
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier: AtWmQLvBhgub7jR+z3sMLOOIx3VHe4aqvEWR2785t+U=
Subject key identifier: 70:F0:E2:6F:82:A6:B3:84:27:D5:51:86:16:8B:39:B5:3E:4B:66:9F
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 0457
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number: 0450
Signing time: Thu 12 Nov 2026 23:55:11 +0000
Manifest this update: Thu 12 Nov 2026 23:55:10 +0000
Manifest next update: Thu 19 Nov 2026 23:55:10 +0000
Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: XBQAePGAIwJstRvPWpC76xw4gq58NXFBUzlVI9cKH4Y=)
2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: GmrvF9q2dTq3b8GyefG/oexNHNjvwnXO2pwjnxyLh6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Nov 2026 23:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Nov 12 23:55:10 2026 GMT
Not After : Nov 19 23:55:10 2026 GMT
Subject: CN=6af651de-fc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:45:02:37:0e:c8:9b:07:72:3d:93:7a:4a:
a2:41:0e:05:2d:c1:2f:f0:bb:a1:80:2c:db:d8:47:
ae:65:65:e0:9c:fd:05:42:98:83:3d:c2:fb:a1:75:
59:5c:ba:66:51:5f:e7:46:22:37:f4:0e:c0:ad:f5:
5c:6b:31:c8:de:a6:7a:0e:f4:7d:15:98:b9:7f:05:
a4:f7:f4:1d:40:47:4f:19:28:c5:c5:47:d9:8c:f1:
28:69:09:6d:41:d0:0f:76:df:95:6c:88:bd:d8:08:
3c:6c:78:4c:68:01:40:2a:10:71:c4:05:47:be:fb:
fa:c6:cb:01:e5:d7:a9:81:9c:65:62:15:08:bd:07:
a2:85:b3:e6:0d:8a:67:17:50:f4:b0:52:b5:6b:75:
7e:89:a8:9d:9e:76:91:14:e0:bf:6b:96:ed:e5:98:
8e:22:02:3a:c1:3a:d8:3f:55:34:c5:e2:ec:51:20:
e6:93:59:3b:18:20:3b:1d:9b:4d:04:70:88:f0:17:
f2:56:2c:53:ab:16:42:9f:a2:87:b8:50:ff:73:b7:
26:b8:25:30:45:56:8c:38:ac:2c:b9:57:88:b3:aa:
95:32:38:f9:e7:f0:d1:9f:fe:28:a6:f3:77:90:91:
f1:9d:07:b6:63:a7:c2:9f:47:7e:91:84:49:f1:47:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F0:E2:6F:82:A6:B3:84:27:D5:51:86:16:8B:39:B5:3E:4B:66:9F
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0d:99:da:48:9d:84:ea:38:5e:06:27:dd:36:7e:7a:be:31:
40:db:5c:84:38:d9:d6:ab:bc:3b:d4:6e:a2:d3:de:49:95:48:
9b:5f:8c:6c:61:63:67:99:87:6e:fd:a9:b3:39:b5:5e:de:2a:
23:8f:43:23:e5:81:c7:f6:57:65:ac:3d:7f:e2:16:47:7c:fe:
a9:ac:d0:99:c9:0f:74:cf:68:b4:1a:ad:bc:c0:2c:ac:aa:7d:
74:3a:b2:7a:11:21:b5:51:be:df:f0:a4:8f:83:ef:87:fc:cc:
ba:c2:a1:02:ba:e8:34:c5:79:e2:88:f4:b8:e5:40:42:10:e5:
bd:a3:05:fc:ec:b8:6d:fc:d0:a9:f4:d9:d1:be:b5:92:dd:7a:
5d:f4:96:18:31:88:d1:c2:05:29:a6:fa:23:d5:50:3b:3e:6c:
a0:af:c4:e6:e4:eb:00:fd:62:7e:67:be:75:e8:2f:1f:99:ac:
15:bf:3e:10:91:3b:60:c1:5b:4a:fb:ec:26:17:a9:10:22:9f:
74:01:0e:de:c3:51:60:0f:bc:42:5d:f9:bc:de:74:c4:73:73:
13:f3:11:d1:b6:d8:51:61:8b:24:dd:6c:51:8a:c3:8c:31:b1:
7a:d4:e4:a1:09:73:23:56:74:d5:33:f9:be:5a:39:51:71:ed:
d0:1e:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:16 2026 by rpki-client