
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: P6LqzB0Ao0jhph4CeuXQB6xDzhwotiFHc2JL63tZ0/k=
Subject key identifier: BE:78:E5:3D:6E:DB:DD:0C:EA:B2:0C:84:CA:7C:A2:F2:A7:32:50:3F
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 043E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 0437
Signing time: Fri 25 Sep 2026 00:04:34 +0000
Manifest this update: Fri 25 Sep 2026 00:04:33 +0000
Manifest next update: Fri 02 Oct 2026 00:04:33 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: +0MGTp6BtSa50o4VAXoebJUjkLXufXCgv8vu3lvRsgw=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: GmrvF9q2dTq3b8GyefG/oexNHNjvwnXO2pwjnxyLh6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086 (0x43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Sep 25 00:04:33 2026 GMT
Not After : Oct 2 00:04:33 2026 GMT
Subject: CN=6ab5ba92-b4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:1b:40:58:14:f9:70:1e:10:26:f5:4a:78:
1e:59:84:97:82:eb:62:20:3c:15:4c:46:3b:62:0f:
06:5c:e3:bb:b0:97:e6:86:7c:39:42:34:a7:9d:02:
4d:b5:c6:c6:fc:7b:f6:54:15:13:bb:ef:80:7d:04:
61:f7:d0:c7:61:26:e3:49:6a:cc:b2:5f:7c:0a:21:
f4:c8:76:5b:e5:2d:68:fc:b2:94:2e:ad:2c:bf:e2:
51:2e:19:98:eb:d0:53:0f:61:21:d8:92:73:9c:de:
6b:10:f7:ba:71:8d:67:1d:60:07:c9:70:02:ce:02:
16:98:d0:7b:c1:13:f5:01:d0:a7:9d:b7:a9:f0:5f:
f2:02:76:fb:10:41:a7:67:55:d1:3f:79:e3:b3:b9:
8c:aa:f6:42:53:ae:dc:47:84:60:e3:4c:85:e7:71:
3d:1e:44:40:65:e0:59:16:43:c2:44:4e:7a:bc:2d:
1f:8b:33:9e:cd:f6:17:51:a0:cd:06:ab:69:7e:26:
14:37:14:9b:ab:27:4c:d4:af:55:c9:aa:f5:85:b2:
87:f8:05:01:fb:2d:d1:9c:1e:36:f8:93:b0:e9:06:
09:63:df:bc:d8:f0:4f:2b:8e:62:ed:6e:66:b8:65:
6d:0b:54:89:9c:de:4c:16:6b:90:2c:d2:9d:36:88:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:E5:3D:6E:DB:DD:0C:EA:B2:0C:84:CA:7C:A2:F2:A7:32:50:3F
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:ce:44:17:1b:ab:99:ea:01:f7:42:c4:0b:0c:0d:81:31:
8b:b2:54:8b:a2:2b:2d:27:c8:77:dd:2f:33:12:a6:09:98:25:
1e:52:cd:60:d0:0f:35:a5:36:7a:68:39:04:a6:37:55:ad:29:
37:86:dc:7c:6f:a9:65:9a:ff:2b:48:da:78:b4:e2:2a:cf:bc:
01:ca:91:13:8b:0a:25:1d:3f:a7:c3:6c:0f:5a:fc:33:de:52:
98:01:cf:0b:3b:4f:3b:43:df:a8:8d:1f:14:a2:0e:93:73:89:
40:03:f5:0f:4d:95:94:72:8e:69:a2:1e:93:a5:ff:a3:77:8a:
1c:c2:c4:63:ce:ff:b3:15:3f:90:2e:d9:1b:b4:70:86:02:0a:
4f:ac:38:97:d3:e0:c1:1e:fb:d8:73:c4:73:40:d9:1a:0f:6a:
48:f7:43:bd:63:23:22:3b:cd:b8:d7:21:1b:2c:bb:06:1b:a3:
94:5b:65:04:5a:df:d5:9d:7c:e6:3c:53:ab:99:cd:30:c0:96:
59:e6:6c:4b:2b:4e:1b:0c:de:89:d1:a6:32:27:d3:80:7c:14:
f4:36:3f:5c:c2:fe:af:1e:b3:56:7d:22:25:25:ef:a9:ed:7e:
ad:90:a8:4a:1c:d4:a8:24:c0:b7:cf:6c:f3:3f:14:82:f6:2a:
b0:4c:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:34:46 2026 by rpki-client