
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier: /vR3hkj5F+DdJF8rLP8VTcZ4EV46TBvlBMifHKBUlkA=
Subject key identifier: C3:21:A8:C1:5F:98:7A:48:5D:6D:E9:95:36:BA:3A:73:68:66:47:DE
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number: 80
Signing time: Thu 04 Jun 2026 23:16:18 +0000
Manifest this update: Thu 04 Jun 2026 23:16:18 +0000
Manifest next update: Thu 11 Jun 2026 23:16:18 +0000
Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: ubKt6Fe4mFJ/hOVGqxMGCGbxayVye1GBANfBUEIbzkQ=)
2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 23:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Validity
Not Before: Jun 4 23:16:18 2026 GMT
Not After : Jun 11 23:16:18 2026 GMT
Subject: CN=6a220742-f182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:a7:39:8b:da:b2:ac:f5:34:19:5c:cf:07:
41:32:de:de:60:f8:96:1f:b5:1d:35:c6:6b:23:bb:
68:c9:fe:79:07:22:40:24:cb:94:88:fb:33:d6:59:
a1:ee:88:df:c5:29:a3:7f:17:e1:0f:06:97:be:9c:
bc:4c:94:2c:ff:4c:16:ce:0d:6a:0d:2d:fb:90:57:
6b:52:0d:f5:53:ef:7e:44:df:38:40:fb:b1:7c:45:
4b:ed:69:44:c3:bb:a2:5d:60:66:96:0a:70:1f:d0:
f4:b1:50:c8:cb:45:c6:ef:ae:21:1d:f7:5d:95:56:
f6:c7:b1:56:08:75:fe:85:68:cf:eb:e8:13:cc:41:
59:bf:94:b9:2e:85:ae:81:d6:90:f3:2a:df:b0:ac:
85:da:64:aa:82:3f:43:a1:ef:19:44:b7:7e:fa:ae:
aa:97:eb:82:43:9c:94:35:54:82:d9:14:3e:95:54:
94:3b:18:d0:ac:a5:bc:82:1c:cd:eb:64:85:e7:15:
f1:4f:a8:10:65:47:97:78:0e:43:01:5c:da:89:da:
0a:9c:dc:e7:66:3c:41:eb:56:a1:78:87:d8:dc:15:
0b:3d:5e:6a:ea:25:80:af:10:63:7e:02:7b:0a:70:
79:3c:ec:e8:4b:a3:2d:83:54:22:4a:0e:82:f7:54:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:A8:C1:5F:98:7A:48:5D:6D:E9:95:36:BA:3A:73:68:66:47:DE
X509v3 Authority Key Identifier:
keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d2:de:bf:05:6d:3b:32:d0:71:ae:e8:14:6b:97:18:36:03:
96:5d:2e:ec:a0:d3:88:8e:71:bd:d9:d1:e6:f5:5d:3c:b2:f7:
d7:9b:29:fd:bc:b0:b1:00:82:17:0c:77:3d:e8:4c:38:6f:46:
a8:e8:b9:2f:0a:dd:9f:4c:2a:e5:6f:37:77:8e:d6:9e:07:71:
f7:67:96:a5:8c:14:b7:f5:af:48:2a:41:2d:99:76:d3:06:01:
c7:5d:03:b0:08:47:f5:43:5e:97:a1:23:7b:d9:01:58:f4:16:
89:d3:4b:0f:7f:bf:d0:73:6f:ae:72:d2:e4:38:93:c7:63:29:
8a:79:d8:ec:f9:45:25:e6:ca:a9:92:59:e3:01:fe:54:31:cc:
d4:e0:f4:de:35:73:54:84:50:5c:2d:e4:ee:f9:71:45:68:09:
e3:9f:48:62:9f:02:9f:60:e2:a4:66:d6:5f:fc:bd:9f:05:74:
6c:b2:65:c9:fb:a1:77:6d:4d:69:1a:cb:ee:e8:eb:c6:2a:80:
1e:75:3a:7c:7d:98:f0:49:a2:90:d6:6b:31:29:19:77:7c:44:
cc:e5:e5:68:1a:68:01:7e:4e:a7:5a:ac:61:43:6d:6a:b3:b4:
6e:b6:7d:38:4f:83:26:73:7b:5d:ba:d8:1c:f6:37:64:35:48:
ce:54:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:04 2026 by rpki-client