
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
File: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json)
Hash identifier: rJK3KnK/S7w42gGqKuOFAAGk6Q2my/xjUizvP5oH8O4=
Subject key identifier: A1:05:2B:12:C1:7E:63:42:E6:53:33:26:5B:BD:11:6D:DE:0F:90:DC
Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05
Certificate issuer: /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
Manifest number: A2
Signing time: Mon 11 May 2026 07:34:17 +0000
Manifest this update: Mon 11 May 2026 07:34:16 +0000
Manifest next update: Mon 18 May 2026 07:34:16 +0000
Files and hashes: 1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: hQpzlM9kxKDygwncEtnlxSUNfQoOoNDOMWqdQceuowI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl
rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
Validity
Not Before: May 11 07:34:16 2026 GMT
Not After : May 18 07:34:16 2026 GMT
Subject: CN=6a018679-611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:1c:a2:af:9c:1d:25:5f:d1:fa:6f:64:60:
31:be:41:80:52:08:42:0b:cc:b0:91:b7:bd:9d:2f:
87:23:68:3e:c4:03:bd:e6:71:25:b5:78:98:a7:39:
2b:c7:a0:fb:39:00:da:64:bf:c8:35:da:7e:07:f9:
3a:6f:0b:13:d3:97:1c:20:be:59:57:60:b3:82:f8:
ad:2e:c7:89:bc:f2:56:f6:dd:10:27:5d:5e:32:1d:
a2:7f:ee:89:f6:a7:54:1a:fa:ad:ec:89:21:2f:e4:
97:7c:91:e2:d8:a1:ba:ee:b5:77:a2:51:50:25:f4:
e4:a4:68:26:2b:bd:8c:77:1a:66:6f:2a:04:7a:e0:
8f:8b:69:c9:fe:99:ab:e4:1a:b8:12:76:ba:4a:e9:
c7:7e:80:50:d0:13:82:7e:b1:92:6a:67:9d:21:2c:
1b:13:47:ed:42:1f:ba:14:46:94:56:37:8f:25:dd:
ba:73:3f:f7:ad:be:d4:00:1e:a3:a1:f2:b6:9b:96:
fc:22:4f:5b:59:dd:d9:4c:15:4b:aa:83:d3:ae:2b:
64:ed:bc:3c:79:75:1b:5e:76:3c:f9:fb:12:0e:c6:
ed:03:51:07:82:75:d4:cc:4b:11:07:d9:d1:3b:2a:
24:db:e2:d4:db:88:30:d9:12:af:dd:49:75:12:ce:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:2B:12:C1:7E:63:42:E6:53:33:26:5B:BD:11:6D:DE:0F:90:DC
X509v3 Authority Key Identifier:
keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:33:dc:e1:96:04:66:ff:4e:28:40:cc:ef:bf:63:60:d3:bc:
1b:12:01:1f:16:1a:12:7c:ee:b0:2b:63:68:cc:72:32:81:43:
ef:93:36:dd:0d:21:09:d2:56:9a:34:19:5f:fb:f1:4a:ba:4a:
d2:a7:53:24:56:20:e9:af:48:0d:fe:4c:92:c9:0d:ba:bf:0f:
9a:53:cb:01:9e:fc:22:4c:18:1b:d2:cb:8d:6c:d3:0f:52:98:
c3:a4:21:f9:e4:a2:16:38:d7:9e:27:f6:34:d6:db:22:00:cf:
72:e1:73:43:b5:0e:b5:b2:c0:9e:bd:23:75:77:17:32:d2:cf:
8d:77:c9:99:30:aa:fc:bd:7e:c9:13:55:34:f7:8b:db:55:ea:
74:45:5b:2f:e9:8a:7d:22:81:19:f4:d0:49:9f:c8:2a:71:d2:
af:9b:26:2f:f4:f3:91:bf:30:b5:b0:75:d3:8c:e4:12:0f:33:
c8:e8:be:0a:34:8f:71:b0:e3:14:ec:9a:f8:0b:16:03:0d:ee:
5d:07:e0:7f:50:ae:56:0a:17:cc:2a:75:a1:71:0c:ec:84:e9:
5e:dc:51:ee:33:ca:49:51:70:bf:c4:9b:86:c5:c6:93:5b:73:
55:d1:8e:aa:c3:9b:8f:e0:8b:51:88:56:0a:4c:39:60:cf:96:
d3:51:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:34 2026 by rpki-client