
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json)
Hash identifier: wKxkdUJUZgUJJuMXpggOl1Ys00o3l0Ep2J52BWzzmOY=
Subject key identifier: CE:7B:62:88:DE:2B:24:1E:95:72:46:CB:63:A7:E4:F1:84:FD:C7:46
Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11
Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
Manifest number: 0101
Signing time: Wed 13 May 2026 06:17:01 +0000
Manifest this update: Wed 13 May 2026 06:17:01 +0000
Manifest next update: Wed 20 May 2026 06:17:01 +0000
Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: znkQnHuzcHg5UWnk99n5l9YAH/6T/RBVEAgwLCzFA7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl
rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
Validity
Not Before: May 13 06:17:01 2026 GMT
Not After : May 20 06:17:01 2026 GMT
Subject: CN=6a04175d-a4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:50:71:aa:ff:3f:ef:2a:24:ee:1d:06:36:
58:b4:9c:ce:86:82:ec:12:75:87:85:99:5c:ee:af:
01:a3:9e:58:b1:49:3e:f6:82:91:05:ed:bf:4f:c5:
a6:f4:fb:50:50:8b:13:a5:b7:df:f4:ec:75:e9:d7:
b1:98:04:d7:41:2f:41:f2:fd:b3:1a:d6:81:12:3e:
a5:ec:05:a3:ef:f9:48:69:45:e3:c9:23:16:79:d0:
3f:bc:71:9b:94:fc:71:d9:97:a6:ac:c0:e5:e4:72:
5f:69:d6:e0:a4:d2:ce:6b:1f:a6:1b:92:51:eb:53:
db:8c:45:2d:4d:00:ac:87:0c:e5:b1:c4:5b:06:17:
e4:8a:d5:29:4e:9d:3f:47:09:17:99:52:4b:77:ef:
ca:ee:25:41:a3:b1:2a:0c:21:46:fd:3a:e3:e1:24:
2b:6f:bb:cb:15:6a:d5:e1:1c:66:0e:9b:c5:d3:eb:
a1:56:33:84:2f:68:d7:ea:b6:f2:96:49:f8:a0:d0:
0e:f5:18:16:69:94:7e:f1:ee:74:91:9e:ab:3d:31:
27:2c:61:c6:6b:00:59:c3:03:03:1e:a0:8d:a1:4d:
bd:92:0d:34:6b:05:3f:93:98:1f:77:81:93:5d:5b:
fe:1b:67:63:1f:b1:dd:0f:6c:c3:21:ff:10:29:33:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7B:62:88:DE:2B:24:1E:95:72:46:CB:63:A7:E4:F1:84:FD:C7:46
X509v3 Authority Key Identifier:
keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f1:59:b1:3b:bd:80:d7:d7:2c:d6:fd:52:39:57:61:1c:93:
f7:98:26:e1:bc:f1:d1:2f:2f:b3:df:5c:9a:90:9b:e2:0a:7c:
13:64:85:bf:59:9a:22:63:00:5b:df:62:ba:b6:54:e3:fa:ec:
12:57:f2:ad:88:87:2a:97:6f:74:78:de:75:4c:f7:9f:94:6c:
55:49:84:0e:a3:cf:ca:6e:67:cd:97:18:eb:ca:84:eb:bf:61:
7d:46:59:d3:23:d2:0b:90:58:5a:84:78:c7:5f:a7:3d:04:63:
9f:ef:51:94:ac:43:61:be:b4:e4:90:10:2c:55:75:0b:92:f1:
23:13:08:47:94:36:c7:29:36:e8:59:e6:b5:bb:56:3f:12:59:
6d:4f:f9:b6:7f:c1:cd:3e:0a:15:ed:7b:cd:c4:f2:61:1a:d3:
6e:7c:40:57:bb:f9:99:45:35:0e:e7:8e:8c:bb:ac:4c:ed:45:
6a:38:1a:bf:ec:07:b2:a0:b2:ff:a7:f0:70:9f:ec:41:e2:f5:
4f:51:14:12:1e:0a:e1:5c:23:c0:93:19:88:46:1b:02:68:2e:
ca:12:fc:eb:cc:0c:b1:7d:03:2e:55:c6:46:ad:74:0a:d6:d9:
1e:8f:26:ef:e1:aa:85:0f:d1:d8:d9:0a:e0:22:bb:09:10:dd:
46:92:b1:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E1QUYxMTAvBgNVBAUTKEYzRUJCRkI0QTkzODBGRTA5QTU2MUZDNkFGQTJBMUND
MjE0ODg2MTEwHhcNMjYwNTEzMDYxNzAxWhcNMjYwNTIwMDYxNzAxWjAYMRYwFAYD
VQQDEw02YTA0MTc1ZC1hNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoMxQcar/P+8qJO4dBjZYtJzOhoLsEnWHhZlc7q8Bo55YsUk+9oKRBe2/T8Wm
9PtQUIsTpbff9Ox16dexmATXQS9B8v2zGtaBEj6l7AWj7/lIaUXjySMWedA/vHGb
lPxx2ZemrMDl5HJfadbgpNLOax+mG5JR61PbjEUtTQCshwzlscRbBhfkitUpTp0/
RwkXmVJLd+/K7iVBo7EqDCFG/Trj4SQrb7vLFWrV4RxmDpvF0+uhVjOEL2jX6rby
lkn4oNAO9RgWaZR+8e50kZ6rPTEnLGHGawBZwwMDHqCNoU29kg00awU/k5gfd4GT
XVv+G2djH7HdD2zDIf8QKTPzcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM57Yoje
KyQelXJGy2On5PGE/cdGMB8GA1UdIwQYMBaAFPPrv7SpOA/gmlYfxq+iocwhSIYR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVBRi84OERCQTk4MkNC
QzExMUVGOUNEMTlENDRDNEY5QUUwMi84LXVfdEtrNEQtQ2FWaF9HcjZLaHpDRklo
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWhoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTVBRi84OERCQTk4MkNCQzExMUVGOUNEMTlENDRDNEY5QUUwMi84LXVfdEtrNEQt
Q2FWaF9HcjZLaHpDRkloaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASPFZsTu9gNfXLNb9UjlXYRyT95gm4bzx0S8vs99cmpCb4gp8E2SFv1maImMA
W99iurZU4/rsElfyrYiHKpdvdHjedUz3n5RsVUmEDqPPym5nzZcY68qE679hfUZZ
0yPSC5BYWoR4x1+nPQRjn+9RlKxDYb605JAQLFV1C5LxIxMIR5Q2xyk26FnmtbtW
PxJZbU/5tn/BzT4KFe17zcTyYRrTbnxAV7v5mUU1DueOjLusTO1Fajgav+wHsqCy
/6fwcJ/sQeL1T1EUEh4K4VwjwJMZiEYbAmguyhL868wMsX0DLlXGRq10CtbZHo8m
7+GqhQ/R2NkK4CK7CRDdRpKxcQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:13:43 2026 by rpki-client