
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier: Eeah5OBNAMSESnzMwCAGFSF1ZyujC14LEieLXSu4x9Q=
Subject key identifier: 2E:75:02:98:D3:0D:3C:36:61:A3:28:07:E2:99:88:5D:93:A8:CF:97
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number: AB
Signing time: Fri 17 Apr 2026 07:00:21 +0000
Manifest this update: Fri 17 Apr 2026 07:00:20 +0000
Manifest next update: Fri 24 Apr 2026 07:00:20 +0000
Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: Yz73McMyOLesMZ7IebQiTHglG6sqX7H92MuajawauQM=)
2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Validity
Not Before: Apr 17 07:00:20 2026 GMT
Not After : Apr 24 07:00:20 2026 GMT
Subject: CN=69e1da84-bfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:63:61:43:94:70:f3:2f:cd:68:eb:1c:1d:
4e:fe:4c:af:3f:1a:d1:c9:4f:27:78:cf:a0:6e:0a:
01:1c:d7:f3:0d:13:ed:96:13:7b:aa:16:22:81:24:
9d:92:b1:a7:ca:4d:30:dc:72:c3:ad:c6:89:d4:59:
ce:33:8b:1b:d1:1d:b1:1c:b3:a0:77:85:16:9d:09:
46:7a:61:91:d2:3f:2e:4c:79:40:9e:2e:f2:f3:77:
f7:b9:4d:e0:99:f1:01:05:3e:fa:c8:85:55:19:6d:
ce:32:39:7d:9c:38:7d:3c:98:63:41:41:bc:4e:43:
3f:0e:ff:03:d2:ff:6a:b9:72:c2:b3:1e:1e:21:5a:
8e:a9:21:a5:6f:a9:b9:b7:09:ad:48:62:f7:27:a7:
94:f3:0f:b6:af:ad:a3:c0:b3:f4:7a:69:f3:f4:56:
61:a8:3b:d8:27:ae:d0:44:33:c9:54:84:bd:fa:e0:
8f:c3:e9:cb:cc:94:d5:66:3c:b0:54:6f:fd:25:66:
7c:35:b0:3e:9a:51:c9:c4:c2:f8:1d:5a:50:2d:7e:
89:b9:32:25:2f:5f:74:dc:f3:45:87:2f:ef:3d:67:
a8:64:e1:6f:bb:ef:d8:a2:c4:e5:53:4d:5a:ba:95:
24:8d:7b:1b:a1:e3:72:50:8f:37:bc:2f:db:af:4f:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:75:02:98:D3:0D:3C:36:61:A3:28:07:E2:99:88:5D:93:A8:CF:97
X509v3 Authority Key Identifier:
keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:9e:b9:04:a8:b3:b9:19:ef:41:a2:d7:7b:64:63:f9:b4:
3c:79:57:68:5b:55:d6:ac:12:56:d3:8e:36:6e:7a:1e:ba:50:
b4:70:64:91:4e:de:0f:3f:16:56:cb:4d:0a:c8:ba:ca:ee:6d:
bd:5e:e8:78:60:dc:f2:f1:84:94:2a:dd:0e:1a:b4:a0:d1:97:
76:c1:6d:de:6d:cd:0a:8f:19:45:6f:3e:de:71:60:4c:a8:dd:
b8:11:cd:dd:ea:e4:1d:75:bf:fe:6b:99:6c:b9:5a:9b:4e:a2:
91:b0:a9:43:5c:b1:53:c6:fe:aa:67:32:d1:4c:91:48:84:6c:
23:8f:63:0b:6b:32:24:11:7a:25:09:d6:a1:c1:40:fb:9e:0a:
37:f2:e6:01:f5:e4:38:1f:2b:2b:67:bc:e3:df:5b:dd:c4:2c:
4f:7a:f3:86:e9:11:e0:de:eb:79:35:11:22:dc:69:ca:31:5c:
d5:44:90:68:d1:65:a2:54:13:49:ad:f3:31:e2:1f:9c:c6:55:
6a:89:ee:6e:b8:a8:69:e6:21:6d:91:2b:90:81:a6:51:97:0a:
6f:4f:c5:2a:ad:66:b8:f8:1b:ba:9a:cc:84:6c:41:6c:df:3a:
7e:42:ac:92:7c:1a:5e:4c:77:24:0f:09:ba:09:c3:4c:8b:fa:
b2:b5:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:52 2026 by rpki-client