
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier: 0lH995cH6WH7RqR7qEIxRMraWw+P7fWgjvYMiMLZ3cQ=
Subject key identifier: 2F:B2:0A:9F:DD:99:1F:0A:42:AD:8F:7F:C6:A0:8D:FC:FD:3D:C3:4C
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial: 050B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number: 07D9
Signing time: Mon 22 Jun 2026 23:45:16 +0000
Manifest this update: Mon 22 Jun 2026 23:45:16 +0000
Manifest next update: Mon 29 Jun 2026 23:45:16 +0000
Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: /+TzU/frfkOx17kBhXj5IBiLR8pY6p4KLJqAoqcr6dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Validity
Not Before: Jun 22 23:45:16 2026 GMT
Not After : Jun 29 23:45:16 2026 GMT
Subject: CN=6a39c90c-183e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:78:71:8b:58:33:4b:ac:2a:f5:05:9b:c4:
d9:8b:f8:6e:3c:1f:59:fe:c8:c8:9f:94:b0:62:fe:
c2:bb:d3:d0:1f:64:54:da:6f:63:d2:7d:86:25:2d:
7e:15:de:d6:70:67:33:7e:a1:13:89:83:3d:53:78:
fe:9a:cc:9a:dd:bb:c6:0f:7a:68:e7:2d:ed:89:a1:
bf:df:be:16:85:66:b5:fb:0c:65:5a:e0:13:1d:f2:
48:2f:a9:7e:04:6e:da:f3:ee:0b:86:bd:ec:59:3b:
0c:70:66:5c:cd:c3:60:68:ed:f8:36:c9:cf:fe:03:
d5:9c:91:64:4f:f1:e7:b9:bf:37:4a:26:2a:5e:bb:
b0:06:c0:20:b8:3c:58:10:71:15:e6:53:6c:5c:7a:
d3:8f:dd:4e:25:93:2f:ed:4d:38:4a:17:89:9d:87:
13:67:61:54:3b:9e:62:07:34:21:cd:db:9a:11:de:
56:15:59:61:2e:e4:47:99:4e:96:36:15:b4:bf:7e:
ab:9e:e6:3e:c8:29:e2:7b:ef:78:24:5b:2f:85:79:
b3:f5:de:46:11:bd:c5:34:bb:18:92:84:f8:ce:43:
fc:35:79:06:30:aa:d9:10:96:d0:fb:db:ac:80:b9:
36:64:0c:2b:1f:b7:12:38:bb:dc:2d:b0:12:21:5c:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B2:0A:9F:DD:99:1F:0A:42:AD:8F:7F:C6:A0:8D:FC:FD:3D:C3:4C
X509v3 Authority Key Identifier:
keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:d5:ba:87:da:93:26:3a:0a:ea:f4:c1:af:db:0a:de:09:
4f:95:8d:cf:e3:98:f2:92:2a:b7:5a:e2:42:21:d0:66:98:f9:
af:ae:a3:37:ee:05:5d:d5:f2:e7:0f:df:00:08:c0:47:9d:12:
3d:b1:62:b6:7e:b3:46:45:0f:94:90:b4:ab:7f:7e:2a:22:72:
82:0f:4d:ba:8d:6b:4c:bd:a0:94:24:9f:65:22:10:d5:b5:da:
5d:01:f6:51:08:60:40:49:ba:70:a8:4c:8c:96:74:48:57:6d:
2e:0b:39:a0:cf:62:00:2a:eb:bb:75:5c:a4:7f:43:fb:bc:cf:
10:1f:a2:be:ef:97:96:33:75:aa:9a:c1:a5:c7:5c:ab:96:a7:
92:96:29:0e:48:f4:6a:76:6d:09:7d:8d:da:5a:67:4b:bb:83:
b3:a8:f2:b6:f0:5c:17:42:e0:03:5b:04:8c:6b:40:11:37:82:
cd:03:af:68:59:87:0d:d0:0f:fe:ff:d9:96:36:4f:2b:78:85:
50:e9:82:97:36:3a:c9:f2:1e:51:14:a6:91:64:07:08:18:3f:
5a:b3:56:b5:3e:b2:b8:bc:bc:5b:4c:ca:ce:30:58:e2:06:75:
8b:b9:2b:3e:9b:70:84:a1:38:94:e7:96:6c:bb:f5:00:c7:b8:
d2:6a:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:56 2026 by rpki-client