
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier: N/mGPcdDsp19P4ASjDmkW2Ty8tf64viTYRGWxnQjL6E=
Subject key identifier: 05:97:88:49:A2:88:FB:A2:0C:4F:AD:B3:B8:FD:26:45:5F:D2:9D:8A
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number: 01A2
Signing time: Mon 11 May 2026 04:14:50 +0000
Manifest this update: Mon 11 May 2026 04:14:50 +0000
Manifest next update: Mon 18 May 2026 04:14:50 +0000
Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: K5PzhnuM7PX9A9HgXWzm4Y9kKZePRmmdg1qDgNKNgEo=)
2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: /7z7IB560Zyid1gAT+cg8GKzeif1WiKdRUALH0UbtFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Validity
Not Before: May 11 04:14:50 2026 GMT
Not After : May 18 04:14:50 2026 GMT
Subject: CN=6a0157ba-372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:a5:b0:d7:0e:49:5e:4d:2d:e6:69:a9:7a:
60:4f:1f:17:ad:cf:6e:42:ff:de:26:2a:76:1b:a3:
2e:43:18:72:38:10:7c:b8:8e:1b:08:65:a5:0f:52:
3f:e8:cb:57:6c:bb:ad:0a:71:0a:3f:46:42:02:9f:
4b:0c:78:c8:0e:52:42:bc:54:bc:d3:c8:80:a5:f3:
33:2f:80:d5:9b:d5:7a:da:60:f2:6e:ec:dd:79:c6:
cb:86:07:ba:7e:f5:88:4a:bc:fd:b7:b0:62:26:fe:
b3:f3:e2:3b:d5:a0:05:80:5b:8c:59:0f:3e:fe:96:
78:92:df:6a:10:5b:20:b6:ad:6d:8b:67:04:5b:ff:
ea:ca:e1:88:35:ec:0b:de:79:3a:61:36:b4:bd:f5:
21:08:b1:cf:f3:91:ac:d2:77:70:3a:2a:4b:45:70:
f1:56:8c:89:9c:89:dd:a3:4c:13:4f:e8:d4:61:d0:
c2:6b:ee:6c:fc:d3:5b:a8:6f:64:73:21:c1:86:95:
c6:45:97:03:2b:70:31:52:ed:16:26:75:c0:46:57:
f8:e7:3a:6a:91:b5:64:47:cc:76:d1:2d:43:9f:54:
cd:4c:86:af:ea:88:46:88:27:6f:af:4c:96:d4:c4:
ad:c1:86:fa:e4:69:89:e7:72:75:b7:79:9d:3a:ab:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:88:49:A2:88:FB:A2:0C:4F:AD:B3:B8:FD:26:45:5F:D2:9D:8A
X509v3 Authority Key Identifier:
keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:27:ab:79:9d:38:9b:7c:01:87:a7:bd:35:ca:95:f0:dd:46:
2f:8d:e0:3f:58:cf:2a:ee:93:5f:d5:86:db:09:34:72:96:57:
f9:03:78:be:bd:d9:35:e4:2e:4b:15:fe:5c:27:58:0d:50:b7:
9e:2f:7c:23:ad:c5:20:83:5c:ad:26:01:3d:18:78:e6:d1:e3:
91:41:df:c9:13:1d:7a:04:16:22:2f:df:41:91:2e:c8:34:4b:
7f:1e:ac:57:cc:33:1d:be:be:32:13:9b:68:6c:e1:f8:1d:04:
d8:54:be:57:89:57:f9:4f:58:d4:b0:58:7d:f6:17:e1:e4:e7:
fd:c8:ce:28:a3:60:09:b1:a9:0d:d3:2c:ee:da:c4:a5:d8:2f:
96:f4:0b:c0:5e:7f:c9:a7:9e:0f:27:79:d8:c4:97:6f:cd:bf:
f9:38:69:f5:65:25:3b:70:82:1a:d9:bc:f1:d3:8c:55:76:d1:
c4:0c:88:8a:79:3c:4d:65:02:c7:5f:59:dc:a3:a5:1d:cc:0c:
15:c9:ca:f4:df:f2:d6:a2:3d:f7:d2:68:3c:cd:a2:79:14:ba:
98:d4:6b:d4:8d:16:a8:cf:f2:02:14:07:d5:9f:8f:2f:3b:18:
cf:68:fc:47:ae:3d:e9:10:7e:16:41:ae:eb:74:ef:df:41:54:
b4:17:9c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:15 2026 by rpki-client