
$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier: FUbvlhwVgsRm9Y2uraVJcO08p7te0Ua654lLt7DS6xI=
Subject key identifier: B9:79:D2:DE:30:73:6A:4D:26:F0:11:60:DF:74:59:C6:78:B8:ED:F7
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial: 0A4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number: 0A48
Signing time: Mon 02 Mar 2026 02:41:57 +0000
Manifest this update: Mon 02 Mar 2026 02:41:55 +0000
Manifest next update: Mon 09 Mar 2026 02:41:55 +0000
Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: SES/U8nC1oHozxRqL63az2aMGJDda3fHWwM/pvDbnrc=)
2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: i4ZxxqpQ+3zI5So5ObXBzu07nchHUX/1pbi3p0o+9eE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2639 (0xa4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Validity
Not Before: Mar 2 02:41:55 2026 GMT
Not After : Mar 9 02:41:55 2026 GMT
Subject: CN=69a4f8f4-aded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:28:1b:1d:96:9d:4e:c6:7b:91:d3:2c:0c:
94:d1:f5:5b:29:79:44:3f:d1:5c:2c:d8:0c:fc:a6:
71:b0:70:74:8b:d0:bb:22:20:59:04:57:0f:22:1e:
6d:5f:cf:b3:33:9d:1d:f5:bb:13:aa:76:35:25:61:
f5:62:de:09:d3:fb:3a:73:9e:5a:7a:68:56:a5:17:
97:5b:fe:1e:a5:64:c3:68:50:c3:ea:a0:57:14:66:
37:71:d8:9f:23:69:0a:5e:ef:48:6f:24:49:2b:d0:
af:7a:6e:8a:2f:8d:e6:37:62:ec:ff:39:9f:96:16:
b3:e2:02:fd:82:cb:4a:09:0a:91:5e:c5:e8:ff:d8:
1e:3e:22:7d:75:21:53:02:44:7e:e1:9a:31:0a:a8:
09:cb:68:c9:e0:0b:50:97:4a:c6:39:bc:72:a8:9c:
18:cd:0d:e0:2c:26:99:86:e7:23:69:90:84:19:c8:
55:01:1b:aa:a0:46:a4:5a:05:fe:25:40:fd:56:d1:
5f:6d:de:43:3a:05:31:85:b8:99:e9:29:b3:be:b1:
89:47:ab:ad:4f:34:d2:1a:d0:dd:0c:b4:40:76:a5:
54:6b:b3:35:cc:b9:0f:9a:e6:1c:57:ea:75:19:76:
f3:4e:b1:39:aa:e8:0c:46:74:1f:45:fc:54:e0:e7:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:D2:DE:30:73:6A:4D:26:F0:11:60:DF:74:59:C6:78:B8:ED:F7
X509v3 Authority Key Identifier:
keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:07:61:8c:0f:c8:a1:e4:62:89:c8:ed:fe:d5:42:e8:a0:4e:
22:3c:ee:a5:b9:b2:42:81:f7:1a:17:41:e7:fa:34:f4:11:5e:
24:76:e6:9c:e5:b8:83:fc:c2:e1:f3:50:e6:21:a9:cd:b4:9b:
18:3c:97:45:ba:60:77:6f:a1:7c:d5:ac:54:cb:a4:b5:2b:d4:
37:ef:4b:e4:3b:4d:97:dc:39:ed:ab:65:51:fc:fd:eb:2a:95:
f5:c9:77:b6:6f:67:2f:b7:40:80:3d:63:1b:9b:77:77:b3:d0:
78:c1:18:32:52:c7:fb:66:58:d9:0e:e0:a7:98:00:a3:d5:53:
32:80:7d:bd:4b:2c:4c:4e:2b:1e:21:6d:d5:24:aa:c5:1a:b2:
85:80:89:4f:47:4d:22:3b:1d:b9:71:17:8a:2b:0c:d1:c5:da:
a0:16:5e:86:ee:25:5b:4e:3e:21:f6:d1:98:bf:af:72:17:9c:
b6:7e:f1:73:62:b0:6a:d5:88:ae:1d:56:af:2d:50:ee:89:90:
6f:cd:34:da:db:aa:76:08:b9:ab:0b:9f:31:b8:4b:fc:d6:ca:
b2:ce:07:10:4e:dc:81:02:9d:89:42:f3:a2:b1:b0:98:2a:e8:
cd:a5:e6:da:48:8d:d5:90:19:b5:37:17:54:c4:df:a5:d2:01:
5f:95:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:16 2026 by rpki-client