
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json)
Hash identifier: lO+2Mu99jY6XtQoJ1P3zI9kyQfVxgjGGkZK3ouGrzpc=
Subject key identifier: F5:C1:C8:9A:3A:89:45:C6:43:44:E1:AA:83:37:9D:C0:B4:FE:61:A5
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial: 04E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
Manifest number: 04CD
Signing time: Tue 24 Mar 2026 23:32:59 +0000
Manifest this update: Tue 24 Mar 2026 23:32:59 +0000
Manifest next update: Tue 31 Mar 2026 23:32:59 +0000
Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: ZAktUjXiwU1NPPcNVUdniZ4pxUdLViqP5923dWHDMWg=)
2: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: opYG/THp6f3xNs9Il1aHZ0xQHhnpdVv74lxCqnBEIkw=)
3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: sj+k2CBEk9o8Kiy3NDbS/AgiJ7I778UPHLaqip2rU0g=)
4: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: 7M/BKi2irGP7xUYkb1R2uXaPgUqFTRpAka0mw8Km5ZI=)
5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: JiYJBdKkc4+24n7PEkPckVDCC3V1amNAGcKt36T/kNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Validity
Not Before: Mar 24 23:32:59 2026 GMT
Not After : Mar 31 23:32:59 2026 GMT
Subject: CN=69c31f2b-f93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:30:ca:6a:59:5d:37:40:b7:4b:38:7c:27:
29:fb:5a:69:7b:34:1c:34:ae:af:76:de:7f:8a:74:
37:24:18:16:aa:d2:1c:d6:f8:c9:d2:88:f4:53:f3:
b2:67:65:4e:d0:27:ed:6c:dc:a6:a4:17:36:ef:38:
a5:64:a5:01:fb:ae:d2:1b:08:a7:79:8c:bc:91:17:
fb:26:51:0c:62:15:12:54:2e:40:67:c4:0c:be:b7:
67:f2:e3:c0:6f:ff:15:d1:98:f4:79:62:d5:65:03:
a6:71:cd:9c:a4:4d:7d:65:98:7b:61:4b:2d:2e:42:
ee:ac:fe:da:90:e8:28:13:75:db:55:93:1a:30:ac:
2e:82:a2:8e:89:4c:5d:6f:82:e7:90:cc:df:78:11:
22:3b:df:76:29:a7:0d:b1:e5:d0:68:a1:18:20:60:
d5:41:26:30:aa:47:94:b8:ad:81:23:0c:46:85:cd:
68:83:30:ec:5b:2b:2e:07:d0:4b:53:86:18:38:ef:
b0:56:b7:75:9f:4f:e3:85:cd:ba:60:9c:ee:b2:e2:
55:04:59:19:17:c5:dd:c4:14:95:eb:b0:67:fa:f8:
59:57:7e:7c:6c:fe:f3:97:31:85:64:53:bd:af:43:
61:00:ad:21:47:da:2b:bf:c4:4e:cb:92:9d:6b:65:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:C8:9A:3A:89:45:C6:43:44:E1:AA:83:37:9D:C0:B4:FE:61:A5
X509v3 Authority Key Identifier:
keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f5:17:fa:84:c2:a4:3c:8f:02:4d:c7:a9:87:a0:91:5d:02:64:
c4:74:3a:c3:8d:5b:dd:ac:eb:85:f4:6a:1e:51:77:55:83:02:
51:9d:86:d7:d4:10:be:5b:64:3d:a5:e7:29:3f:fb:61:db:ed:
0d:72:7e:ae:9d:c3:53:4c:76:f6:0e:af:b9:e2:c0:21:4b:18:
de:dd:21:e0:35:b6:5f:74:ad:ed:a9:ec:33:e3:eb:63:e3:42:
64:61:ac:bd:67:ff:1e:18:a2:9c:c6:46:e9:55:8a:d5:7c:81:
3a:d0:0f:b2:19:2e:ac:40:2c:fa:44:e0:65:c2:b0:70:bb:06:
b9:52:57:35:04:ca:58:68:58:40:69:0a:f3:96:e9:ee:be:42:
1c:8c:35:0d:0e:65:29:ff:17:ef:01:39:41:4c:d6:8d:cb:f9:
9c:8a:b7:24:3d:dc:7d:ef:91:74:da:d6:4c:98:3b:15:62:a8:
fa:09:ef:a3:0d:47:04:07:64:4f:27:eb:c8:36:ef:79:50:9b:
e2:69:4b:46:30:9f:cf:55:c9:f9:c0:ed:f4:21:40:76:08:b9:
3c:c5:74:79:a2:21:3b:73:f6:0f:b9:a3:6e:0b:73:41:55:41:
c5:ec:a0:78:49:e9:cd:9f:30:38:2b:b6:f0:7b:df:95:e6:98:
4c:b8:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:21 2026 by rpki-client