
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier: iHrc6fQwWtcv8/RpTNtDWhJHqfi3IHEWbsBVGFYbXJ0=
Subject key identifier: 0B:A0:F5:55:67:12:35:BC:09:61:E7:3B:AF:48:F7:B6:EE:AA:37:94
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number: DB
Signing time: Thu 23 Jul 2026 08:28:47 +0000
Manifest this update: Thu 23 Jul 2026 08:28:47 +0000
Manifest next update: Thu 30 Jul 2026 08:28:47 +0000
Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: 5AwvGxQ7INRL6ts1wRsTBczN+9GhyMM4JGx4efaR298=)
2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Validity
Not Before: Jul 23 08:28:47 2026 GMT
Not After : Jul 30 08:28:47 2026 GMT
Subject: CN=6a61d0bf-df78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:29:e7:db:fd:a6:40:fb:62:e9:5f:9e:8e:
11:cd:5e:d2:dc:53:91:58:bd:5e:6d:5c:f1:32:fd:
c0:f8:8b:bb:c7:50:11:ea:80:ea:2a:40:85:0c:6f:
dd:4a:c3:9f:b9:2c:17:4c:59:6c:a4:e3:7f:f9:d1:
04:6a:aa:47:cc:ea:78:d3:ee:53:6d:34:ff:3a:45:
d6:20:f8:fd:a4:44:31:59:20:58:66:33:3b:28:67:
8e:25:6c:a6:c0:ad:c8:69:13:b4:d9:f2:2b:71:d0:
34:51:04:f4:3d:fa:27:d9:e0:44:98:83:18:8e:c3:
35:c9:1d:a7:26:d0:0c:e0:e6:70:3c:b9:94:5a:67:
f2:a6:9d:1d:0d:f0:23:cd:18:28:95:4c:ea:77:ca:
0e:08:c3:fa:05:67:ec:a4:02:0d:a0:b7:76:15:72:
45:48:19:b2:be:16:03:20:42:b6:fe:09:9a:f2:6b:
bb:4f:4c:82:49:6b:7d:32:27:de:3f:c2:6c:00:ae:
18:58:23:70:9b:00:ac:ad:68:e7:3d:51:45:63:53:
3f:1d:32:aa:94:37:79:78:dd:f4:66:dc:81:2e:ad:
79:03:b9:b9:84:22:04:65:f3:02:a3:8b:03:b6:ff:
d3:94:72:6f:7d:1e:6d:de:fa:16:32:85:63:46:6a:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:F5:55:67:12:35:BC:09:61:E7:3B:AF:48:F7:B6:EE:AA:37:94
X509v3 Authority Key Identifier:
keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:f4:3d:b1:ce:e6:8a:1f:6c:d3:33:af:8b:9a:af:13:1b:
eb:b8:a7:dd:09:99:8f:fb:45:4c:51:49:62:86:b5:3b:a3:bc:
28:b0:ac:fd:ea:91:3f:cf:29:f0:88:2c:14:66:15:96:8f:39:
f2:62:df:01:74:f6:6a:22:1f:aa:7e:fd:82:95:52:a5:c0:c5:
65:82:40:5e:02:0c:11:84:21:ad:0e:4f:37:ac:3b:a0:fc:4f:
c2:68:7f:f1:89:29:52:57:6c:86:6f:aa:15:ce:2a:65:33:1a:
fb:c1:8b:d5:34:1e:33:ab:b4:51:15:de:62:1d:62:8f:1b:af:
42:bc:50:0b:04:e2:dd:36:89:9b:eb:3d:c8:5e:0b:49:6c:91:
0d:a6:e1:0d:11:ff:60:3e:90:0a:95:1d:29:cd:19:d3:8a:e9:
93:05:dc:85:d8:fe:e0:73:00:c5:a6:dc:73:40:c6:cc:6b:e3:
a7:95:4f:a8:b3:71:2b:30:31:cb:d8:79:9e:83:b2:64:34:c5:
cb:e4:88:79:3c:2e:cb:5e:41:50:e7:85:24:58:6d:d3:4b:0e:
1b:ce:12:dc:eb:57:c8:36:26:e7:45:4c:b7:fa:87:60:63:09:
3f:8a:37:7d:87:44:7b:4a:e0:17:14:f6:38:66:41:c4:08:fb:
94:6d:58:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxRkExMTAvBgNVBAUTKEYxNUM1QzVCQTUyMTQ1MzcwN0M4MUY1RkVDMDgxMUJG
MjFDRkY0MEUwHhcNMjYwNzIzMDgyODQ3WhcNMjYwNzMwMDgyODQ3WjAYMRYwFAYD
VQQDEw02YTYxZDBiZi1kZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0vIp59v9pkD7Yulfno4RzV7S3FORWL1ebVzxMv3A+Iu7x1AR6oDqKkCFDG/d
SsOfuSwXTFlspON/+dEEaqpHzOp40+5TbTT/OkXWIPj9pEQxWSBYZjM7KGeOJWym
wK3IaRO02fIrcdA0UQT0Pfon2eBEmIMYjsM1yR2nJtAM4OZwPLmUWmfypp0dDfAj
zRgolUzqd8oOCMP6BWfspAINoLd2FXJFSBmyvhYDIEK2/gma8mu7T0yCSWt9Mife
P8JsAK4YWCNwmwCsrWjnPVFFY1M/HTKqlDd5eN30ZtyBLq15A7m5hCIEZfMCo4sD
tv/TlHJvfR5t3voWMoVjRmr2ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAug9VVn
EjW8CWHnO69I97buqjeUMB8GA1UdIwQYMBaAFPFcXFulIUU3B8gfX+wIEb8hz/QO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGQS85QTg3M0VCMDQ1
QTMxMUYwOTVFRkZENDhDNEY5QUUwMi84VnhjVzZVaFJUY0h5QjlmN0FnUnZ5SFA5
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlBNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTFGQS85QTg3M0VCMDQ1QTMxMUYwOTVFRkZENDhDNEY5QUUwMi84VnhjVzZVaFJU
Y0h5QjlmN0FnUnZ5SFA5QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo8v0PbHO5oofbNMzr4uarxMb67in3QmZj/tFTFFJYoa1O6O8KLCs/eqRP88p
8IgsFGYVlo858mLfAXT2aiIfqn79gpVSpcDFZYJAXgIMEYQhrQ5PN6w7oPxPwmh/
8YkpUldshm+qFc4qZTMa+8GL1TQeM6u0URXeYh1ijxuvQrxQCwTi3TaJm+s9yF4L
SWyRDabhDRH/YD6QCpUdKc0Z04rpkwXchdj+4HMAxabcc0DGzGvjp5VPqLNxKzAx
y9h5noOyZDTFy+SIeTwuy15BUOeFJFht00sOG84S3OtXyDYm50VMt/qHYGMJP4o3
fYdEe0rgFxT2OGZBxAj7lG1YRw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:14 2026 by rpki-client