
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier: DrH2uPeoeDTOrWkfFtqosNb/yzrnxo9n4/qUHC54AJQ=
Subject key identifier: EE:23:75:BB:28:3B:9B:88:E1:F6:54:F2:82:C0:DB:D5:74:E1:E1:FB
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial: 0317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number: 0317
Signing time: Sun 05 Apr 2026 00:53:40 +0000
Manifest this update: Sun 05 Apr 2026 00:53:39 +0000
Manifest next update: Sun 12 Apr 2026 00:53:39 +0000
Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: 5wj5b35Wd9UHXmt0UVoYk1Gmms3bj5sgEPYN7mXuTVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Validity
Not Before: Apr 5 00:53:39 2026 GMT
Not After : Apr 12 00:53:39 2026 GMT
Subject: CN=69d1b294-b445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:a4:cd:a1:96:b8:71:ac:99:de:a4:35:a0:
27:02:32:5a:f5:bd:8d:40:87:8e:da:61:b2:f7:d6:
86:6d:e2:a3:0b:60:9c:5e:c1:1e:17:61:ab:6a:18:
40:c4:21:82:65:25:15:0a:83:d8:4a:6a:3c:0e:69:
5c:1f:24:53:57:c8:c0:54:5f:2e:01:ce:9c:48:73:
84:de:40:b2:95:52:ec:6c:f6:f6:5e:cd:26:1f:65:
8c:71:d3:d6:31:db:6b:d0:ce:7f:7c:13:a7:ef:cb:
c3:4f:cc:51:96:bd:88:cd:c4:6e:26:c5:b6:ff:e5:
2f:59:40:9c:1d:ea:1b:f0:aa:3a:52:46:fd:07:78:
e1:d4:03:a3:2f:bc:a5:1b:36:7e:25:79:b4:96:90:
57:81:50:2f:58:9a:6e:03:ef:7a:27:3e:b7:bf:7e:
3f:23:00:b0:bc:ec:4b:7a:d7:1e:14:26:94:01:d3:
0e:db:64:fe:98:de:b6:b7:e3:fe:f7:6d:85:32:af:
0a:cf:a7:f7:70:d7:16:9a:6a:30:d5:b3:73:0d:f1:
cc:4a:46:7d:11:bc:cd:a9:35:ad:28:99:d5:58:9e:
48:bf:c9:21:fc:39:5d:10:e0:3f:84:41:4b:fc:79:
d9:d3:8a:56:d7:a2:8d:23:17:e5:95:67:85:79:ac:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:75:BB:28:3B:9B:88:E1:F6:54:F2:82:C0:DB:D5:74:E1:E1:FB
X509v3 Authority Key Identifier:
keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:6e:b7:cc:0d:76:d9:f5:41:92:e9:bd:1d:92:24:54:91:2d:
95:72:ec:62:7c:bf:ce:ea:ff:5b:1e:1c:da:0b:b5:01:26:7e:
ca:b0:62:a4:15:f7:e0:f4:12:26:24:e5:3f:36:94:c3:fa:74:
40:20:6c:80:db:5d:3e:bb:e2:9b:8f:a1:ed:4c:ae:48:57:68:
b9:ec:72:01:72:ff:a8:2d:9a:bd:04:fd:38:0d:b6:89:a8:82:
4a:48:37:a3:86:4f:43:9f:af:47:b4:05:61:1f:29:37:4a:1d:
7c:a0:24:39:24:94:37:df:2d:95:5c:98:39:34:54:4e:76:a1:
25:48:23:14:d0:c1:9e:34:fb:89:05:c6:48:ea:4b:9a:e6:eb:
61:d6:2f:b6:d7:d9:b5:9e:7b:46:3c:33:59:c7:47:54:77:a8:
fc:0a:67:65:27:48:e3:8b:89:ff:24:db:99:a0:f9:21:cb:9a:
7f:63:4a:ce:b5:3c:7c:51:aa:58:ff:1b:29:62:9f:5f:53:12:
d7:cc:2b:7c:76:f5:a7:b5:27:34:c1:eb:d8:93:89:ce:d6:59:
3c:61:28:e4:06:08:8e:94:f9:0c:72:17:bd:b5:f0:67:46:d1:
06:77:b4:be:7f:26:7a:f2:91:45:94:d7:4c:0f:7d:14:2d:ef:
39:17:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:32 2026 by rpki-client