
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: h66pIkG5dZeYI/LhQLEovjJlsbZEL7yBv83RBDNSUB0=
Subject key identifier: 7B:70:F0:71:6B:89:45:A3:EF:6D:08:1F:49:45:20:C6:1A:2C:87:D8
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 01E8
Signing time: Wed 29 Apr 2026 03:56:02 +0000
Manifest this update: Wed 29 Apr 2026 03:56:01 +0000
Manifest next update: Wed 06 May 2026 03:56:01 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: al355gWTe84MzGE6TgP8VfPGqRc9LHaS5wnGm1GJYv0=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: GuG6Y8Eu3CcfCqJ6rXqMTfXfwCt0ckJ+Jr8hqV3ee88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 03:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Apr 29 03:56:01 2026 GMT
Not After : May 6 03:56:01 2026 GMT
Subject: CN=69f18151-537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:ef:54:43:82:19:cd:12:85:d3:ab:39:15:
36:e2:ea:ce:2f:66:2d:83:ce:a3:26:f5:ae:9e:62:
d9:26:95:09:32:36:6b:9f:2a:25:21:be:19:75:79:
49:aa:58:14:c7:3a:9a:7b:b3:a2:b3:4a:50:f3:ca:
c8:b9:eb:81:9c:03:b5:24:db:f5:fa:24:ed:b6:67:
28:dc:aa:36:f2:8d:0d:bc:67:05:0f:50:b0:85:0a:
f8:67:16:da:5a:0a:30:cd:18:3e:ea:01:84:f6:15:
59:a7:b3:75:4c:7c:42:1e:f5:2d:9e:b9:b2:e6:a9:
2d:de:7e:b1:1e:d0:f9:1e:20:8d:7f:58:c9:97:d7:
6e:51:3d:26:94:64:6f:38:24:b6:64:1e:6f:2c:86:
21:73:82:d4:08:4e:5d:65:50:aa:a4:dc:44:23:74:
41:06:37:7e:d5:21:ac:c1:18:ac:75:60:ba:65:3e:
0d:fd:ab:86:ae:7b:9e:d5:98:e6:2b:61:1a:3a:8b:
15:73:57:03:9c:2b:ce:a4:e5:1b:80:c9:57:cd:43:
5f:d5:aa:a9:a1:66:c8:52:2e:c3:e4:c2:28:92:1e:
35:b2:32:3b:e4:93:24:56:ce:b5:7a:5e:08:b9:ec:
34:f1:ea:04:d3:35:48:97:dd:9e:eb:5e:e4:e9:83:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:F0:71:6B:89:45:A3:EF:6D:08:1F:49:45:20:C6:1A:2C:87:D8
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:66:cc:28:fd:b0:1b:2f:08:7d:b5:7c:e7:03:ea:f6:d8:ef:
ae:1e:d5:2d:80:54:5c:06:59:9d:cc:9b:ac:68:73:a2:e5:84:
ec:98:5b:21:c8:be:8a:63:6a:d5:d9:62:f2:43:c3:45:97:b3:
50:c0:4c:e4:b2:4e:eb:1d:7c:8d:0a:2c:d4:cd:0f:a4:3a:50:
e7:6c:1f:1c:53:c2:a2:c3:9b:6a:9a:ac:01:7b:fa:94:91:ac:
c4:50:b2:8e:a4:df:47:53:00:33:3a:ed:b5:5e:8f:38:85:ac:
b4:9a:e0:75:bf:ac:a0:6b:9b:17:99:9f:bd:df:da:cc:4a:fe:
47:c8:23:42:38:48:ea:66:87:5f:57:f9:a0:9a:c1:94:35:9d:
cd:fe:b9:9d:6d:44:e2:34:ee:cf:4e:c3:35:3a:9e:a4:90:af:
49:f6:2c:1c:1b:e9:51:1c:8b:8e:91:51:27:f3:ea:92:96:3d:
50:d4:2f:d7:d9:df:d0:dc:c1:75:f9:33:8a:64:f5:9b:4f:e7:
bb:83:55:78:39:a8:ad:bb:d1:e6:7a:94:d0:a7:6f:7b:c7:03:
ee:00:30:47:e7:52:ae:4a:5e:c6:a8:7e:13:fd:09:1e:0e:6e:
18:fb:ff:6f:5d:1a:4b:9d:e8:80:0a:d9:04:4a:47:1f:71:62:
89:a4:cd:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3
MzBEOTc1OUMwHhcNMjYwNDI5MDM1NjAxWhcNMjYwNTA2MDM1NjAxWjAYMRYwFAYD
VQQDEw02OWYxODE1MS01MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnzvVEOCGc0ShdOrORU24urOL2Ytg86jJvWunmLZJpUJMjZrnyolIb4ZdXlJ
qlgUxzqae7Ois0pQ88rIueuBnAO1JNv1+iTttmco3Ko28o0NvGcFD1CwhQr4Zxba
WgowzRg+6gGE9hVZp7N1THxCHvUtnrmy5qkt3n6xHtD5HiCNf1jJl9duUT0mlGRv
OCS2ZB5vLIYhc4LUCE5dZVCqpNxEI3RBBjd+1SGswRisdWC6ZT4N/auGrnue1Zjm
K2EaOosVc1cDnCvOpOUbgMlXzUNf1aqpoWbIUi7D5MIokh41sjI75JMkVs61el4I
uew08eoE0zVIl92e617k6YOSWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtw8HFr
iUWj720IH0lFIMYaLIfYMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD
RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj
OHp0MlVjYTVrbXB6RFpkWncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA5mbMKP2wGy8IfbV85wPq9tjvrh7VLYBUXAZZncybrGhzouWE7JhbIci+imNq
1dli8kPDRZezUMBM5LJO6x18jQos1M0PpDpQ52wfHFPCosObapqsAXv6lJGsxFCy
jqTfR1MAMzrttV6POIWstJrgdb+soGubF5mfvd/azEr+R8gjQjhI6maHX1f5oJrB
lDWdzf65nW1E4jTuz07DNTqepJCvSfYsHBvpURyLjpFRJ/PqkpY9UNQv19nf0NzB
dfkzimT1m0/nu4NVeDmorbvR5nqU0Kdve8cD7gAwR+dSrkpexqh+E/0JHg5uGPv/
b10aS53ogArZBEpHH3FiiaTNOw==
-----END CERTIFICATE-----
Generated at Wed Apr 29 16:58:40 2026 by rpki-client