
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json)
Hash identifier: rSm0ynDmaMAXl0iDTB8lHMS+HbRvT38avwVtzLBhtt0=
Subject key identifier: CC:EF:61:50:04:97:C2:CC:3B:39:43:DE:79:4B:E7:17:DF:EF:58:34
Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Certificate serial: 06C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
Manifest number: 06C1
Signing time: Tue 18 Aug 2026 22:39:26 +0000
Manifest this update: Tue 18 Aug 2026 22:39:25 +0000
Manifest next update: Tue 25 Aug 2026 22:39:25 +0000
Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: erGMXuguON209iAevrJcijuSdSvFsl61kSLSMbZf2S0=)
2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: 5KO2IAETTukFZk8M5PmVdnci+vv5do2kLW+1g1Vd9/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Validity
Not Before: Aug 18 22:39:25 2026 GMT
Not After : Aug 25 22:39:25 2026 GMT
Subject: CN=6a84df1e-2506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:c3:5d:6b:71:ff:e0:c2:f0:62:6d:f9:fe:
f4:42:ad:0b:83:b7:ef:d6:b6:b6:85:6e:43:aa:9a:
92:f9:5c:71:11:28:02:eb:67:42:87:2a:42:56:e9:
a8:4f:a7:3e:c3:13:fa:23:6e:fb:d9:54:39:e1:8f:
3a:0b:32:12:ef:09:af:1e:8b:69:27:77:db:0b:63:
f4:4d:35:e5:2f:5e:86:22:e7:f6:b1:9e:6f:1a:e3:
84:0a:41:dc:6b:09:a9:bd:85:4e:46:fc:6f:85:e4:
57:ec:23:62:42:e1:b1:5e:bb:03:24:95:19:5b:85:
5e:15:d8:4e:c4:e9:56:07:c7:eb:a9:34:fb:d2:fb:
48:a3:25:cc:ec:9f:05:30:ec:93:4f:0d:ca:52:dd:
d9:e7:a3:ad:c5:09:22:83:4d:70:f5:0c:36:92:35:
a1:38:ff:70:25:92:e2:85:94:5d:77:67:85:ca:73:
42:a9:1a:48:41:87:e5:d2:80:44:79:34:48:02:f8:
70:c2:bd:5b:e5:e3:98:48:12:51:38:c7:76:88:31:
c0:81:ba:55:85:ef:dc:6e:3c:f7:88:f4:9a:dc:fa:
0f:40:79:e3:dd:76:9a:0b:74:af:ef:dd:4b:6f:97:
82:85:d1:fb:35:4b:82:45:09:14:d5:69:8e:97:cb:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:61:50:04:97:C2:CC:3B:39:43:DE:79:4B:E7:17:DF:EF:58:34
X509v3 Authority Key Identifier:
keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:35:06:57:10:60:bd:fd:25:e5:0c:6b:4b:de:a6:12:2a:
78:e8:85:16:7b:c1:3c:9b:c4:33:9c:2a:c0:15:ab:92:f5:c2:
c0:8f:82:32:4c:85:33:5e:7d:ca:be:e9:b5:cf:0a:08:6b:45:
8f:9b:b5:93:a2:ef:fb:19:da:4e:04:25:7a:bd:a3:ee:9f:0c:
39:00:b2:a2:68:ef:c2:e9:24:90:46:ba:23:1c:07:99:22:3d:
d9:b9:a5:42:8d:7c:c1:0b:00:37:cc:70:b4:59:94:ef:1c:60:
ae:45:9c:6c:ef:96:94:95:c2:d3:4c:8a:6e:63:cf:0f:ed:4b:
b7:91:7e:a8:58:58:12:af:95:8a:75:b4:0a:42:d0:69:ba:d4:
01:18:34:2e:51:e4:05:41:b8:64:81:6c:81:f9:f2:05:ab:a2:
6a:f7:3f:6a:d0:4e:0b:d7:d6:97:2e:90:e3:f9:4e:42:0b:ae:
e1:bb:a3:66:9f:79:25:4e:6b:da:c2:dd:90:af:55:10:25:f6:
a4:61:1c:f6:d0:eb:15:f9:ab:54:7a:d3:08:de:51:5a:6d:1f:
75:7b:57:e7:51:71:3c:dd:b6:62:08:ca:6f:de:4a:a5:9c:59:
92:33:be:4e:db:0f:35:24:fa:91:5b:e0:2b:a9:58:18:1d:66:
35:2b:62:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5
MzM2QzgyQjgwHhcNMjYwODE4MjIzOTI1WhcNMjYwODI1MjIzOTI1WjAYMRYwFAYD
VQQDEw02YTg0ZGYxZS0yNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ffDXWtx/+DC8GJt+f70Qq0Lg7fv1ra2hW5DqpqS+VxxESgC62dChypCVumo
T6c+wxP6I2772VQ54Y86CzIS7wmvHotpJ3fbC2P0TTXlL16GIuf2sZ5vGuOECkHc
awmpvYVORvxvheRX7CNiQuGxXrsDJJUZW4VeFdhOxOlWB8frqTT70vtIoyXM7J8F
MOyTTw3KUt3Z56OtxQkig01w9Qw2kjWhOP9wJZLihZRdd2eFynNCqRpIQYfl0oBE
eTRIAvhwwr1b5eOYSBJROMd2iDHAgbpVhe/cbjz3iPSa3PoPQHnj3XaaC3Sv791L
b5eChdH7NUuCRQkU1WmOl8seGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzvYVAE
l8LMOzlD3nlL5xff71g0MB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3
QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu
cWQwV0Q5WUppWmlUTnNncmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYq41BlcQYL39JeUMa0vephIqeOiFFnvBPJvEM5wqwBWrkvXCwI+CMkyFM159
yr7ptc8KCGtFj5u1k6Lv+xnaTgQler2j7p8MOQCyomjvwukkkEa6IxwHmSI92bml
Qo18wQsAN8xwtFmU7xxgrkWcbO+WlJXC00yKbmPPD+1Lt5F+qFhYEq+VinW0CkLQ
abrUARg0LlHkBUG4ZIFsgfnyBauiavc/atBOC9fWly6Q4/lOQguu4bujZp95JU5r
2sLdkK9VECX2pGEc9tDrFfmrVHrTCN5RWm0fdXtX51FxPN22YgjKb95KpZxZkjO+
TtsPNST6kVvgK6lYGB1mNStiHg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:44 2026 by rpki-client