
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier: bXHjLS67HMyiI/QVQHPW0p6HST0gCOi3iRE24Pmk4Wk=
Subject key identifier: 05:63:92:5B:38:8B:FB:C9:4A:A1:5E:90:0F:BE:2C:0C:EF:75:54:D8
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial: 0529
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number: 0816
Signing time: Tue 18 Aug 2026 23:57:06 +0000
Manifest this update: Tue 18 Aug 2026 23:57:06 +0000
Manifest next update: Tue 25 Aug 2026 23:57:06 +0000
Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: NyDNFCdCCtL0w0zUsNO4jMH0LBxy3V4K76gxSzPHjFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Validity
Not Before: Aug 18 23:57:06 2026 GMT
Not After : Aug 25 23:57:06 2026 GMT
Subject: CN=6a84f152-f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:0c:50:3e:08:89:c9:f1:7e:64:ff:b2:18:
cb:f4:75:2d:1d:a5:17:a7:f0:01:a6:16:34:79:f8:
c2:42:15:1a:99:dd:c6:5e:c2:ea:4b:63:6e:37:b5:
20:24:04:d2:86:cf:7e:c0:c3:f8:5c:90:6f:07:be:
be:eb:be:1f:72:a1:7e:76:1b:93:21:6b:7b:8f:21:
69:b2:86:0b:b7:3b:19:25:ed:60:4a:6a:68:df:f0:
b2:0d:88:62:30:a7:cf:ea:64:34:9b:fd:0f:e3:dc:
4a:8f:dd:f4:62:cd:c0:3a:7a:e2:5c:93:d3:86:df:
bb:e5:3b:03:be:54:9e:d5:ee:52:15:49:bc:80:36:
08:f2:f4:3e:dc:ed:7d:2d:ba:8b:45:28:9c:49:6a:
0a:dc:d2:fd:33:7b:06:60:42:4e:58:02:3b:2e:90:
06:b6:0d:07:f0:fb:f5:a3:93:c8:f0:c3:52:d2:61:
08:28:4d:a9:a9:c6:d7:c9:6e:7d:1f:fb:29:1e:8c:
37:c4:64:38:44:96:92:f2:18:ea:c5:61:65:5e:c7:
24:71:8c:5e:8d:73:c1:87:24:3a:3b:7f:85:a7:da:
81:04:34:d0:22:ba:a8:7f:e0:a2:de:2a:5c:07:c8:
79:12:3c:84:db:fe:11:71:b6:a2:79:9f:9b:83:e1:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:92:5B:38:8B:FB:C9:4A:A1:5E:90:0F:BE:2C:0C:EF:75:54:D8
X509v3 Authority Key Identifier:
keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:a7:bc:93:20:9d:97:a3:c6:f6:e8:c7:a3:80:f6:95:8d:
1a:57:4d:c8:b5:72:8b:36:02:e4:b0:c7:c7:74:f8:ec:35:20:
37:06:d3:93:90:af:a3:91:c1:41:49:9a:17:6b:c8:dd:68:5b:
42:94:74:da:57:22:5e:57:06:1a:32:07:06:a0:bd:39:c7:cd:
d3:7d:95:75:41:5b:90:42:ea:15:a7:2b:b8:a0:7e:3c:38:b6:
cb:a9:c3:dc:5b:73:ff:09:59:50:d2:88:6f:6d:d1:62:31:4e:
9f:f2:bd:e1:fb:96:68:c3:98:7c:67:95:0d:51:fd:a5:60:cb:
2a:2c:fa:b5:b6:37:70:cf:ff:a9:15:af:d8:a4:11:33:da:3d:
1b:9a:8a:0b:94:61:8b:93:0e:d1:41:78:46:be:36:00:6e:33:
44:d8:8f:4d:a4:17:a1:05:5e:24:9c:a7:94:3b:a9:52:87:b2:
f9:6d:6d:7b:d3:96:6e:b1:61:6d:bc:37:55:70:b3:cb:7f:9c:
60:45:46:43:b3:7f:59:73:f5:a0:04:2b:57:86:b3:66:c7:b8:
53:89:0f:58:02:65:b6:b7:ad:7e:80:aa:ef:27:67:a1:5d:f1:
92:d7:1b:68:14:14:20:81:c2:ce:ec:fe:0a:10:94:7d:db:db:
92:a3:a9:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB
RTBCMzVBMTgwHhcNMjYwODE4MjM1NzA2WhcNMjYwODI1MjM1NzA2WjAYMRYwFAYD
VQQDEw02YTg0ZjE1Mi1mODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzB8MUD4IicnxfmT/shjL9HUtHaUXp/ABphY0efjCQhUamd3GXsLqS2NuN7Ug
JATShs9+wMP4XJBvB76+674fcqF+dhuTIWt7jyFpsoYLtzsZJe1gSmpo3/CyDYhi
MKfP6mQ0m/0P49xKj930Ys3AOnriXJPTht+75TsDvlSe1e5SFUm8gDYI8vQ+3O19
LbqLRSicSWoK3NL9M3sGYEJOWAI7LpAGtg0H8Pv1o5PI8MNS0mEIKE2pqcbXyW59
H/spHow3xGQ4RJaS8hjqxWFlXsckcYxejXPBhyQ6O3+Fp9qBBDTQIrqof+Ci3ipc
B8h5EjyE2/4RcbaieZ+bg+FfRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVjkls4
i/vJSqFekA++LAzvdVTYMB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE
NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf
b2JZM0MzUlE4by11Q3pXaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdzynvJMgnZejxvbox6OA9pWNGldNyLVyizYC5LDHx3T47DUgNwbTk5Cvo5HB
QUmaF2vI3WhbQpR02lciXlcGGjIHBqC9OcfN032VdUFbkELqFacruKB+PDi2y6nD
3Ftz/wlZUNKIb23RYjFOn/K94fuWaMOYfGeVDVH9pWDLKiz6tbY3cM//qRWv2KQR
M9o9G5qKC5Rhi5MO0UF4Rr42AG4zRNiPTaQXoQVeJJynlDupUoey+W1te9OWbrFh
bbw3VXCzy3+cYEVGQ7N/WXP1oAQrV4azZse4U4kPWAJltretfoCq7ydnoV3xktcb
aBQUIIHCzuz+ChCUfdvbkqOpmA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:02 2026 by rpki-client