
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier: tY76AYJgDz8+MabPfwJJfbfoZUd2+KltSobCv06y1zc=
Subject key identifier: 69:EE:5E:2A:41:67:FF:BE:39:8F:96:0D:BC:70:4B:3C:13:F5:F3:96
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number: B1
Signing time: Wed 02 Sep 2026 23:01:48 +0000
Manifest this update: Wed 02 Sep 2026 23:01:47 +0000
Manifest next update: Wed 09 Sep 2026 23:01:47 +0000
Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: fiotzd3lq5nUK2XiAq/V/m6jIOQy4/Dpzc0gIulQ+UQ=)
2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Validity
Not Before: Sep 2 23:01:47 2026 GMT
Not After : Sep 9 23:01:47 2026 GMT
Subject: CN=6a98aadc-a687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:a0:47:05:68:68:9e:ea:20:bb:20:a2:aa:
87:71:a7:df:ed:cb:a4:2c:9a:73:85:0b:cf:21:6c:
a6:54:6f:0e:04:a1:f3:3f:7b:55:6b:dc:b0:58:48:
f9:3a:b4:3c:3d:df:1a:6d:df:84:b2:50:65:5d:6e:
74:f4:a1:73:69:72:d8:4e:51:6e:89:50:3f:26:ea:
3d:f8:a4:a0:ac:eb:49:5b:e2:03:1a:b7:a8:81:0c:
43:64:43:7d:a2:ad:56:3a:c6:63:8e:9e:4e:7b:dc:
d7:f0:8a:5b:8c:2c:81:3e:95:e4:2b:bb:55:fe:31:
d6:47:4f:65:00:bc:1b:7a:fa:1b:be:9c:c6:4b:18:
ed:63:3f:6f:cf:d6:5c:b8:14:5a:92:e8:59:cd:84:
34:20:1d:7d:d8:4d:3c:33:d4:18:cb:f6:89:df:86:
04:d9:fe:17:cd:48:75:73:59:f7:0f:04:eb:02:02:
99:7d:29:93:a7:68:a1:89:6a:28:a5:d0:fe:af:ce:
32:90:b1:06:ae:28:0e:23:6e:be:01:23:d2:78:d8:
09:f7:89:5a:c9:71:c7:d5:b8:77:b6:27:14:0a:5e:
2d:a5:59:8a:94:af:55:03:ea:6d:34:d0:1a:b6:32:
c2:9c:6d:72:fa:79:7c:7b:c4:53:45:7e:94:03:81:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EE:5E:2A:41:67:FF:BE:39:8F:96:0D:BC:70:4B:3C:13:F5:F3:96
X509v3 Authority Key Identifier:
keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:90:3f:fb:a8:15:f1:57:5e:21:80:37:81:db:87:fb:fb:6e:
64:4c:f5:68:93:16:82:45:61:1c:a9:de:8c:a6:e7:a9:e9:8d:
4a:99:b1:15:d3:78:fc:05:27:64:d0:2b:72:47:7d:2d:81:06:
82:0d:fc:01:d2:de:73:26:ba:75:5f:d4:3d:b8:2d:86:33:c8:
4d:0a:a2:c7:f8:80:a2:ef:ea:a8:85:dc:49:e4:d9:15:8b:5b:
d9:5e:ae:f1:4f:59:37:b2:8a:40:1a:1d:95:27:31:24:69:6f:
91:3b:22:cc:6e:40:40:64:ce:88:fb:d1:2d:46:b5:49:e4:9c:
c9:d5:32:89:4f:19:29:16:9b:08:af:da:7f:cc:13:97:c1:27:
64:e0:5c:80:41:d7:ce:3e:cb:01:44:cc:20:a7:3c:97:93:37:
7e:5c:3d:87:86:58:93:aa:d8:9f:19:94:4d:36:4e:89:a3:bd:
c3:1d:75:dc:b5:01:d0:e9:01:55:e8:7b:ad:04:d7:77:23:c9:
20:a1:01:8d:1f:32:70:34:a0:4b:3d:42:93:b6:8d:75:0a:c0:
51:f0:14:95:77:60:7b:9a:68:18:77:f5:31:dd:24:f3:7d:47:
ca:8e:ad:05:3c:b5:0e:54:91:7b:4e:6a:12:1b:38:ad:a3:65:
0d:ae:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:26 2026 by rpki-client