
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier: MU+o8ujS8BCa+JEAdlWG6Rgc8WiEDqaRdHxeIuWDEoA=
Subject key identifier: DE:76:D6:D4:6B:30:DC:50:25:BD:34:DF:E7:CF:67:0C:35:4C:70:F6
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial: 0810
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number: 0802
Signing time: Sat 28 Feb 2026 21:31:46 +0000
Manifest this update: Sat 28 Feb 2026 21:31:45 +0000
Manifest next update: Sat 07 Mar 2026 21:31:45 +0000
Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: Y2zDYKI9OyzXo1DAaMsgNkPN8kPQFcgf37/C5UVAmzU=)
2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: 4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=)
3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: nma4xkXXDMJG7QciaymwPc3dJsJxzYlJjEDf7RTo8RE=)
4: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 3Y+VOrnBdBlECnUUYO6R0FZpFa6yBZQUedvMj8T1PFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Validity
Not Before: Feb 28 21:31:45 2026 GMT
Not After : Mar 7 21:31:45 2026 GMT
Subject: CN=69a35ec1-59fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:17:e4:c1:63:92:35:d4:ba:2c:17:0c:f7:
2e:c1:ac:bf:88:26:3f:22:f8:a9:c2:ad:f7:c5:f9:
f0:7e:63:f7:9e:b1:51:60:cc:69:03:85:4b:eb:38:
3a:f5:e0:b4:37:8e:ce:42:1e:25:4e:56:39:b2:42:
26:06:66:83:96:1c:44:c7:cc:cc:12:e0:d5:5e:33:
af:93:4d:ce:91:03:8a:c7:0b:bc:cf:79:8d:eb:c0:
61:14:e0:da:d7:51:09:b2:98:a9:17:61:07:9d:d7:
e2:98:2b:61:90:0d:6d:af:a0:cf:04:61:be:fd:80:
75:f8:68:06:d6:c3:f5:bc:96:60:c9:34:c5:04:be:
9b:fa:54:a5:ce:64:fb:cd:b6:60:88:f4:b7:f5:c2:
06:48:f1:d6:38:32:ab:51:40:4f:ec:26:de:5d:13:
c0:56:04:e5:ce:9d:87:8e:74:76:1c:2a:a4:45:0e:
77:5e:89:17:f3:ce:d1:dd:48:b2:28:c8:1f:0c:17:
66:02:40:e2:96:c1:12:7b:a0:b8:3f:e8:c2:da:60:
87:94:4c:fa:04:8b:06:74:4f:e6:d6:fe:ef:32:bd:
4d:a1:11:47:83:0b:9b:e6:d9:b1:37:91:63:63:ed:
bd:13:b9:0f:4c:dc:e7:c8:94:2a:a5:b9:92:d9:4f:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:76:D6:D4:6B:30:DC:50:25:BD:34:DF:E7:CF:67:0C:35:4C:70:F6
X509v3 Authority Key Identifier:
keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:d9:a0:cd:b2:d5:9c:c2:bc:14:9f:61:16:e5:21:b5:cd:37:
ab:7f:5f:ef:b1:25:48:89:b6:9f:90:b3:5f:d3:86:f3:9c:0d:
65:9a:0d:04:bd:14:06:f9:8d:df:22:c0:e2:39:ab:cc:c7:e0:
5f:92:99:f0:c8:93:c5:f6:bc:92:76:cc:09:36:36:ce:07:98:
cc:5d:69:a5:53:57:da:fd:fb:13:35:db:ba:bd:65:0f:de:62:
e2:a4:f7:64:e3:9a:3b:4c:c0:87:39:6e:b1:48:41:ca:aa:8f:
29:5f:40:9a:ae:cb:b8:7f:14:2e:8f:ed:fc:96:25:57:57:83:
a2:34:19:64:99:52:87:5f:98:19:fa:c6:2e:c0:88:b6:25:8b:
2a:8d:bc:4f:14:ac:39:2b:7b:3c:59:4e:a7:85:55:0c:a0:a8:
51:54:96:0f:7b:3a:d6:80:9c:23:cf:7a:d6:75:ee:2c:ec:f2:
14:7f:79:0d:10:9b:da:df:d5:62:0b:58:29:47:2c:bb:f4:27:
89:c4:90:fd:59:60:e1:cb:4a:1e:4c:b0:d5:21:b6:9f:89:73:
86:bc:e5:34:fc:1f:59:00:78:e9:e2:bd:19:e6:12:de:50:fa:
d4:3b:56:02:6a:9e:4d:c4:84:66:52:d9:0d:7c:a9:ab:b0:eb:
55:20:d3:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw
MkU5NTYwMTAwHhcNMjYwMjI4MjEzMTQ1WhcNMjYwMzA3MjEzMTQ1WjAYMRYwFAYD
VQQDDA02OWEzNWVjMS01OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoRQX5MFjkjXUuiwXDPcuway/iCY/Ivipwq33xfnwfmP3nrFRYMxpA4VL6zg6
9eC0N47OQh4lTlY5skImBmaDlhxEx8zMEuDVXjOvk03OkQOKxwu8z3mN68BhFODa
11EJspipF2EHndfimCthkA1tr6DPBGG+/YB1+GgG1sP1vJZgyTTFBL6b+lSlzmT7
zbZgiPS39cIGSPHWODKrUUBP7CbeXRPAVgTlzp2HjnR2HCqkRQ53XokX887R3Uiy
KMgfDBdmAkDilsESe6C4P+jC2mCHlEz6BIsGdE/m1v7vMr1NoRFHgwub5tmxN5Fj
Y+29E7kPTNznyJQqpbmS2U+01wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN521tRr
MNxQJb003+fPZww1THD2MB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2
OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz
TG9hSTNxU0lmWk1DNlZZQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcNmgzbLVnMK8FJ9hFuUhtc03q39f77ElSIm2n5CzX9OG85wNZZoNBL0UBvmN
3yLA4jmrzMfgX5KZ8MiTxfa8knbMCTY2zgeYzF1ppVNX2v37EzXbur1lD95i4qT3
ZOOaO0zAhzlusUhByqqPKV9Amq7LuH8ULo/t/JYlV1eDojQZZJlSh1+YGfrGLsCI
tiWLKo28TxSsOSt7PFlOp4VVDKCoUVSWD3s61oCcI8961nXuLOzyFH95DRCb2t/V
YgtYKUcsu/QnicSQ/Vlg4ctKHkyw1SG2n4lzhrzlNPwfWQB46eK9GeYS3lD61DtW
AmqeTcSEZlLZDXypq7DrVSDTOQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:05 2026 by rpki-client