
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
File: 8bck5A2FxU9R1iHHL4lskXXJsRk.mft (raw, json)
Hash identifier: MCnySzT7KIjzyFGXaY2y2tycIBwa0IrGs5ZGF6JSBsw=
Subject key identifier: 31:2D:33:77:9F:3A:7F:75:47:4A:A9:33:B8:D4:C1:9E:51:28:8C:72
Authority key identifier: F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
Certificate issuer: /CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Certificate serial: 0ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
Manifest number: 0AB8
Signing time: Tue 12 May 2026 19:32:08 +0000
Manifest this update: Tue 12 May 2026 19:32:08 +0000
Manifest next update: Tue 19 May 2026 19:32:08 +0000
Files and hashes: 1: 8bck5A2FxU9R1iHHL4lskXXJsRk.crl (hash: Te55EvGOELpLKlqnof6hvCf6xxvDFGOZieZESeU3k6k=)
2: 354725E6763311EABAE64466C4F9AE02.roa (hash: Q9E2SohQHAyGeXQSdbGe7wwkbtB6hL54JNkPQsa0EIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F5, serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Validity
Not Before: May 12 19:32:08 2026 GMT
Not After : May 19 19:32:08 2026 GMT
Subject: CN=6a038038-1b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:8b:94:44:37:55:7d:d6:6b:d5:bb:4b:f7:
a4:77:6a:48:ae:69:52:69:a4:60:21:82:4a:4e:91:
ed:97:82:94:0e:e8:cb:20:3b:44:8a:6d:3a:ac:da:
a3:d1:f8:69:a2:38:86:bd:1d:7a:93:ba:13:3c:4e:
c3:e2:9c:3f:45:66:58:1c:b7:7f:99:85:9b:26:b7:
d2:c4:9e:73:ef:ec:c9:db:f4:8d:52:a1:e1:b4:0b:
47:89:ca:3f:32:6c:46:4d:ae:ae:c7:06:92:f8:ae:
91:d0:52:56:86:7b:f4:d2:3e:e6:94:14:e7:8d:b5:
c2:a1:8b:bd:d6:4e:59:7d:ac:2c:92:53:50:4e:44:
94:51:46:36:81:8c:88:b1:19:5f:8a:bf:ff:19:0d:
d7:65:ec:01:fa:61:b4:b0:87:05:73:41:73:19:a4:
b9:f0:55:22:db:af:40:43:4f:d3:b1:d2:46:ca:8f:
22:ac:ca:98:3f:d3:4e:ca:72:b6:e3:91:8c:b7:4f:
20:3c:3a:3c:f6:a5:bc:07:6d:42:e0:e3:11:0d:65:
c5:ab:49:ba:5c:bc:41:19:e4:98:bd:50:f6:62:e1:
19:a6:72:06:f1:e8:2d:67:08:0b:37:08:b6:d4:c7:
71:c6:51:2d:96:1f:7c:19:ec:ad:d5:e6:56:66:39:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:33:77:9F:3A:7F:75:47:4A:A9:33:B8:D4:C1:9E:51:28:8C:72
X509v3 Authority Key Identifier:
keyid:F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:77:26:ca:51:e9:97:c5:1f:ec:c7:ed:35:9a:73:0a:ab:8e:
11:4d:a2:93:b9:84:d6:af:05:81:31:e4:6d:9c:42:b4:df:95:
be:5c:dc:96:fd:e5:6b:71:85:45:27:ef:8d:69:26:30:a4:cd:
07:b1:ca:e4:34:0f:35:13:71:36:c7:e4:75:96:05:3b:56:f9:
81:ae:d8:76:a1:89:b0:cb:9c:d1:eb:97:ba:36:9a:f2:de:94:
28:cb:3d:2c:60:28:a3:91:d4:e6:04:ae:e8:b2:a2:da:49:de:
05:a6:6a:a0:67:af:03:b1:9c:a3:f9:08:c8:eb:b1:84:aa:39:
a2:5e:e3:60:ee:6c:25:e8:89:af:d8:38:21:9e:f7:87:6a:45:
1c:8c:85:3e:2d:6b:5b:80:95:41:9d:17:03:94:37:04:dd:72:
e7:50:f4:32:e8:ac:cf:c8:6e:f2:eb:72:8f:4b:a3:5a:c8:38:
fb:85:fa:db:56:6b:24:eb:7f:a8:77:b4:d2:f2:13:24:fc:c0:
dc:bd:d3:ae:53:21:bc:64:55:43:fc:49:9f:66:c0:f8:c9:ab:
e2:24:59:d1:9f:97:b7:fa:ab:fb:56:e7:63:fa:8b:58:e7:46:
ca:8d:2d:6e:8d:04:20:4e:24:0e:96:93:72:6b:3f:80:5a:aa:
f4:22:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:08 2026 by rpki-client