
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier: pa+QEBKF+AngAwS0Zn6xem7DYCZoSu6Hs19qbQRsC+w=
Subject key identifier: AA:18:21:7A:C5:2E:B1:E1:D5:52:94:1F:06:9B:2F:46:44:EA:B1:FC
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number: F2
Signing time: Sat 05 Sep 2026 06:10:55 +0000
Manifest this update: Sat 05 Sep 2026 06:10:54 +0000
Manifest next update: Sat 12 Sep 2026 06:10:54 +0000
Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: wN39U4NT9bDWSA7FyGFO1tYqJaIFi82hxxe6Iokutuw=)
2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Validity
Not Before: Sep 5 06:10:54 2026 GMT
Not After : Sep 12 06:10:54 2026 GMT
Subject: CN=6a9bb26f-d992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:d1:89:31:4f:bc:fc:ba:bf:5f:ab:2c:e3:
8d:d9:20:6d:a7:b3:ca:6c:84:5f:11:d4:6e:15:2b:
25:88:85:92:47:7d:24:d2:27:a1:34:70:40:ef:c0:
5f:57:b9:52:c9:08:cc:70:d9:29:f7:3b:1d:94:61:
1f:81:fb:15:7a:8e:97:e9:bb:85:04:01:95:dd:1f:
17:ee:94:24:db:ee:59:85:6d:d9:22:ed:bf:61:fa:
c5:5d:6e:3b:7e:cb:7f:11:67:59:f1:f8:2e:c9:12:
36:52:e0:8f:21:ad:c4:e8:af:c7:d4:bf:b2:c0:6f:
e5:d8:25:b8:27:20:e4:3b:f9:fe:66:3c:73:b8:4d:
a6:22:f8:d8:3a:e4:34:5c:ad:2b:18:6a:e6:8b:fe:
a5:4e:e7:33:1e:9c:d3:6f:44:5f:a4:42:71:c8:c7:
3e:17:96:76:b1:e3:c2:5e:78:9c:44:69:0d:a1:bb:
9b:9b:5f:eb:79:94:2a:34:40:3b:20:9f:08:ac:7e:
39:8b:fc:b7:25:92:00:e4:09:eb:ed:5b:33:d3:54:
a2:2b:b3:d5:23:c2:f1:50:66:0b:53:23:8a:68:20:
1a:3f:dd:9b:bb:d0:1e:5e:8b:77:16:a6:3a:a1:df:
0d:1d:7e:4b:10:a2:bd:59:7b:3e:1c:35:37:62:67:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:21:7A:C5:2E:B1:E1:D5:52:94:1F:06:9B:2F:46:44:EA:B1:FC
X509v3 Authority Key Identifier:
keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:26:6a:4c:0e:3a:0c:a8:c2:8a:53:66:e1:a1:7e:f8:16:1c:
b8:7c:f7:28:e1:83:78:13:40:97:d8:87:da:b1:74:9a:78:6d:
dc:2a:1d:c7:da:7e:eb:42:3b:5f:ff:f2:a9:11:fc:95:68:e9:
e5:c3:c0:d8:4e:a4:31:92:3c:52:bd:f5:a7:5e:4c:d9:ac:e0:
42:d4:0b:bd:0c:56:3d:db:1e:c9:1d:da:05:49:b4:82:c1:86:
ca:89:31:df:89:d9:11:ad:5b:76:1c:8d:98:b1:77:30:1b:b6:
b2:f6:fe:50:d6:fe:df:f9:dd:e5:30:7b:ac:64:32:af:7f:46:
f4:fd:0a:fc:95:18:fc:50:56:a9:0a:af:78:77:50:89:bd:3e:
06:e8:9c:b8:87:d4:f3:4e:9b:b6:44:f0:a7:46:61:d5:cc:7f:
b8:f1:d7:5f:7a:87:ee:8b:86:03:bf:1e:e7:d5:b5:22:96:ac:
8d:a5:38:a8:3c:af:d6:c7:cf:cd:8f:5a:cd:67:7c:49:8e:d0:
10:3b:44:55:d1:12:c9:14:2b:80:5e:8a:b9:b2:94:8e:50:76:
f0:76:82:c6:0f:17:36:d5:28:c8:65:3e:aa:b1:f4:92:a8:bc:
8e:8b:22:10:68:be:a8:05:cc:07:92:82:55:e3:30:f0:9f:78:
f7:de:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:28:28 2026 by rpki-client