
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json)
Hash identifier: aQCzqPQ/ODziD+ha9+erbhAOyPvrDtwhuTx/tOshDJA=
Subject key identifier: 47:EB:FB:34:C2:24:95:92:EB:3A:74:58:CB:8E:A2:8B:27:A3:1B:6B
Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43
Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
Manifest number: 0175
Signing time: Fri 27 Mar 2026 04:08:52 +0000
Manifest this update: Fri 27 Mar 2026 04:08:51 +0000
Manifest next update: Fri 03 Apr 2026 04:08:51 +0000
Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: AxPK7dsYU+houOneBiwlKILp7Wev6X8C7cYmUcy0o5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl
rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
Validity
Not Before: Mar 27 04:08:51 2026 GMT
Not After : Apr 3 04:08:51 2026 GMT
Subject: CN=69c602d4-1cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:96:09:65:eb:98:0b:e7:9e:cb:95:b9:a7:
34:5b:cf:36:c1:23:7c:cd:01:4d:29:3c:4a:69:2a:
36:59:4b:8d:26:b4:27:6f:57:30:dd:bb:de:26:94:
2e:9e:0f:3a:de:ef:bd:98:81:27:01:cc:75:24:69:
6f:ff:7f:3d:d8:62:de:4e:a0:18:0a:f1:8e:71:19:
3b:61:bd:ce:d4:0f:28:f0:c4:a8:58:94:2b:ea:fa:
a2:ae:11:1a:e7:d9:a6:9c:3c:dd:e0:e3:ec:9b:07:
7f:5f:17:fd:6d:f7:42:3b:6c:e9:3a:9a:41:52:da:
9a:a1:00:51:57:7c:d2:33:06:aa:e3:43:57:32:d3:
ca:8e:d5:90:ee:27:06:d6:54:ca:cc:d6:35:5a:50:
bf:68:a6:a2:24:d0:74:4b:1f:64:26:4a:7d:1f:2a:
3c:17:c2:3c:e9:08:59:a9:ea:d9:88:4e:5a:53:4c:
53:31:d8:f7:49:74:48:f4:e2:d3:fa:d2:32:ff:94:
bb:b6:cf:b3:71:a7:ac:3b:92:09:fe:f4:9a:b8:3d:
b7:1f:65:b5:0e:2e:1f:49:eb:f8:68:de:d6:48:6c:
66:f2:fe:c9:b4:82:2e:1c:c7:88:7d:ba:0d:e1:2f:
74:74:06:18:e4:05:8c:ad:5b:a9:f0:0e:63:f3:3d:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:FB:34:C2:24:95:92:EB:3A:74:58:CB:8E:A2:8B:27:A3:1B:6B
X509v3 Authority Key Identifier:
keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:fa:22:17:a9:a1:e2:0b:bf:eb:d5:d8:01:d0:83:ff:04:
14:a5:d9:a5:23:b8:59:bb:4b:0f:51:67:31:0f:af:06:dc:a1:
a3:a9:93:5b:b5:a4:28:0f:cd:c2:48:9e:25:90:2c:57:9b:85:
87:38:f8:03:5f:84:2c:23:f8:ce:53:b1:f6:4d:ea:58:7d:1f:
39:f6:f1:91:fc:be:b5:e7:03:c3:66:8a:66:e8:0b:e9:68:ea:
eb:8f:1f:b7:75:f1:49:0b:2f:91:c3:22:fc:36:1e:8a:bb:b0:
b2:e5:f3:f1:ee:b7:74:8b:84:27:62:04:03:a6:7c:73:3f:88:
67:6d:b4:82:03:65:76:e2:ec:2d:1c:91:a7:63:f6:c8:af:b4:
38:d9:d2:7c:7f:63:41:bc:d8:ce:57:1c:2e:5d:e6:23:b4:71:
0a:68:8f:d3:fb:21:67:7f:d5:c1:e5:9e:d3:4c:0a:bb:60:dc:
18:f9:35:44:8e:92:bf:74:86:3e:f7:f4:6c:5b:90:f0:23:c6:
c4:78:32:b7:21:c3:9d:d7:ff:4f:ad:58:a9:0b:14:20:6c:c8:
9d:d5:46:d1:d7:59:2c:c8:65:2f:24:2a:8b:64:10:a2:56:32:
04:90:c7:d7:c1:18:c9:29:60:23:2a:c2:3f:21:33:d9:5a:11:
d9:ad:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:16 2026 by rpki-client