
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json)
Hash identifier: KN2Z2ImjtYCVCt6riHCQI34BgY+Tr4M2BfxkB6mtO2g=
Subject key identifier: 99:2C:46:3B:24:C2:76:D4:6F:37:56:F8:F3:FE:46:EF:82:A4:38:51
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
Manifest number: 013F
Signing time: Tue 12 May 2026 14:23:40 +0000
Manifest this update: Tue 12 May 2026 14:23:39 +0000
Manifest next update: Tue 19 May 2026 14:23:39 +0000
Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: qqkKWC4tW/0aMzHC2IcXz0mMzTGa5QhMt2FNY46U5O4=)
2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: dtSxcZxOzJQEnPBNnUCjQqEgDanYjoo+1mcfrul1wgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Validity
Not Before: May 12 14:23:39 2026 GMT
Not After : May 19 14:23:39 2026 GMT
Subject: CN=6a0337ec-8512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:ec:21:3e:39:f1:92:e6:fd:8a:68:d4:18:
87:f5:91:c8:47:dd:19:eb:a7:42:9c:b0:74:34:3c:
26:0d:2c:46:e7:a0:a6:14:f1:ba:15:c8:db:18:36:
4e:3a:c2:a3:8b:fa:56:b4:49:d3:ed:50:dd:67:5f:
16:25:d8:de:fc:14:bf:3e:71:22:5e:88:9d:4e:28:
92:0a:b9:1d:d9:8a:be:d3:f5:57:22:41:63:06:39:
2b:be:5c:7e:f0:e5:ee:1e:11:61:bf:ee:92:9b:c4:
be:33:a1:5b:c1:8e:ca:e5:54:bb:e8:80:1f:32:7a:
7e:de:4d:ad:8b:96:f1:7a:66:13:9a:84:49:c9:ef:
95:87:82:3a:04:5c:26:71:55:cf:06:a3:0a:37:41:
1e:03:74:6b:80:5e:1e:5d:14:43:69:3a:c4:06:c1:
69:f3:13:66:2d:43:86:d6:03:cf:e3:98:a2:d6:12:
82:51:5b:01:d6:1f:6f:ff:5a:3b:dd:05:e5:31:83:
75:87:95:13:36:43:aa:2f:ff:7a:a7:a7:2b:5b:31:
cf:bb:45:10:fb:69:67:2d:ad:ac:db:9d:7b:36:4d:
88:c8:64:ef:10:3b:81:a7:fe:58:52:16:82:f4:97:
a5:22:cd:94:28:80:97:99:57:b9:16:df:e2:cd:27:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:46:3B:24:C2:76:D4:6F:37:56:F8:F3:FE:46:EF:82:A4:38:51
X509v3 Authority Key Identifier:
keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f2:d9:0f:c0:bf:47:c0:61:49:7c:4f:a1:7b:ad:04:1f:4c:
6b:12:c1:bb:05:f0:43:03:1a:98:88:6d:33:43:d5:ca:b0:43:
9a:16:a1:8d:30:7f:e7:a7:86:eb:82:b6:63:1a:e2:a6:b9:55:
78:29:7c:ed:b6:a1:6b:c4:34:df:99:54:29:65:dc:00:0d:45:
0c:f7:7c:4b:79:d3:47:2e:9c:a6:3a:74:4a:0c:c8:17:4e:aa:
7d:50:d4:4c:ba:cc:e1:0c:6e:35:a1:b1:c9:9e:5b:89:12:c5:
d1:1e:68:11:e5:1a:a4:8b:76:19:89:9e:35:3f:13:97:07:74:
09:8b:64:40:d9:5c:95:65:c7:8f:14:e6:00:7c:67:9f:05:b1:
3f:19:29:a7:5a:5f:1f:84:c8:df:e5:33:1a:8a:8d:78:28:00:
a2:44:08:ba:71:46:51:35:33:fe:c7:8f:58:d1:0c:1a:89:81:
40:81:7e:ae:9a:6d:d9:dd:0d:d7:51:d2:e5:2a:02:7d:e7:79:
90:7d:b4:fb:8b:0d:73:f6:0b:f1:9e:71:2b:3c:a7:3d:54:39:
cf:10:f8:e3:0f:eb:84:07:11:5e:25:d3:aa:00:d4:d5:bd:bf:
dc:b5:d4:09:b6:b9:01:34:a4:c6:17:3c:1d:2e:a4:77:ec:94:
0d:a7:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:22 2026 by rpki-client