
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
File: 83g6eIBQ7px-F4lbU93tZGqSTEA.mft (raw, json)
Hash identifier: g88pOC9gPA5MogbTZ0CSJUk83woVYPt7RoTwRTgLu3I=
Subject key identifier: D6:8D:D1:6C:2C:26:7A:1A:0F:48:45:05:43:D4:9F:62:72:DA:09:A7
Authority key identifier: F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
Certificate issuer: /CN=A9158019/serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
Manifest number: 08
Signing time: Wed 25 Mar 2026 08:21:34 +0000
Manifest this update: Wed 25 Mar 2026 08:21:34 +0000
Manifest next update: Wed 01 Apr 2026 08:21:34 +0000
Files and hashes: 1: 83g6eIBQ7px-F4lbU93tZGqSTEA.crl (hash: xaVviKg1Ag8XzEFqfh4BARl7EvktmzIEPfvBDNJi57w=)
2: 100C3F1E212211F18A5869CB2A3D8C67.roa (hash: IMdiCehXyYtBy9e96FQHmcfQXtXWDXRFaUL7xCwpfWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158019, serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Validity
Not Before: Mar 25 08:21:34 2026 GMT
Not After : Apr 1 08:21:34 2026 GMT
Subject: CN=69c39b0e-31c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:01:5c:64:3a:e8:3a:6f:84:9d:c6:8b:0f:
63:1f:09:48:28:1c:c9:6f:0a:b9:d0:7a:ea:63:04:
a5:61:4e:26:66:bb:39:25:67:96:91:11:f3:e4:12:
b2:5e:85:e5:3e:2c:4e:54:22:41:4f:66:55:b2:8a:
94:37:94:bf:b6:b1:04:f4:19:a8:f1:af:bc:02:83:
d5:82:4a:5d:06:6c:e5:eb:0a:ef:17:48:db:b5:17:
36:48:a8:4b:56:72:2a:b0:e2:30:4b:61:d8:e3:8b:
20:04:89:c4:5a:a7:6d:7c:a9:50:d9:03:08:b0:22:
49:dd:a3:2a:ef:e0:9b:32:52:e2:37:fe:a6:dd:ca:
31:1c:78:b5:12:ec:f3:40:9b:0b:73:de:1e:b4:df:
a0:5d:37:bf:2b:08:77:f6:e6:09:53:66:c7:b9:f4:
8f:8e:69:2a:38:71:39:5e:04:86:1e:9b:43:52:25:
e0:21:cf:50:ec:44:3d:27:97:70:fe:7a:99:2e:71:
da:85:55:cc:f5:a4:17:78:f0:5b:1a:3f:38:e5:15:
d7:0d:50:d5:e1:05:70:7c:59:a0:26:dd:03:66:a2:
e1:cf:35:18:d2:91:97:0e:18:d8:e0:b9:70:fa:77:
75:fb:88:7e:7b:3a:03:84:86:9d:88:f3:51:20:c3:
d4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:D1:6C:2C:26:7A:1A:0F:48:45:05:43:D4:9F:62:72:DA:09:A7
X509v3 Authority Key Identifier:
keyid:F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:5b:3d:1f:a8:ec:f2:77:0e:96:7f:24:3f:90:11:36:0e:4a:
38:33:f7:ed:d6:eb:c3:48:8d:db:94:ec:4c:79:66:69:3e:c8:
4f:e3:1e:4a:39:f0:7a:29:5d:14:50:c1:d2:02:87:7b:90:fe:
bb:55:30:dc:cc:65:22:f0:b8:74:f6:29:e0:4c:b9:1e:43:c7:
1c:78:02:b1:a8:5e:d6:8a:68:3f:fe:a5:4f:e1:e5:d2:c3:2a:
8a:73:53:51:03:73:da:f3:c1:34:e3:87:60:d5:98:4f:85:0f:
0c:02:2f:d5:c5:ad:72:7e:6c:4e:d8:4f:c8:c9:b5:0c:df:45:
43:b3:5d:0b:e2:1e:e3:8a:d9:61:d2:c6:fd:8b:f5:06:b7:ef:
f8:a8:5c:84:a4:13:33:74:9b:51:1d:df:f0:55:92:73:af:81:
34:31:d6:c5:51:6a:22:6d:03:93:40:3b:bd:4f:bc:8a:e0:7c:
e0:5c:6e:2a:9d:64:6a:09:fb:ff:d6:d0:63:cb:f1:84:68:0f:
d4:17:08:a6:44:f5:fa:86:06:ee:e8:ee:bb:ff:f2:49:2b:23:
66:df:b9:00:54:58:63:26:95:bd:90:01:b8:41:da:2a:c5:96:
ad:2f:ba:84:c7:e2:e4:de:f0:70:d8:1e:15:32:f5:23:fc:e4:
9a:13:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:32 2026 by rpki-client