
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: n+Muv+//bPQyxXtPXSqDesloOlYdmxgkfJiGGL//dQQ=
Subject key identifier: C8:A8:85:32:CB:C3:B5:32:92:58:42:07:20:01:89:9B:D4:C2:0B:36
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 05A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 0583
Signing time: Tue 06 Oct 2026 23:32:02 +0000
Manifest this update: Tue 06 Oct 2026 23:32:01 +0000
Manifest next update: Tue 13 Oct 2026 23:32:01 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: EHxg5hgoRYU7IrIEPdSL7wCO8bVmE4hNEXuqAv8kE2A=)
2: COz4uX4UtBImNdcYb_-6DgDCecM.asa (hash: BXrAVU3vxbqGHIV/UF8nwROBrDRsbfJ1NpLAhgJL1WY=)
3: 26341238FB5011EF989C8143C4F9AE02.roa (hash: kqdkFnNYi1E1F9QlAN8PyXU2LLjOY85v4JkekGRJF98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Oct 6 23:32:01 2026 GMT
Not After : Oct 13 23:32:01 2026 GMT
Subject: CN=6ac584f2-11fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:2a:95:2f:79:09:89:40:4d:e4:8e:40:0f:
1f:47:c6:1e:04:49:07:f8:6c:87:68:dd:35:e3:8d:
45:00:5e:21:66:a8:7e:91:c3:dc:f4:58:73:1f:df:
12:e8:ea:5d:8c:f8:1b:46:88:f7:0a:f9:7a:96:05:
d2:28:5c:37:de:33:0f:19:ae:6a:76:2b:60:5a:1f:
9e:cc:de:94:ab:30:f5:bc:bb:aa:5d:65:78:83:43:
2e:8c:63:c8:40:71:80:e4:fd:5c:64:da:a6:c0:f0:
c7:da:ed:61:2d:b6:a0:1c:ed:32:08:25:45:af:22:
54:cf:8d:35:57:09:8d:5e:e5:5f:60:bf:f6:a3:2d:
09:9e:e0:18:cb:2e:67:e1:ff:ab:df:bd:9d:8f:ed:
66:28:ab:11:ba:9b:f9:af:a6:32:88:7e:7e:7a:c6:
04:56:a4:bc:79:3d:0e:4e:20:71:8f:53:ff:37:20:
b8:47:2b:3d:62:61:64:fb:19:52:07:8e:57:3e:94:
99:2a:39:a3:3c:91:82:9b:07:00:b3:45:cc:2f:c9:
ad:0d:8e:dd:4c:07:35:1a:6f:ce:51:b4:91:51:c5:
e3:4f:fb:34:3d:5d:f6:93:a4:4c:62:8d:3b:5d:fd:
75:e0:41:6d:e9:58:d9:00:60:d3:3e:b0:69:79:c2:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A8:85:32:CB:C3:B5:32:92:58:42:07:20:01:89:9B:D4:C2:0B:36
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d2:13:2b:73:09:e6:e9:8a:c2:32:88:5c:99:63:0e:8c:cb:
76:e0:28:07:73:76:16:2a:9c:54:76:d6:c4:c1:c6:bb:1b:3a:
2f:57:dc:90:3e:bb:29:49:48:84:25:d9:be:1f:14:c5:24:8b:
85:26:2b:57:6e:99:39:56:3d:38:8e:9f:1f:ba:bd:ed:dc:bb:
8f:92:ce:85:30:0c:fd:d2:cb:a2:d2:f1:93:88:f6:c4:1a:7f:
8a:54:dc:7c:db:1b:b3:38:6b:41:eb:c2:bb:43:34:57:e1:4d:
b3:3c:4e:59:c0:b2:1f:2a:3b:07:77:22:b1:eb:45:34:d3:f3:
19:14:b9:18:0f:85:86:33:c2:16:38:d2:f9:f5:c5:a1:7e:98:
32:fa:e4:43:89:cd:c2:10:be:44:a3:08:42:1e:74:34:a7:a8:
d7:93:a9:8c:c4:32:d0:37:06:46:15:65:db:62:7c:64:b8:91:
e7:29:6b:57:61:f4:35:2d:cf:60:43:01:50:ae:b2:f7:95:c0:
b4:c9:e4:96:3f:c4:d7:31:ef:84:19:15:8d:41:90:ea:5c:77:
24:5e:f2:8b:70:32:5e:d3:e9:e6:b5:bc:42:e0:73:48:4c:9d:
58:a6:04:a0:4a:2d:68:df:9d:7d:f8:56:0e:74:6b:27:d8:72:
0d:f7:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:27:30 2026 by rpki-client