
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier: zqiYi6s3qSQFfZ/aYgUA/3tLF8CptuPIhNulVoTD1vE=
Subject key identifier: E5:B7:6B:9B:A6:DC:1A:17:4A:AB:9F:A4:E3:B9:31:8B:8A:F7:1A:54
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number: 99
Signing time: Wed 22 Jul 2026 23:53:25 +0000
Manifest this update: Wed 22 Jul 2026 23:53:25 +0000
Manifest next update: Wed 29 Jul 2026 23:53:25 +0000
Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: +I+qYyd82d0emUl+vHx7saALRLuVnu6T0hCfos66FSw=)
2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Validity
Not Before: Jul 22 23:53:25 2026 GMT
Not After : Jul 29 23:53:25 2026 GMT
Subject: CN=6a6157f5-d98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:65:d6:f0:81:d7:a6:0c:63:65:7e:b4:f0:
8e:66:42:37:10:c2:0b:15:8a:11:7e:f6:bd:71:ed:
f5:2c:36:1f:08:ac:ad:78:25:b9:8a:d7:4a:f9:fb:
19:ad:58:5d:a4:d4:dd:96:14:08:f5:d3:ee:02:82:
e1:83:dc:1d:b2:f6:ca:ed:2a:6d:71:1a:42:c3:2d:
c1:d6:6d:32:64:ca:a6:e1:e6:3b:0a:3b:ad:3f:1e:
2c:77:7a:ba:5c:b8:ab:a2:c7:6a:5d:fb:77:29:79:
af:f8:c2:56:99:12:df:64:7f:36:32:b2:26:a6:97:
04:e7:27:69:82:2d:a3:2c:98:ff:c7:36:79:c6:c9:
d5:7d:1e:7f:8d:5d:ca:00:b7:af:55:70:04:82:e8:
8f:29:0f:c2:8e:93:a6:c9:cc:2f:83:9c:d1:63:bc:
9c:31:12:4c:0e:3b:10:e0:e8:92:5d:09:ea:af:4d:
84:6b:02:fc:14:72:6c:64:46:ee:4c:cc:39:25:5e:
2f:40:ca:fa:53:0f:af:0a:87:65:ad:06:2c:8b:32:
36:b5:f7:7e:07:d7:06:7d:a0:31:1a:a1:7f:82:16:
71:66:25:98:dc:ee:41:fb:8a:89:8b:72:7e:28:9a:
2e:de:a5:2c:21:c6:ee:d7:53:80:f8:71:47:b4:00:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:6B:9B:A6:DC:1A:17:4A:AB:9F:A4:E3:B9:31:8B:8A:F7:1A:54
X509v3 Authority Key Identifier:
keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:78:09:41:3e:3b:e9:ca:cd:de:7a:e9:63:82:9c:6c:c8:d3:
6d:37:02:0b:85:24:bf:40:db:13:d4:55:7b:4b:64:a5:0b:18:
75:b0:22:65:22:b5:5d:f8:2b:8d:58:15:05:80:e7:8e:81:e7:
11:16:6a:a0:95:88:54:1f:d6:a1:ca:7a:13:a8:bb:eb:9e:de:
a5:4a:28:88:ee:1e:90:6c:5e:df:43:d4:41:e8:48:47:32:cb:
c1:4c:8d:d6:b7:7a:ea:8f:fa:f0:9f:78:60:39:fa:7e:ed:02:
2c:78:cf:a6:f7:48:f3:5d:f1:f4:10:3d:0d:78:cc:8c:5c:73:
d6:17:78:c0:f9:45:3c:f1:86:ec:c6:aa:83:e4:05:08:f7:2a:
75:c0:5a:da:32:ba:c9:b0:af:24:2b:85:da:e2:9a:58:37:e2:
8b:bb:b8:07:37:b3:98:2b:c3:92:a1:27:4d:aa:1e:7a:fa:4d:
c8:38:04:67:3d:b3:22:65:7e:51:c2:a6:4b:44:c9:53:c1:49:
d6:cc:e1:3f:22:60:cd:9a:11:93:81:30:58:99:6b:a4:97:8d:
47:e7:cb:58:77:34:eb:2b:ed:6d:b1:58:99:0d:60:c1:2c:aa:
b5:51:75:60:05:1c:d7:68:f4:03:97:51:86:85:20:35:50:f4:
d0:49:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:51 2026 by rpki-client