
$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json)
Hash identifier: V+8cP9oVv5XG8gVWyIbVJljtCfSbAdCgxQ1v2NOYbB4=
Subject key identifier: 79:E6:95:73:02:E1:3B:D9:5A:BD:78:24:A3:D2:80:7C:B5:46:E0:DC
Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Certificate serial: 088E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
Manifest number: 087A
Signing time: Sat 04 Apr 2026 20:28:27 +0000
Manifest this update: Sat 04 Apr 2026 20:28:27 +0000
Manifest next update: Sat 11 Apr 2026 20:28:27 +0000
Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: a3ppNFanqZnfMCh3rkgaZKlgA57ozhmVmKyKPhMtWF8=)
2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: j8uiQ1yAgz9ZEp0DuVyDJIgNZ2YjQcOMmdmTSIrRMPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Validity
Not Before: Apr 4 20:28:27 2026 GMT
Not After : Apr 11 20:28:27 2026 GMT
Subject: CN=69d1746b-9d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:50:e0:32:f5:60:79:2d:53:21:f7:84:16:
65:e9:2b:d2:bc:e7:79:b6:54:2a:4a:e2:f4:b8:ef:
32:9b:f1:7e:2f:1a:a7:a6:b0:0e:7a:13:de:9a:81:
40:82:b9:18:72:7a:cd:e3:38:4b:91:cf:d7:c3:8a:
67:36:be:9c:8d:25:64:bf:31:f7:77:6c:96:a8:2c:
1a:43:d0:c7:51:54:80:72:aa:fa:84:41:44:23:48:
32:97:e5:90:26:51:d6:f9:c9:41:85:24:d4:4d:28:
07:dd:26:37:01:d7:ec:30:5b:f4:2a:9d:28:46:ea:
f6:45:b4:ab:6c:96:8f:bf:18:64:5f:66:ff:d8:81:
86:5e:ff:e7:c3:91:88:f4:fb:6f:91:0e:75:4d:41:
ba:e6:f0:02:61:a6:ad:d2:98:9a:8f:ae:2a:37:55:
50:b5:33:c8:c6:b8:42:d5:72:71:7b:6c:cd:1b:64:
64:b2:04:6f:79:8a:3c:60:1f:32:d0:7d:cc:dc:e3:
ce:af:d2:0e:c9:ee:ad:03:49:49:56:34:9b:92:7b:
ea:a2:d9:9f:ef:0f:9b:4f:81:da:97:cb:8f:06:46:
e1:64:6b:40:b6:cf:6e:e4:44:45:a1:d7:a9:ef:39:
20:ea:43:80:bd:f7:8b:18:f0:93:69:c7:63:34:9c:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E6:95:73:02:E1:3B:D9:5A:BD:78:24:A3:D2:80:7C:B5:46:E0:DC
X509v3 Authority Key Identifier:
keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:24:7d:47:03:94:78:ca:65:d0:e9:3b:9d:2e:11:fb:3a:8c:
75:f1:23:58:de:da:b4:75:53:9a:46:eb:60:d2:45:bd:ee:c2:
63:a9:a4:22:5d:89:90:a1:74:68:8f:79:3e:e6:47:c4:16:f3:
a4:c4:ad:18:10:5c:41:20:2e:95:de:fd:e6:ce:2c:0e:90:a8:
2e:f2:d3:da:43:2d:7e:b2:d5:3e:6e:50:ad:90:60:8c:82:eb:
8e:c6:a5:90:e3:80:21:b7:b5:7d:e8:68:40:97:81:51:d0:ac:
31:4a:a8:91:57:85:6c:b6:ec:4e:36:f2:85:58:ff:f0:5a:c7:
fb:36:bd:08:6e:97:19:55:40:18:38:9c:0b:17:d1:66:fe:6a:
b8:d2:aa:f4:05:cf:97:db:47:08:46:43:4d:33:27:62:b7:a5:
e3:9d:d4:6b:07:32:0e:f9:96:1a:f4:63:fc:15:03:50:91:0b:
95:3c:71:4d:5d:e5:54:4f:80:d5:ef:d5:00:ae:a9:74:31:10:
0f:70:f4:e2:02:3f:32:69:82:b8:ac:f4:a7:e4:e4:3f:f4:97:
36:fe:1b:f3:83:32:88:c2:40:c2:70:f9:91:6a:3a:75:1b:0b:
54:7c:e6:06:20:3c:12:1b:f9:ef:1f:51:ce:cd:f0:db:f6:e5:
27:0d:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:43 2026 by rpki-client