
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json)
Hash identifier: LfC1ePV16wqOXj9DB7a2kDO3GAsJgBMo5QHuaw/zRGk=
Subject key identifier: 30:1D:36:F9:5D:C4:FA:85:CA:BD:23:54:64:C0:64:A0:5A:C2:3A:D4
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
Manifest number: 017B
Signing time: Wed 23 Sep 2026 04:34:05 +0000
Manifest this update: Wed 23 Sep 2026 04:34:05 +0000
Manifest next update: Wed 30 Sep 2026 04:34:05 +0000
Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: o7ka8dx2686ZfvV2R2a/ihoEUgX5L+gUcFqM8L+ax7w=)
2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: QsghawO4aYI/tRCC8XaX48xeNh6NMLZfkXMfCLwX9S0=)
3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: BNw54ourUE+j9qMXjxmgsD1rJcXCowGw6fh8YI3ahFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Validity
Not Before: Sep 23 04:34:05 2026 GMT
Not After : Sep 30 04:34:05 2026 GMT
Subject: CN=6ab356bd-b167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:83:44:ed:58:90:c2:b1:f0:c9:7c:b5:58:
56:99:57:74:29:84:69:58:a3:1b:f3:f3:00:65:93:
c5:7d:c0:02:71:1d:bb:03:9d:4d:70:90:35:1e:45:
d4:38:bd:dc:f4:b3:ae:49:62:11:42:e1:57:0f:96:
20:f5:7d:9a:f1:fd:4b:96:99:3e:0e:a7:2a:65:50:
6f:3b:db:34:93:bc:20:19:9e:cf:c6:35:95:d3:4f:
0b:ad:f4:93:7f:c5:e6:da:e2:87:e7:e3:93:4e:44:
7d:95:c0:60:1a:e2:94:96:fc:e1:53:9b:bd:62:eb:
81:e9:bb:27:22:c5:bc:a4:a6:c8:02:6f:3d:9f:de:
78:52:82:84:ee:13:72:c2:4c:ea:8a:4b:8c:3b:b3:
ab:9d:2a:e9:cb:ec:02:ee:04:ba:94:d3:a3:f1:eb:
c4:6a:29:55:70:2f:9e:c1:30:54:33:b7:a9:a0:fb:
2b:b2:a2:20:dc:7b:bb:53:84:a9:44:a6:cf:a3:6c:
0f:b4:54:5b:d7:8f:ca:bb:a2:ca:78:af:15:98:c0:
c3:5d:ea:cc:6a:62:e1:bb:e7:ca:83:3d:d8:0b:e6:
41:e5:40:31:9a:9b:02:a3:bd:9e:60:13:f7:7d:8c:
e8:f7:77:df:b5:89:bc:48:75:08:0a:d0:fd:b5:ef:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:36:F9:5D:C4:FA:85:CA:BD:23:54:64:C0:64:A0:5A:C2:3A:D4
X509v3 Authority Key Identifier:
keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:44:ed:b8:0f:1b:a0:74:cf:34:1a:44:6f:f1:27:57:10:58:
55:8d:44:01:fe:73:35:c0:42:e1:20:a3:9b:f2:86:d2:9d:7b:
88:62:13:37:54:a1:e1:30:40:e3:45:03:9a:30:ad:b9:59:ae:
ba:28:b4:0d:91:09:2a:8c:49:80:eb:d9:a4:80:27:23:5d:8e:
b0:9c:8b:9b:ca:21:e2:d8:a2:b2:4b:2e:9c:94:4d:dc:1c:c1:
32:13:be:a1:14:1f:7c:fc:ac:79:e7:28:02:0e:bb:cd:3f:04:
b9:75:cb:aa:33:db:89:b9:36:d2:ce:54:a0:ae:51:49:4a:58:
2c:e5:77:dd:d9:ed:a9:b4:cb:50:79:6a:78:83:df:53:74:b0:
fd:cb:f5:c4:41:3c:e8:b1:ee:ee:0e:ca:13:5d:af:7b:84:a2:
f9:ab:1b:33:2c:a2:51:72:d0:8f:61:d1:cf:15:7e:04:f3:ab:
44:e4:b7:62:a8:05:02:98:44:20:db:03:a9:24:71:43:ba:c8:
8a:e3:e8:58:66:0c:9f:1e:bd:bc:94:59:69:e0:95:10:5a:99:
dc:0b:4a:88:84:08:b8:01:82:ee:2a:47:ca:7b:15:0e:78:aa:
d3:93:df:e8:e1:dd:7e:b2:a0:44:22:89:45:00:24:38:b7:a7:
2b:d9:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:44:41 2026 by rpki-client