
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json)
Hash identifier: 6qMFYLK2/iM5sxvxeVeIq2vUkoCRJGGHihhjL9Of1Xs=
Subject key identifier: 3F:E8:06:5F:57:D3:73:16:22:A5:E1:6A:44:BA:36:80:13:66:E5:BE
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
Manifest number: 0118
Signing time: Sat 28 Feb 2026 14:24:08 +0000
Manifest this update: Sat 28 Feb 2026 14:24:08 +0000
Manifest next update: Sat 07 Mar 2026 14:24:08 +0000
Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: +p+Z50K0g64cenCEmmubWFnpXtk1I9s8lyK72nLBXok=)
2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Validity
Not Before: Feb 28 14:24:08 2026 GMT
Not After : Mar 7 14:24:08 2026 GMT
Subject: CN=69a2fa88-3046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:b5:9f:1e:65:de:99:3d:42:9c:21:af:89:
55:57:6c:45:1b:85:28:5e:42:02:57:fe:03:13:17:
51:6f:4c:5d:6a:89:da:3c:90:fd:66:15:63:08:7d:
65:63:15:5f:8b:72:b0:ac:fa:d4:3a:17:46:df:71:
45:0e:4d:fd:8a:43:71:99:03:34:bc:a0:ca:aa:e8:
ea:c3:08:b0:ff:e9:4e:d1:68:45:cf:b9:e4:13:6e:
6c:02:a1:36:8a:50:08:ce:44:be:e2:9d:98:b0:41:
13:f3:7c:c6:e4:93:14:7f:6b:b3:27:67:26:31:c0:
9c:d3:48:ff:8c:31:6a:0f:90:01:33:16:4c:0a:2c:
5f:e4:6f:aa:d9:8b:25:47:17:92:fb:70:2e:64:f5:
7c:92:22:67:10:e0:88:ae:1f:c7:c6:88:b9:fb:87:
79:bc:bf:a1:69:a5:a5:1e:91:a6:7d:b8:13:f1:3a:
7d:19:b5:f2:dd:b3:d5:18:bb:1c:c3:ed:e2:4b:8a:
da:34:1e:04:0b:47:63:76:6b:d8:0f:95:22:24:39:
a4:9e:95:16:86:7c:b6:4e:e5:1e:97:ac:ec:cd:86:
0e:55:20:99:d0:6b:f8:d4:c1:b5:f0:7b:68:29:17:
ea:4c:44:2c:17:be:f8:17:a1:19:b3:f8:80:55:1d:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:06:5F:57:D3:73:16:22:A5:E1:6A:44:BA:36:80:13:66:E5:BE
X509v3 Authority Key Identifier:
keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:a7:16:79:22:fd:47:e3:58:3a:0e:e8:8d:85:f1:56:15:35:
e9:68:dc:9d:d9:6e:f9:5d:8f:6f:9e:ee:61:9b:7a:4d:e5:15:
70:88:4e:67:33:9b:1c:e9:4b:62:70:88:b3:b8:8a:04:2b:df:
63:b2:10:99:be:54:c1:59:7d:91:85:d6:1b:a0:c8:b7:5f:57:
aa:b9:54:e3:46:e3:4b:05:b6:d8:f3:97:f6:19:75:05:df:56:
1d:ae:5c:b7:c8:9f:05:d7:78:ff:72:23:47:c0:a4:77:5e:36:
a5:a9:4f:2f:86:d3:99:1e:a9:de:34:77:a2:f2:be:0a:af:33:
37:6b:d1:13:0f:30:7e:49:bb:b7:b4:cc:96:ef:00:6b:44:f0:
ea:d8:20:8d:52:90:d6:12:2b:67:b7:1a:11:45:8c:9a:3c:df:
67:60:47:50:a5:b7:63:19:28:08:5e:64:7c:8d:44:99:5a:e3:
d6:60:ae:86:2c:01:fd:1c:25:c3:7f:b6:7d:93:f8:a5:74:28:
2c:21:6f:0c:a4:2f:09:85:23:c1:07:59:5a:a6:05:2a:96:bc:
d9:4e:dd:dc:78:aa:b7:87:39:f1:0d:c7:bd:f2:5f:0a:be:a7:
45:68:fc:67:95:02:8c:4a:30:aa:62:6b:df:0d:8c:fc:ce:7c:
87:7a:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:09 2026 by rpki-client