
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier: 9b9O3FFV9WptTowYl5mhuaQAJfi9gFTW1ya5CKVJILo=
Subject key identifier: 21:D9:A4:F7:48:E9:7E:7E:0D:56:F6:3E:63:0B:2F:E5:45:A4:A9:F7
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial: 0542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number: 0848
Signing time: Tue 06 Oct 2026 23:38:24 +0000
Manifest this update: Tue 06 Oct 2026 23:38:24 +0000
Manifest next update: Tue 13 Oct 2026 23:38:24 +0000
Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: izygvobRAWDRFhyG0bJgcwV6DmtbAm86VFa/PFf6IlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1346 (0x542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Validity
Not Before: Oct 6 23:38:24 2026 GMT
Not After : Oct 13 23:38:24 2026 GMT
Subject: CN=6ac58670-b2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:a9:57:f0:59:8e:2c:c2:b1:c3:05:8c:fc:
e6:84:de:1b:8c:1f:3f:23:e5:51:34:1b:b5:91:c7:
a2:95:d5:cf:5d:d7:16:b0:a1:24:f1:56:cf:b8:d9:
f9:14:69:7e:83:74:d3:e9:88:0c:10:52:55:cb:c4:
49:9f:c4:db:7e:69:fb:33:96:30:19:2f:d8:5d:ab:
c7:ce:b5:9f:f0:5c:de:82:85:71:8b:1a:5e:ee:a7:
5c:ff:2a:eb:17:5c:f7:19:5f:08:df:68:3f:4b:9b:
a4:09:ce:9b:6e:0f:bc:69:d3:34:ce:93:71:d1:70:
9d:e0:44:f0:b8:91:6e:ee:1b:58:89:5f:9a:37:90:
9f:95:28:26:e2:d9:9f:2e:92:8c:b5:88:dd:0f:55:
b2:65:69:d1:fd:c6:5d:8c:bb:46:e8:ca:50:ec:28:
db:95:02:5e:33:38:b9:39:29:27:1c:a0:72:f5:5b:
66:51:d0:54:97:48:ce:6b:d9:c8:7a:50:46:79:9e:
72:8b:aa:28:c6:d9:ef:6e:8a:a2:e2:6c:60:97:15:
8f:79:57:31:2e:27:09:5d:93:93:7e:ff:00:46:c7:
5e:d3:ff:7e:37:c4:92:e2:42:96:81:16:a9:36:55:
d3:11:18:57:7d:4f:b6:25:e6:bb:54:1f:42:4a:0a:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:A4:F7:48:E9:7E:7E:0D:56:F6:3E:63:0B:2F:E5:45:A4:A9:F7
X509v3 Authority Key Identifier:
keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:76:00:15:d8:76:ce:b6:0d:60:31:1d:9a:d3:47:e5:a6:13:
52:9a:29:e1:3a:ab:81:ad:b3:47:31:89:c0:d6:85:8a:44:04:
f5:a5:14:a3:4f:e6:74:87:9f:97:94:9a:97:73:34:aa:a9:84:
8d:a1:0c:64:b3:7a:51:36:bd:5a:d5:1b:36:64:b7:22:60:46:
3c:84:a9:d6:8a:bd:18:e9:cc:48:e9:46:d1:2d:3b:70:7c:d5:
2f:2c:6f:e8:b7:ac:69:05:e5:6e:88:ec:c3:f5:fc:0f:bd:7e:
5e:7d:f8:ef:7c:cf:53:ca:fe:79:e0:73:94:28:9a:58:3e:fa:
0e:61:a3:4d:67:4e:ed:4c:44:54:f8:e9:08:d7:c7:9f:1b:e8:
48:36:83:48:36:5a:8c:77:e5:aa:89:32:70:d1:b8:06:b1:8d:
ea:27:64:7e:6c:5c:51:ff:2a:84:f2:ea:b5:bb:fe:f7:5b:a2:
f9:a6:f5:ce:c2:79:25:96:51:df:09:91:16:94:54:65:04:4f:
d5:2b:39:4a:3a:2e:a0:a4:9a:ae:a5:1c:b6:27:e1:03:dd:a2:
0e:48:08:e2:4d:90:6f:b0:76:94:f1:1e:5f:92:fa:a0:f6:a0:
ec:0c:55:9f:cc:42:61:fb:da:f4:42:87:cd:a1:92:ee:15:f2:
72:37:84:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB
RTBCMzVBMTgwHhcNMjYxMDA2MjMzODI0WhcNMjYxMDEzMjMzODI0WjAYMRYwFAYD
VQQDEw02YWM1ODY3MC1iMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhGpV/BZjizCscMFjPzmhN4bjB8/I+VRNBu1kceildXPXdcWsKEk8VbPuNn5
FGl+g3TT6YgMEFJVy8RJn8Tbfmn7M5YwGS/YXavHzrWf8FzegoVxixpe7qdc/yrr
F1z3GV8I32g/S5ukCc6bbg+8adM0zpNx0XCd4ETwuJFu7htYiV+aN5CflSgm4tmf
LpKMtYjdD1WyZWnR/cZdjLtG6MpQ7CjblQJeMzi5OSknHKBy9VtmUdBUl0jOa9nI
elBGeZ5yi6ooxtnvboqi4mxglxWPeVcxLicJXZOTfv8ARsde0/9+N8SS4kKWgRap
NlXTERhXfU+2Jea7VB9CSgr78wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHZpPdI
6X5+DVb2PmMLL+VFpKn3MB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE
NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf
b2JZM0MzUlE4by11Q3pXaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK3YAFdh2zrYNYDEdmtNH5aYTUpop4Tqrga2zRzGJwNaFikQE9aUUo0/mdIef
l5Sal3M0qqmEjaEMZLN6UTa9WtUbNmS3ImBGPISp1oq9GOnMSOlG0S07cHzVLyxv
6LesaQXlbojsw/X8D71+Xn3473zPU8r+eeBzlCiaWD76DmGjTWdO7UxEVPjpCNfH
nxvoSDaDSDZajHflqokycNG4BrGN6idkfmxcUf8qhPLqtbv+91ui+ab1zsJ5JZZR
3wmRFpRUZQRP1Ss5SjouoKSarqUctifhA92iDkgI4k2Qb7B2lPEeX5L6oPag7AxV
n8xCYfva9EKHzaGS7hXycjeEbg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:33:30 2026 by rpki-client