
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: x2saS1vjzEBn0pKYBm2XL9+6zXN2ic8Ii8HDtGz4vwo=
Subject key identifier: BA:40:1C:71:1B:A6:18:F7:D5:7C:BC:23:39:E0:FB:2B:CA:C7:09:07
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 01EE
Signing time: Mon 11 May 2026 03:21:00 +0000
Manifest this update: Mon 11 May 2026 03:21:00 +0000
Manifest next update: Mon 18 May 2026 03:21:00 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: asYlTGxxWS2zwFMGX7CRPR4gTCxZWbk0n2WW8q0CPOM=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: GuG6Y8Eu3CcfCqJ6rXqMTfXfwCt0ckJ+Jr8hqV3ee88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: May 11 03:21:00 2026 GMT
Not After : May 18 03:21:00 2026 GMT
Subject: CN=6a014b1c-7d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:9c:7d:3c:8d:d6:82:b2:22:6f:d1:d7:c5:
b9:84:ac:8f:06:a9:29:dd:30:f1:07:7f:1d:c7:ed:
08:f9:5b:d7:11:e9:fb:37:20:2e:8d:e5:33:92:dc:
2a:ee:e3:2a:30:b1:60:0f:29:c3:a2:9f:a9:0c:ea:
e5:7d:41:67:21:c7:b9:c2:53:ac:cf:e8:14:33:48:
e5:3f:b2:48:a3:3c:a6:2c:39:f5:a0:9e:0f:81:9f:
45:c7:ff:ad:7d:cd:97:58:65:66:0f:ac:7c:1c:18:
09:f4:42:b4:76:3b:6a:93:97:06:de:ee:83:49:d0:
c3:7d:d2:0e:58:fb:10:09:dc:ce:26:db:d9:57:51:
35:d0:5f:50:dc:43:d1:3c:16:d9:8b:44:ad:a8:2b:
a0:50:82:71:af:79:41:df:1f:32:0d:3c:d5:29:8b:
45:74:85:09:a4:af:b8:73:ce:96:bb:ae:fd:e1:00:
b8:a4:65:14:60:75:a6:51:e1:91:a2:52:69:a4:62:
34:dc:80:e8:e9:3f:3c:c9:91:f7:83:64:76:40:e7:
43:17:c8:13:7e:2b:83:20:5c:25:e2:ed:af:60:1d:
01:f7:fd:7b:71:b7:be:08:70:94:bb:b5:a1:e8:56:
eb:ea:18:b4:df:83:e0:c2:44:28:7e:57:f2:4c:34:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:40:1C:71:1B:A6:18:F7:D5:7C:BC:23:39:E0:FB:2B:CA:C7:09:07
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:70:5a:c1:d8:23:fe:11:7f:7c:3a:24:c3:d7:4c:79:4f:c8:
e4:69:df:d8:a7:7a:54:ca:bc:3c:21:b1:67:2e:f6:55:4e:cc:
73:46:aa:4a:24:cc:4e:7d:7f:17:1a:fe:ba:35:b0:12:5b:b2:
0c:0a:d3:d6:b2:d8:7c:75:7b:21:a1:1d:12:72:62:27:51:59:
78:e1:f4:32:ec:90:66:77:ea:31:bb:8c:76:44:01:ee:0d:84:
80:55:b4:3c:9f:c2:b8:a1:ce:34:dc:54:b3:35:8f:f7:4a:bf:
39:d7:e7:03:b1:b8:40:ca:d0:6c:dd:7d:15:f5:16:32:66:03:
2a:35:bd:fa:ab:6d:d0:03:65:0c:e7:dc:82:40:68:36:a4:bf:
71:6c:bd:32:f8:f9:63:b7:31:28:24:08:29:11:c9:57:6d:28:
5c:73:40:8e:e8:68:96:68:81:cb:4d:fe:f8:ee:e5:1f:ce:db:
e2:11:dc:fa:5f:6b:60:d0:77:c3:62:c3:56:b9:fd:8c:4a:ff:
67:a8:6a:07:2c:a2:af:48:77:ab:69:3b:78:29:ec:32:72:25:
a6:c4:46:e8:02:71:cc:60:9d:92:df:2f:a3:c1:a8:77:bf:6c:
5d:88:54:ef:ff:5e:1e:90:51:12:ca:9d:97:33:11:24:ce:d3:
c5:df:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:54 2026 by rpki-client