
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: rgv+qv6N5/qlIYHw1+JTMHbAzNJx0w5+ErARJQIrR5Q=
Subject key identifier: DC:E2:9D:6F:B9:ED:A8:EA:34:35:AD:3F:DC:20:A7:66:EF:F6:2B:5F
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 0587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 0566
Signing time: Wed 12 Aug 2026 23:05:34 +0000
Manifest this update: Wed 12 Aug 2026 23:05:34 +0000
Manifest next update: Wed 19 Aug 2026 23:05:34 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: TA0iCPM+Lws8Uqw0GJIOeS1cQmf4ZrTUowXfBbKOA6M=)
2: GYszsUew7X38zkRtPVLW-eoVxsQ.asa (hash: b4WOMeRNIbyGwrjEhYftecALzxdNNy2ZCsrELayEYS4=)
3: 26341238FB5011EF989C8143C4F9AE02.roa (hash: kqdkFnNYi1E1F9QlAN8PyXU2LLjOY85v4JkekGRJF98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 23:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1415 (0x587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Aug 12 23:05:34 2026 GMT
Not After : Aug 19 23:05:34 2026 GMT
Subject: CN=6a7cfc3e-35e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:37:01:f0:26:3f:e7:86:a3:96:77:f6:bc:
e5:4d:35:68:97:95:05:f0:b0:bc:f7:3c:2d:d1:32:
2e:91:8f:b6:b0:a6:64:e7:df:3e:4b:28:1e:d4:9f:
c9:c2:92:f9:9a:76:dd:ca:01:71:0b:fb:8b:e6:57:
54:8d:ce:91:b8:13:76:01:52:99:f5:b7:76:d7:7c:
11:f1:32:45:f9:68:3a:fa:3d:a2:3f:ab:c3:c7:fe:
89:2e:17:0c:37:ed:aa:da:ce:a3:f3:a5:f8:68:86:
f4:b2:8a:a1:89:d0:e6:6b:dc:fe:05:ea:79:21:35:
8d:42:25:13:16:e0:35:83:63:96:fe:7d:a8:f7:52:
8c:32:bf:91:61:2b:5a:c1:56:5f:8c:eb:64:84:20:
13:d6:1e:3e:7f:c2:8c:cd:36:b3:7d:4b:87:49:b0:
14:47:d3:94:30:a2:df:25:75:77:df:dd:53:c9:86:
ec:1e:a5:ce:d7:48:39:26:e6:44:d4:27:b2:92:e4:
59:09:0b:0c:11:41:9c:06:ad:e2:74:8c:e0:4f:4e:
02:39:91:94:b0:26:1d:85:fb:09:9b:87:3e:02:ce:
c4:1e:02:96:bc:2a:e7:10:df:2d:2b:fa:81:93:0e:
dd:37:fd:d3:84:27:c8:ed:9b:98:2a:2a:0b:e6:fb:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:9D:6F:B9:ED:A8:EA:34:35:AD:3F:DC:20:A7:66:EF:F6:2B:5F
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:8c:16:98:b1:19:fe:4c:eb:f5:63:57:43:41:68:68:8e:90:
47:85:30:e5:2d:cd:48:2f:ea:6d:f6:69:c9:2c:23:1d:40:5e:
97:c5:09:27:ac:78:f3:08:5e:db:17:7a:38:5c:a9:8e:4a:b3:
2d:96:86:b0:bf:62:55:8c:b7:88:ee:61:83:c7:e0:cb:a6:c2:
4e:0c:bf:14:87:c9:d9:62:bf:76:04:1a:f6:f5:99:fd:cc:f6:
ed:ae:be:af:66:99:6a:33:53:b9:f2:3a:f4:e1:41:75:7d:72:
97:7e:9b:2a:e8:e4:80:d1:f7:81:82:67:83:fd:d5:5c:66:f4:
d6:81:78:1f:42:25:5b:ff:ab:e8:ce:4e:c4:6c:d2:16:7f:19:
59:6c:35:2c:3d:f8:d2:66:bd:4a:f6:76:48:0f:b1:7a:bf:83:
73:2d:ab:2c:d8:4e:3d:93:b6:2a:46:ce:07:7a:ff:24:f5:3f:
48:1a:f5:4d:08:ab:40:3f:66:ef:c0:31:37:88:26:f8:4d:35:
9b:6f:7f:9f:ea:c3:11:db:dd:8c:dc:55:10:a2:75:80:8b:2a:
ed:6e:cd:41:89:ee:30:ba:57:8c:33:d5:a4:2f:1b:47:bf:fd:
4b:c8:92:16:0f:99:7f:67:d8:58:26:48:36:46:f2:48:5f:78:
ea:e5:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:28 2026 by rpki-client