:5b:2f:a2:62:49:09:26:
b6:32:5d:5c:f1:68:a2:1c:8b:28:c0:74:d3:e2:05:78:2f:5b:
0f:d7:aa:ac:0f:d0:f8:63:f6:63:65:29:54:6d:82:3e:be:c9:
a0:f2:69:8f:1e:30:74:63:6a:12:88:c4:54:88:23:1c:7f:27:
bc:bb:e8:a0:45:ed:cf:29:ae:ed:af:f1:9e:36:74:cd:c4:9a:
99:7d:b6:51:4e:92:f2:6d:45:42:8c:df:be:58:02:23:6a:86:
c1:00:f8:63:51:cf:d3:df:18:7a:17:0c:86:08:a2:bf:85:90:
25:a2:4f:86:1c:b1:fc:5f:87:88:3e:c5:4e:fd:a8:8e:27:68:
7a:e3:02:23:cc:18:74:65:1f:bd:7b:e5:6a:a5:93:b4:4e:8e:
cc:48:82:de:c2:34:d9:72:d2:57:7a:f1:9a:25:7d:f1:8b:05:
74:36:e7:af:95:03:ac:9e:ae:dc:35:3b:e5:be:f9:63:16:d7:
f1:cb:8a:cb:92:2e:92:99:0f:c9:51:4e:6b:a5:6e:b6:c6:8d:
fa:80:bd:3d:00:0d:a7:55:22:e7:bd:dd:ec:35:6b:c8:92:5c:
21:09:d0:a4:42:60:51:c0:9f:c6:da:5b:14:a0:2e:f0:b9:73:
5b:1d:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:04:54 2026 by rpki-client