
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier: wDZMU1OKg4LAu1v8/Tv1r9k5tqi89VPzGIqSm6FIYZU=
Subject key identifier: 2B:A1:E4:FB:28:BD:35:44:E9:90:8B:6B:7C:37:82:78:ED:49:C9:35
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial: 051B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number: 07FA
Signing time: Thu 23 Jul 2026 00:27:11 +0000
Manifest this update: Thu 23 Jul 2026 00:27:11 +0000
Manifest next update: Thu 30 Jul 2026 00:27:11 +0000
Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: 1b9mLNMUe+t/kW0RNhrvJzMsV3NKNE5s1WmCcZLM7P0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1307 (0x51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Validity
Not Before: Jul 23 00:27:11 2026 GMT
Not After : Jul 30 00:27:11 2026 GMT
Subject: CN=6a615fdf-1cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:8d:3c:f6:41:ea:ab:da:f5:43:d4:2e:8e:
7c:9f:41:fb:47:dc:53:9f:a8:8f:05:d8:a2:f1:85:
00:44:5f:8c:5e:e0:fa:2c:9e:c9:67:29:84:6c:00:
dd:b8:37:98:23:0f:44:3a:0e:9d:09:19:95:c6:34:
95:4a:e3:be:71:62:31:44:ac:c6:e8:91:94:40:84:
90:d8:3c:e0:69:9f:0b:3b:28:3c:5a:99:15:c8:dd:
a4:74:94:7b:ff:e4:ea:51:67:5d:1b:a9:15:db:61:
b4:c4:9a:22:47:a7:e3:ea:1f:03:16:ba:96:f7:b4:
db:c4:be:dd:1b:31:72:a3:af:a2:cf:ea:4e:3c:3f:
60:b7:cd:a4:5f:9c:6e:95:e9:c3:5b:1b:4f:b8:21:
bb:32:b6:ad:b6:1a:38:ac:10:f7:ff:32:3e:26:30:
f9:49:43:a3:3f:27:a2:20:88:ed:8f:50:cf:f8:4c:
7c:d1:f5:ce:0d:ad:35:8c:91:d6:4d:75:8a:56:4d:
d0:53:ce:ca:62:e7:19:13:65:f5:b3:cf:5a:3b:f9:
dc:3a:08:3f:66:5e:38:f8:f6:15:78:78:5b:b0:26:
e4:f0:af:12:57:dd:ae:af:80:73:15:02:db:38:5b:
a8:28:ba:9a:ad:ef:5a:d7:8b:47:24:4b:5f:fe:1b:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:E4:FB:28:BD:35:44:E9:90:8B:6B:7C:37:82:78:ED:49:C9:35
X509v3 Authority Key Identifier:
keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:b8:0d:52:e4:57:42:19:d5:29:85:22:63:56:c2:33:6b:
b7:79:a6:96:61:1d:b7:37:6a:8b:e8:14:1f:a4:52:4a:2c:6f:
54:ff:eb:41:6e:22:ef:70:14:83:ca:43:cf:03:aa:7c:39:4e:
08:18:4f:dd:83:46:d7:50:1a:97:9d:fc:33:62:22:30:f3:ef:
9f:46:05:12:6e:2f:78:f7:07:01:ee:49:34:52:59:23:77:24:
b7:99:5d:eb:44:66:cc:f1:4b:a1:81:ec:bc:6f:12:00:59:b4:
21:8b:4f:5c:4e:81:b9:e2:a9:45:fe:06:33:23:ee:a6:8e:74:
e1:c4:c5:1c:51:da:b9:94:ee:ac:b6:47:2a:d4:6d:6c:6f:56:
53:09:9a:54:0a:96:41:c9:5d:3a:d7:c3:74:b6:b0:89:05:10:
e3:a8:47:70:80:bb:53:52:25:94:8a:04:47:68:1c:ab:8f:72:
06:c4:80:1e:99:b1:8a:e4:73:8b:79:43:c1:a3:d7:4a:2d:48:
45:59:bc:4f:9c:7e:ba:f6:49:99:d6:69:33:03:26:8f:a9:14:
c0:2e:41:a1:d7:43:de:42:4c:96:50:99:8a:65:63:9c:7d:86:
a8:91:6f:b4:3d:a1:ce:7d:c1:81:36:d1:9b:6d:24:95:3d:1c:
6e:ab:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:12 2026 by rpki-client