
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
File: k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft (raw, json)
Hash identifier: 38sADzlGldwsISb0Pl+eSC+/lusjSGF58ad8xHDzKHE=
Subject key identifier: CB:6C:5C:EC:C9:9C:69:C1:29:30:D2:5B:28:73:9F:BA:95:33:50:AB
Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17
Certificate issuer: /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
Manifest number: 34
Signing time: Tue 12 May 2026 13:18:03 +0000
Manifest this update: Tue 12 May 2026 13:18:03 +0000
Manifest next update: Tue 19 May 2026 13:18:03 +0000
Files and hashes: 1: k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl (hash: Rz2wbY4jQlURoAtpGRenh+7XS86sCAB6CrOyoAUzrQ0=)
2: 28E7910A1FC911F19CD315063A3D8C67.roa (hash: R2AlqbhHVnfmyAFdsG6D/MvPgbamdWxUkMT2LqjIQUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl
rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 13:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217
Validity
Not Before: May 12 13:18:03 2026 GMT
Not After : May 19 13:18:03 2026 GMT
Subject: CN=6a03288b-d6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:32:9f:2a:95:1d:21:c1:38:f9:f9:75:5a:54:
d1:ad:54:df:5f:84:4e:64:07:88:4b:8b:d1:25:04:
8b:b2:d6:1e:fc:7b:e6:fd:96:c1:bf:07:ec:91:57:
13:7b:ad:ff:27:8a:6c:ec:e4:ef:56:fe:e4:c6:de:
a0:bf:78:4c:f8:23:6f:67:87:44:6c:39:f7:57:09:
fc:b5:38:dc:c2:31:cd:52:85:8f:f2:03:1c:62:4b:
ca:ce:72:c4:ac:60:e0:da:72:98:cd:f2:2d:ae:17:
21:b7:58:c0:ba:89:2d:a2:4b:5a:70:38:95:4f:d9:
f1:f0:a9:03:93:c4:e4:ef:9e:a8:f2:05:10:e2:74:
f4:1d:ec:b2:35:a2:58:2b:f6:69:fa:e9:99:0b:ea:
c3:ba:08:f9:ad:85:3f:05:e8:ae:41:21:ea:ad:4f:
62:45:78:f9:75:d4:77:99:e1:b2:81:6e:e1:35:81:
60:de:90:17:58:38:15:d9:29:fc:24:eb:bb:64:11:
08:7f:60:28:cb:ee:c4:2c:fe:40:d5:48:b6:f3:af:
f5:bd:96:5d:17:54:f4:9c:15:c3:fe:d4:2a:47:21:
4c:3c:d1:fe:69:4f:f9:50:d3:a4:b5:aa:d3:4b:61:
b7:a2:b0:19:47:59:e9:8b:54:74:92:89:52:c1:53:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:5C:EC:C9:9C:69:C1:29:30:D2:5B:28:73:9F:BA:95:33:50:AB
X509v3 Authority Key Identifier:
keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:3a:51:80:64:f2:97:22:8b:f2:17:0b:fe:93:aa:9f:7d:
eb:53:da:4b:06:64:45:6f:20:fb:04:90:ad:6e:48:f4:47:c4:
5c:8b:05:ab:1f:63:00:d0:16:4b:ab:d4:33:19:50:a3:7b:f7:
5d:ef:e6:e2:6f:61:d0:f4:97:3b:29:a1:bc:13:c0:6a:be:34:
7d:fa:59:2a:fd:ab:8b:06:78:c0:b5:25:5f:8f:bd:60:0a:3c:
e9:e0:da:6b:a9:7a:37:f6:5f:a2:fd:53:21:22:64:22:ef:fc:
ff:bb:5a:6d:1a:75:b9:1d:44:5a:cd:91:f8:ee:64:01:54:4b:
fc:be:41:49:be:7d:e1:d9:19:27:5e:5f:3a:86:78:7e:04:09:
f2:97:48:6b:65:39:f8:7a:e2:36:16:55:12:43:a8:63:4d:1e:
cb:f4:88:71:30:28:27:eb:28:49:7d:9d:3a:eb:1c:a5:6e:90:
61:26:8b:37:a4:3a:71:9f:a9:f6:a1:dd:fd:d1:bc:21:79:22:
d3:79:d1:94:90:75:21:6c:77:41:ad:38:79:9f:64:ac:8a:f0:
4a:f6:d0:f0:94:71:ea:83:44:11:70:fc:a6:ed:8f:0a:df:a9:
df:fe:af:e3:c7:82:57:e0:69:d8:df:d0:03:cd:1c:3c:0e:82:
b0:6d:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:12:14 2026 by rpki-client