
$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
File: 8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json)
Hash identifier: S1SDk/D1GryjYMXZgDkfPvhtwuE1a3jDmz61MKBYry4=
Subject key identifier: 5B:B8:F0:2E:1F:9E:15:41:10:95:8D:5F:79:CD:8B:7D:28:AD:8C:6B
Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
Certificate issuer: /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Certificate serial: 0A97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
Manifest number: 0A8E
Signing time: Sat 04 Apr 2026 19:21:37 +0000
Manifest this update: Sat 04 Apr 2026 19:21:36 +0000
Manifest next update: Sat 11 Apr 2026 19:21:36 +0000
Files and hashes: 1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: U0/aLpvkWPxno/xPI9SXYzsvaVC8eA0BmQFfFbg5vAE=)
2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: IVJiwLRRcqjPlrSiLGMQoA6TndfnN5sjAzvRclEZSog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Validity
Not Before: Apr 4 19:21:36 2026 GMT
Not After : Apr 11 19:21:36 2026 GMT
Subject: CN=69d164c1-8452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:9a:87:90:c7:9c:c3:9c:11:a7:07:e8:88:
ea:a4:28:2f:a3:48:a6:8c:52:34:dd:fc:98:f6:b0:
46:2b:24:d8:ac:e5:ac:7e:aa:19:71:55:f3:4e:ca:
71:c6:c8:c2:56:bc:4d:da:d5:20:24:bf:b4:0e:cf:
ea:69:be:dc:ae:bc:7e:ee:cd:84:f7:60:80:db:25:
4a:8e:9a:61:84:c1:90:d3:b7:f8:53:85:3e:24:9e:
05:4a:5d:55:d7:eb:da:e5:8a:1a:f7:ed:c6:3f:09:
a4:d5:5e:83:de:00:24:da:ac:7a:17:87:51:09:38:
0c:29:28:7f:94:b6:4c:16:31:16:58:ad:cf:5c:8d:
29:10:a0:b1:6e:50:63:af:8c:38:78:fc:71:d3:03:
74:02:c6:c9:db:6c:e4:fa:af:cd:6d:54:0b:6b:c9:
f6:ad:53:d7:c7:e5:88:07:c3:17:ca:f6:61:82:12:
59:a0:bc:c3:ce:9e:02:62:7e:e4:43:07:11:ce:76:
75:3e:92:3b:01:94:83:b5:02:8c:16:0d:ad:c8:9c:
38:ad:8a:5a:30:d4:13:4e:44:c8:bd:83:87:83:e6:
80:f9:db:ce:99:41:61:fe:76:87:26:4f:9f:14:6e:
f9:8a:93:94:82:d7:95:d9:d9:41:8c:92:e8:cb:8e:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B8:F0:2E:1F:9E:15:41:10:95:8D:5F:79:CD:8B:7D:28:AD:8C:6B
X509v3 Authority Key Identifier:
keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:8f:14:40:bf:ad:57:5a:c8:f4:c5:58:c9:1b:8f:65:bc:63:
b9:a6:7a:b9:cd:42:20:0a:5e:62:c1:42:6d:5c:ec:45:55:1c:
f1:b5:eb:39:af:62:bd:54:ee:a9:f9:be:3a:a4:6d:09:14:44:
db:fa:58:3d:d7:81:26:6d:8f:53:4d:7c:04:b8:83:0d:03:dd:
16:4c:78:d6:91:8e:6a:d3:be:31:2c:0f:ff:bb:f2:17:8c:00:
b5:89:52:2d:01:94:9d:58:4f:41:17:df:80:a6:b7:47:b1:b6:
e3:cf:95:ce:96:7c:53:a9:22:63:37:d4:18:d7:b6:bb:84:f2:
35:4d:45:97:aa:94:de:43:f2:0e:68:d8:56:e3:17:e2:ef:d2:
1c:97:45:7a:f8:41:a7:2c:f6:8b:c1:79:0c:b1:7e:43:03:bf:
39:47:a2:0a:c3:0f:39:45:47:de:4c:fc:6d:75:0b:24:5c:2b:
1e:1e:22:a4:17:db:60:55:24:ac:8c:6a:a6:3c:f4:7d:91:f9:
dd:04:0d:f7:3e:ab:f7:6d:cc:fb:0e:f1:68:ac:f7:fa:eb:5d:
b4:8c:1b:50:a6:00:48:da:38:2b:0b:90:b7:e6:28:48:2d:cd:
f5:6c:ff:81:3f:a7:6b:cd:b9:22:c4:99:e2:58:32:f9:c9:02:
c0:01:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:39 2026 by rpki-client