
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: ZYaByDxGNRwdWhJoYwQSvgFgKfLCRrqKNwgbcW28Dz8=
Subject key identifier: FD:05:41:AC:68:9D:55:34:61:AD:D0:D2:60:79:3B:B4:5E:6B:A2:E0
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 054E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 0530
Signing time: Tue 12 May 2026 23:44:56 +0000
Manifest this update: Tue 12 May 2026 23:44:56 +0000
Manifest next update: Tue 19 May 2026 23:44:56 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: z/rjRyruW0Ht1jvWjGGfaVVuVJv14F0salAbK1o3ehM=)
2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: D/dR6ENuXfLHFUetoYZThX1l/t7V6zP5wZaCcQHU3VY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1358 (0x54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: May 12 23:44:56 2026 GMT
Not After : May 19 23:44:56 2026 GMT
Subject: CN=6a03bb78-5b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:8b:92:1b:22:f0:8f:fa:4d:d7:8e:1f:fb:
3b:9c:bd:45:d8:29:89:0d:f9:27:3d:dc:ab:31:62:
9b:cc:43:11:88:bc:67:c9:aa:c1:9f:c4:c9:39:3f:
7d:8b:d3:60:8d:d6:b7:4e:00:ab:88:6a:d3:4f:11:
99:d5:1e:77:1f:c5:82:76:72:9e:fb:12:29:7f:6e:
24:c6:f3:16:d5:f8:a7:74:07:de:14:3e:2e:b8:3f:
df:68:84:d2:ee:ec:44:d9:09:70:97:7f:7f:0d:e9:
c7:ba:c8:63:d3:26:31:fe:95:26:80:14:79:86:39:
ba:7d:ae:f8:98:7c:75:d3:8c:96:8d:f3:97:1d:c9:
ac:f3:3c:b5:7f:e1:13:7d:e8:a5:36:87:bf:a7:51:
36:eb:8f:fe:fa:79:9c:df:cf:f1:3b:4f:0e:4d:fa:
f9:3a:31:5e:c2:6c:54:f5:2a:55:70:04:ab:3f:e3:
fd:7e:e1:72:1a:90:42:4f:f2:33:62:c7:ca:24:a4:
6a:0c:bb:d2:4e:b2:3e:f7:52:da:04:b9:14:6c:51:
2a:97:55:ca:c4:b6:52:df:43:90:02:89:95:20:2b:
2c:90:dd:ff:ff:90:e2:82:63:de:28:2a:bd:79:a9:
e1:1f:4d:1b:f5:ad:12:bb:8a:50:0c:4c:4c:83:c0:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:41:AC:68:9D:55:34:61:AD:D0:D2:60:79:3B:B4:5E:6B:A2:E0
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:b5:d5:11:89:bd:ab:56:ec:ba:28:bb:93:33:e8:16:55:25:
60:6a:78:88:c6:5c:6e:df:ed:7c:b4:7c:28:9c:bd:8e:26:bb:
62:da:ca:2f:00:9e:fe:01:37:f2:0e:c8:11:a2:57:02:3e:90:
ea:d0:8c:6a:91:1f:06:ea:6c:17:01:0f:e2:d4:7d:b6:9f:a6:
b7:db:a3:72:3a:4e:1f:92:ef:6a:c0:65:5d:86:29:db:6b:65:
05:f7:6e:49:32:f9:53:b8:c2:e9:41:83:ac:75:ce:18:61:1f:
83:91:a5:a2:56:48:9b:c0:70:17:1d:35:45:f7:a8:0a:98:47:
aa:8a:2c:d4:45:12:a8:1a:ac:b2:7c:4d:73:86:c1:a2:8f:5d:
23:f5:92:f4:21:b7:6d:2d:7f:61:d7:82:c7:17:80:27:2a:fd:
1f:42:be:9b:0e:c8:8e:59:25:83:10:f7:f9:f9:b2:72:5f:84:
6c:3a:b8:2a:d5:9d:00:f1:95:5e:07:32:8b:9b:fb:02:dc:1f:
9a:1c:cf:c5:d1:d0:e8:26:5f:b4:91:ad:97:5a:5a:46:6f:6f:
d6:87:7c:00:ba:c9:14:46:3d:5c:8e:7d:8c:98:99:62:e5:ef:
67:17:29:59:6b:f3:e2:c6:fe:44:c5:47:4f:8c:65:18:27:f2:
81:5b:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:27:30 2026 by rpki-client