
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier: 1AG2LAI2e2l30HgQEb+FVj3+zXrl3Jyfni2QnQHootg=
Subject key identifier: 4D:F4:F4:B7:E7:7C:76:08:5D:56:E9:3D:21:B7:97:E8:53:1C:B6:93
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number: 81
Signing time: Sat 18 Apr 2026 16:19:47 +0000
Manifest this update: Sat 18 Apr 2026 16:19:46 +0000
Manifest next update: Sat 25 Apr 2026 16:19:46 +0000
Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: YcC9zs79iZ/eni0GMCtEdW+MqIKnDk6Wj6Qc+t/d6u4=)
2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: EyDqWRIP2HZa6wsll9pUJm6te+t2HIVlnzU+AhtjxWs=)
3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: wvK2ETV8i4DCKPkGUmCmcmpFvE7SUGW/xJVm1sWIU9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Apr 18 16:19:46 2026 GMT
Not After : Apr 25 16:19:46 2026 GMT
Subject: CN=69e3af23-fa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:7c:71:a0:ec:43:9a:99:5e:56:e9:ac:c7:
a5:71:40:c2:6d:55:c4:89:b8:a1:69:d9:d0:a6:2a:
6a:09:1e:f1:ca:dc:c7:44:9b:c4:2d:7f:99:26:cb:
2f:95:52:fe:8b:28:7f:c2:3b:06:f6:66:cc:4a:3f:
b9:94:a5:21:44:08:46:90:52:f7:a0:5d:de:6f:f0:
86:73:56:60:2b:ab:b6:21:6b:e5:a6:ec:ed:f9:48:
2b:10:f0:83:57:38:a8:6d:fe:26:ee:51:8b:bb:24:
70:93:02:ed:5f:da:2c:3e:6d:76:74:8c:93:85:f9:
dc:3d:38:e3:c2:59:50:06:da:41:d4:20:6b:15:24:
e8:e4:27:40:0c:54:ad:21:b7:11:c3:50:03:51:04:
54:de:37:ad:0a:4f:9b:b7:a0:c8:13:e4:9e:e6:e7:
84:96:0e:de:29:9a:e0:5b:b6:24:b9:d7:f6:41:2f:
b0:0e:6f:b9:77:6b:78:a6:b5:f6:1a:3f:da:ca:d3:
10:6c:93:f6:9a:05:3d:c1:67:f9:d8:75:4d:00:e2:
8a:27:f7:8c:94:00:c1:4c:40:ed:66:99:b6:80:08:
40:e6:93:51:87:50:f5:2c:99:69:1c:ba:74:bb:0f:
1b:b7:71:37:93:69:96:21:32:85:a3:be:c6:e5:41:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:F4:B7:E7:7C:76:08:5D:56:E9:3D:21:B7:97:E8:53:1C:B6:93
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:17:51:f6:4b:80:5b:3c:4c:ce:f2:c5:9c:34:75:25:0d:66:
51:7c:ee:80:7f:0d:91:ed:11:f7:6e:b7:5b:7c:47:26:c3:27:
8c:cb:bd:f9:ef:9a:14:22:d0:dc:f6:55:33:14:81:3b:df:ff:
7a:43:d4:81:f6:02:92:b8:a3:ec:85:7d:8b:fe:5a:ab:c0:11:
59:03:6a:50:82:8d:e0:e0:9a:4d:38:7e:57:35:de:a0:6a:96:
f5:e0:d7:64:7a:bb:2a:91:9b:3b:fa:2c:bb:4e:40:0a:22:14:
f2:65:8e:aa:fe:67:6b:0c:d3:00:2f:82:77:59:63:83:92:80:
52:65:db:6b:6b:3b:d9:d9:6f:f4:d9:4f:b2:8b:22:7d:05:07:
c3:67:40:84:ed:19:fc:d3:6e:92:a8:df:6a:3d:b7:6b:80:f8:
0a:57:cd:9d:c9:ba:47:f8:e2:e6:c6:38:3a:2f:50:9f:6b:ec:
a6:07:1e:79:df:1e:85:21:3d:da:a9:25:dd:69:a1:47:0b:46:
91:42:da:07:b3:70:4d:de:76:47:82:02:61:02:32:41:c4:5a:
62:3e:b6:dc:74:b3:a6:4d:5f:59:b6:b1:8c:68:aa:6e:f5:8b:
39:a5:1d:26:4c:b8:0b:e4:92:d3:3a:93:c5:5b:d7:33:14:ab:
5c:0b:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:03 2026 by rpki-client