
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: lpsfKCknkgf/KS08clxtNkLe6TejeHghB0NYn6GlKUY=
Subject key identifier: 61:11:30:19:71:96:CD:F8:99:3C:8F:72:BB:09:6B:7C:4E:91:A4:E0
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 024F
Signing time: Sun 15 Nov 2026 02:34:02 +0000
Manifest this update: Sun 15 Nov 2026 02:34:02 +0000
Manifest next update: Sun 22 Nov 2026 02:34:02 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: H1woGiehsZxqVwulxjjBwUIawYmFntXiN37yBkTl/rI=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: vNfsLMgj6FIGb8F95RS1g08xcjRW3XjTHmN+wXU6cGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Nov 15 02:34:02 2026 GMT
Not After : Nov 22 02:34:02 2026 GMT
Subject: CN=6af91a1a-97af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:b9:59:4e:f3:2b:5a:a5:2a:9a:23:f1:f6:
a2:b4:a6:4e:29:b4:05:a3:5b:6b:96:4f:3c:6b:00:
75:8c:44:e8:4f:62:70:72:eb:a5:99:4a:05:34:d5:
1d:46:60:b5:43:80:43:fa:b5:be:83:87:aa:89:01:
4f:e2:50:27:df:09:3e:d1:52:65:4d:60:13:f4:35:
c2:0a:af:70:a8:3e:38:40:52:3c:71:e3:0b:ab:24:
33:08:d3:cd:1e:54:f2:0f:4b:3f:8e:fe:88:fc:1e:
59:53:a3:c0:eb:b1:c6:1e:4c:c8:0b:8b:67:18:e3:
fd:0d:cb:23:82:70:f9:ca:a2:88:46:29:40:a5:84:
24:20:d7:2a:b4:e0:ce:53:5d:cb:0a:a1:02:81:80:
3d:f4:a2:41:e2:e5:c9:fa:1e:9c:0f:64:46:c3:29:
6d:e9:de:c3:a7:cb:ad:cf:18:be:83:e7:64:39:dc:
ba:41:34:91:e0:eb:bc:af:5b:78:19:29:66:a8:da:
95:2a:16:cb:c5:b8:cd:93:bd:32:1f:7a:8d:99:8d:
d0:a0:98:1d:88:1a:b7:bb:e5:e0:01:d7:d8:28:79:
6e:ef:b6:41:02:17:1e:73:c8:28:ac:99:33:0c:4d:
65:2a:6c:0d:11:b7:13:4c:7a:3f:72:ea:c2:dc:72:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:30:19:71:96:CD:F8:99:3C:8F:72:BB:09:6B:7C:4E:91:A4:E0
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:10:01:75:9d:b9:6a:dd:b1:00:ca:ce:cc:34:01:df:34:18:
74:8d:33:91:28:03:9a:d7:89:24:eb:f5:ae:21:dc:a0:4a:ca:
15:ae:3d:6a:04:33:13:91:3d:54:85:17:e7:7f:79:e1:a0:23:
74:d9:21:21:15:24:0e:f2:43:0a:71:16:26:55:94:ac:77:e7:
ad:bb:c6:bf:c0:cf:23:ef:9f:47:c4:fd:1c:8c:d7:f6:71:c4:
9e:fc:f2:90:73:51:90:15:7e:f7:02:9d:d3:2f:a4:2e:a1:15:
6f:a8:4c:26:06:db:34:f6:68:f0:d7:26:75:97:17:15:57:87:
7b:ec:f9:fe:23:a0:32:31:6c:ce:09:e3:56:18:2a:77:bb:34:
20:85:69:6d:6b:a0:b7:6d:03:38:3a:6c:a5:da:fd:f5:08:81:
dc:63:62:43:31:f5:cd:6d:6c:1d:41:49:e1:c1:55:8d:5a:9b:
33:f5:e3:22:73:9f:c7:fb:75:f5:9a:ae:e4:e0:8b:75:14:2b:
e0:89:c8:86:13:d2:90:ee:9b:fc:16:f2:38:69:d1:19:38:81:
85:38:0f:75:ff:2a:6b:a4:8d:3e:10:ef:36:41:a2:d7:6f:0f:
d0:41:27:40:58:21:44:69:4f:b9:13:1f:b1:98:98:05:12:86:
93:19:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:36 2026 by rpki-client