
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json)
Hash identifier: xP/fxDnVNZl+uPekByD/buEm4KkSRMN7U66CZfgF58M=
Subject key identifier: B8:BC:2E:7F:9E:38:58:33:FE:47:96:D8:21:2E:95:28:E7:22:78:56
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial: 074D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
Manifest number: 0745
Signing time: Tue 12 May 2026 21:48:16 +0000
Manifest this update: Tue 12 May 2026 21:48:15 +0000
Manifest next update: Tue 19 May 2026 21:48:15 +0000
Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: Eo0KUIHqMvP9CoAJ3jCvlYGUbMLA/WIrDHFgpy2WKFA=)
2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: EsWXc6IMobPNUZk7bCp5eBYfLcBlY2oVTJeqo14MkPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Validity
Not Before: May 12 21:48:15 2026 GMT
Not After : May 19 21:48:15 2026 GMT
Subject: CN=6a03a020-fe0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:59:a3:eb:55:8e:23:6d:04:54:81:ec:b9:
7a:8f:a1:5f:70:82:9a:db:0d:31:cf:0e:ce:9e:4f:
53:43:35:c2:9a:83:d4:67:33:fa:c7:f8:ce:e6:59:
5d:f5:be:aa:cf:c3:92:35:9c:21:fc:ae:98:47:70:
d3:33:61:0c:b5:9e:9d:db:5d:fb:88:b7:73:46:15:
d7:22:50:2e:21:1c:6b:d7:5b:67:1c:73:f9:d9:10:
00:fa:71:07:2f:56:a6:3b:d6:ed:85:43:b5:34:1f:
d4:e9:74:17:03:7d:8f:9c:78:bd:86:8d:85:67:79:
62:6d:1d:65:48:7f:3a:dd:86:9e:3b:8f:e1:20:6a:
45:ed:66:2f:f5:78:22:be:c7:9d:c1:c1:b3:74:dc:
2f:db:17:30:5f:c9:f7:2f:b7:c5:b2:bb:2f:e7:7b:
fc:d2:29:51:ad:71:7d:e9:bd:25:38:2c:26:a9:00:
02:7c:93:d2:5b:54:62:56:5c:37:12:45:9e:c6:b2:
54:4f:f6:94:c5:ea:ae:62:20:33:bc:b1:2a:01:4e:
07:a5:e2:ee:d1:59:38:b7:07:c2:e8:e4:36:68:6f:
ab:64:b9:bf:16:7c:52:a7:58:c5:3d:80:93:31:34:
c0:7b:df:0b:d0:ec:67:c5:b0:67:eb:e4:d7:a3:9b:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BC:2E:7F:9E:38:58:33:FE:47:96:D8:21:2E:95:28:E7:22:78:56
X509v3 Authority Key Identifier:
keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f1:59:72:de:89:60:8d:bb:8f:d5:26:26:70:46:b2:0a:48:
e2:7e:9f:a3:ed:42:01:ae:2f:95:52:20:07:2e:b4:4d:8d:61:
29:c5:b6:26:28:96:db:ef:f0:f4:f6:fe:90:b5:81:02:15:78:
00:8c:d6:86:ef:86:26:b3:d3:75:cb:ec:35:67:51:e3:1a:f2:
a1:63:a9:b5:f1:66:47:5a:e7:00:b0:42:73:57:9f:bf:b7:f8:
d3:ea:dd:b1:91:a0:f9:2a:a7:5f:4e:aa:86:09:9c:83:35:65:
50:2d:97:d0:2f:9a:30:1f:a8:9f:f6:6f:1a:5d:0d:74:ef:ac:
d7:8a:fd:2e:f3:42:2b:41:b4:1b:1b:83:90:c5:a1:22:90:99:
94:12:7d:1e:05:34:45:d5:63:a8:6b:9a:b3:06:dc:98:fd:80:
41:c6:54:46:dc:d5:6c:4c:63:8a:a1:db:59:bf:68:4e:ed:59:
8b:6b:06:ab:38:f8:d2:3b:84:7e:d4:ef:bd:e3:80:33:30:ad:
7c:4b:93:b5:ac:42:a4:a1:1d:b8:d2:aa:55:61:b1:06:79:05:
9a:b4:62:8b:cb:12:10:1b:87:c2:22:35:22:3e:f4:6a:1f:a5:
fb:4f:3a:eb:eb:62:1e:fe:b2:15:44:de:50:e5:0d:57:58:b2:
84:bb:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:34 2026 by rpki-client