
$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: xkvJ8PukFfPkIyhj/uB/+EEKDmC1urKzCIuP/y+PtK4=
Subject key identifier: 73:0A:22:DA:8E:2B:F3:FB:E7:D5:95:8A:78:51:36:3B:E0:6E:A8:21
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 024B
Signing time: Tue 23 Jun 2026 02:31:45 +0000
Manifest this update: Tue 23 Jun 2026 02:31:45 +0000
Manifest next update: Tue 30 Jun 2026 02:31:45 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: icyKFlEZUynhoGkadpLA6sk6zaScvYmGjLiUrZg5t00=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NLPxqKYUf9lOT/IENYdccH8n5nolWXb5/WWyykUnYuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Jun 23 02:31:45 2026 GMT
Not After : Jun 30 02:31:45 2026 GMT
Subject: CN=6a39f011-f667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:73:3f:54:f4:bd:b7:4f:80:c5:4c:3e:6c:
ba:71:05:f1:0e:1e:87:41:89:a1:26:2a:34:8f:5d:
fc:33:6b:51:a0:3b:94:d1:1a:d5:85:8d:82:e4:c2:
b5:de:b8:e0:3d:eb:5e:e4:a7:b6:76:27:f0:5e:fd:
20:2c:4c:15:9a:50:b8:15:55:1f:72:2a:fa:7c:97:
b4:6e:31:6e:3c:f9:5c:4d:b2:f8:af:92:05:cb:62:
6b:3a:7d:6e:1b:80:4f:49:ba:81:be:2d:e4:fc:65:
4c:49:c3:86:ab:f5:8d:b9:86:4c:a1:8a:29:d4:0b:
e8:51:d6:ec:8d:01:da:9a:5a:ad:58:63:31:d9:9c:
df:9f:0a:1e:04:71:ad:85:56:17:2c:78:89:df:f0:
2c:fd:47:86:43:0d:52:85:28:de:44:84:fd:82:70:
dc:6f:ab:05:74:63:a8:f3:7c:69:cd:99:5e:6f:62:
03:99:09:f5:e0:a3:b7:19:64:58:a1:9a:31:b0:9a:
f5:aa:c6:73:c5:e2:ef:dd:23:e0:c7:39:12:a2:d4:
58:3b:5e:64:40:36:97:f6:49:85:13:3a:d0:be:78:
68:27:32:2f:cc:3a:9b:78:c4:47:7b:5e:07:37:65:
8a:12:64:39:a6:b1:6a:7a:70:91:2e:20:c8:77:4f:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:22:DA:8E:2B:F3:FB:E7:D5:95:8A:78:51:36:3B:E0:6E:A8:21
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e6:57:bd:49:1b:99:11:82:5c:2b:f6:ca:5f:3b:72:e3:66:
f5:6a:73:8f:65:93:ab:a3:36:8a:0a:1c:ba:32:b5:dd:a7:68:
cb:a7:a7:35:46:0d:2c:76:a3:0f:dd:20:b2:cf:02:76:97:10:
52:63:a0:ef:58:a7:15:70:dd:97:a6:9d:b9:b5:6b:16:55:bd:
fc:67:f7:38:f8:2d:9c:11:c2:79:cb:9a:e3:0d:05:66:91:0c:
0f:fe:ab:e3:e4:f4:49:c1:d8:d3:ec:74:cb:fd:36:a2:0d:d3:
6c:d3:3e:f0:31:95:57:f9:21:18:f6:60:77:7e:eb:db:e8:d3:
74:f2:c3:48:65:d3:08:e6:9c:72:b8:41:1a:15:45:e7:56:3b:
6f:1e:93:c2:fd:5e:84:75:4a:03:d2:53:17:29:f6:ee:56:5c:
37:c1:25:c9:ca:da:14:b0:63:ca:c8:69:17:41:62:c8:58:3a:
8d:1a:a1:b0:c1:e3:c9:cd:05:da:bf:56:06:fc:ba:30:ca:05:
86:de:79:b6:0e:34:a6:d8:6a:b7:a3:ca:37:f3:6b:fd:ce:ae:
94:68:bd:46:42:99:e2:63:02:6b:55:0f:05:20:af:74:62:a4:
12:7d:df:3d:25:91:37:e1:d2:0b:81:7f:02:04:ff:18:15:3b:
f2:15:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:30 2026 by rpki-client