
$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json)
Hash identifier: nXKhJ150/kwhBZGOiRWanBxiWiEMvJ8myoZe/QlK4Ok=
Subject key identifier: BE:C6:1C:95:13:12:99:C8:B6:8C:25:77:BC:8F:30:B0:DF:11:43:3D
Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Certificate serial: 08A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
Manifest number: 088D
Signing time: Tue 12 May 2026 20:42:35 +0000
Manifest this update: Tue 12 May 2026 20:42:35 +0000
Manifest next update: Tue 19 May 2026 20:42:35 +0000
Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: rsNHiCvlsAZEYOWZYGEtblUxpgpozdA/4I0lFwZcXmU=)
2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: j8uiQ1yAgz9ZEp0DuVyDJIgNZ2YjQcOMmdmTSIrRMPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Validity
Not Before: May 12 20:42:35 2026 GMT
Not After : May 19 20:42:35 2026 GMT
Subject: CN=6a0390bb-a209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:3b:6a:6b:f6:1c:e7:35:c0:91:28:4a:0a:
2b:97:bd:cb:ba:6c:85:3b:ce:0e:7a:ea:b8:fd:67:
32:52:15:3d:91:a4:2a:57:2a:a8:4c:fa:4c:ba:16:
94:f2:34:0a:86:71:a8:d9:e4:1e:7e:1d:de:13:c6:
be:83:39:73:74:e0:4d:dc:fa:26:71:9a:62:58:08:
05:7a:38:46:b9:de:32:4e:41:40:c0:79:8f:7a:7a:
02:62:92:f8:e6:e9:81:83:9b:17:3c:0b:cc:1b:7c:
aa:53:a0:7d:cb:ed:07:10:ed:a9:8f:b1:c2:02:44:
9d:e9:01:ef:27:e7:f6:02:29:9a:9f:e6:a4:50:b9:
bc:00:22:55:12:63:e5:0d:a5:61:dd:3e:cb:b2:0b:
f8:c8:bd:39:19:f4:d4:21:ff:ab:65:45:d0:cc:00:
5a:0e:36:f3:13:c6:7f:3d:0f:50:a2:52:46:e6:30:
ae:57:17:33:54:69:2b:94:99:e6:a6:8c:71:bc:ea:
28:ea:25:2d:17:93:a0:a2:02:d7:63:11:66:af:42:
4a:11:6d:46:3d:3c:1b:ac:8a:17:7d:4d:39:c1:08:
b9:3e:ed:6d:a5:62:47:89:15:55:e5:ca:ce:96:d2:
d3:60:29:30:eb:12:89:d2:6e:5c:20:ee:28:c3:27:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:1C:95:13:12:99:C8:B6:8C:25:77:BC:8F:30:B0:DF:11:43:3D
X509v3 Authority Key Identifier:
keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:d9:44:51:92:38:89:ed:a8:0b:6a:0c:47:9a:b5:98:a7:00:
d0:e3:4d:b2:a3:39:e6:34:e8:02:83:49:1d:70:28:c5:48:93:
61:ca:a7:37:c4:a3:26:05:34:7e:7b:52:4c:81:36:91:27:59:
8b:b3:79:be:94:b0:aa:7b:41:3b:64:25:e4:33:b6:0c:28:3e:
61:24:0a:2a:8e:93:10:b7:c5:d8:23:5c:19:89:42:e2:03:8a:
c5:2f:6a:eb:21:1e:12:3f:65:a8:12:8d:5c:b3:ec:44:88:bc:
1f:e0:55:92:37:c8:76:ab:97:53:a8:ed:78:37:aa:19:bf:d9:
d3:17:bf:7c:f4:63:8f:7a:71:00:65:fb:c2:1c:c6:51:88:0d:
14:7f:96:7c:7e:f4:24:70:de:16:91:94:61:c7:44:bb:61:c2:
a4:61:27:67:71:93:44:5f:52:d6:a6:f5:10:9e:2e:78:dc:86:
11:c5:60:8b:e6:5e:bc:7d:9e:d6:50:27:8c:f6:0c:9f:e3:91:
88:dd:4a:83:90:c8:24:9e:dd:89:f8:26:67:3d:8f:07:04:a9:
28:5a:a0:65:b7:f2:c4:18:18:39:65:8f:9f:8e:19:c0:ce:98:
f7:54:d5:f0:28:34:18:2c:95:dd:2d:08:48:45:bd:af:67:fe:
5d:75:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:14 2026 by rpki-client