
$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
File: R-8IU6LX3qJJt8P694FpyPjbx-k.mft (raw, json)
Hash identifier: I4Nk+2lqXmFLqE/XWFW9s6khDa/0B75huenwR0I54Ic=
Subject key identifier: 7F:A9:93:42:96:48:C5:E2:A7:FD:40:A9:7D:4C:ED:1B:E2:5B:17:99
Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9
Certificate issuer: /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
Manifest number: 47
Signing time: Sun 01 Mar 2026 09:44:03 +0000
Manifest this update: Sun 01 Mar 2026 09:44:02 +0000
Manifest next update: Sun 08 Mar 2026 09:44:02 +0000
Files and hashes: 1: R-8IU6LX3qJJt8P694FpyPjbx-k.crl (hash: sBp4JQdhwtwiJ1Wo89rc5LVijR+uS8aAjBeHkr+zvjA=)
2: 6F324D3CAB2811F08D96D563C4F9AE02.roa (hash: kD5lmzkNkNAiRMyL5raIyZmwcauj/GPpt1ud3VtpSR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl
rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
Validity
Not Before: Mar 1 09:44:02 2026 GMT
Not After : Mar 8 09:44:02 2026 GMT
Subject: CN=69a40a63-978c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:24:dd:b9:45:af:ad:0b:ed:b8:bc:82:c5:
d2:d4:4c:80:66:56:e2:a2:fc:58:5d:cb:d5:aa:03:
91:3b:ec:30:20:cd:fb:40:50:52:2d:6e:ff:22:dd:
35:69:9d:65:1b:3a:72:5d:d1:86:74:8c:ca:ed:74:
7c:ae:6b:3f:54:0c:36:1d:6a:5a:ae:e6:3d:d0:86:
f5:78:b8:41:50:42:1a:d1:44:23:cf:b6:73:bf:02:
87:b2:1b:78:0e:36:a9:0a:d3:af:69:c7:ff:01:bc:
62:9f:77:f3:0a:2f:4b:1b:49:83:00:22:7e:88:c6:
31:12:03:ba:73:31:b4:4c:88:c2:40:4f:9f:c6:36:
16:2b:ff:cb:0d:57:40:7d:f7:ff:24:a6:68:93:29:
57:d9:43:9b:a2:7f:0e:02:7a:c5:86:84:3b:92:46:
72:47:6d:b0:21:8a:50:48:43:9f:c4:f4:40:94:38:
52:35:9e:a8:a4:ae:0d:65:ee:28:c9:a2:17:ab:4b:
9e:83:3c:73:de:5d:39:8c:4f:0b:53:8c:db:02:84:
4b:b8:7c:a1:0a:c3:53:b5:1e:4c:8b:40:8e:8d:99:
6f:cf:f2:10:0a:a1:5f:b1:fd:c9:fa:ca:d0:92:6f:
a5:b5:bd:0e:1f:37:6c:66:b6:36:7e:71:e1:39:48:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:93:42:96:48:C5:E2:A7:FD:40:A9:7D:4C:ED:1B:E2:5B:17:99
X509v3 Authority Key Identifier:
keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:6d:08:8f:0f:76:41:1c:f6:d4:32:4e:63:7f:c6:c1:34:ab:
c7:15:19:fb:29:39:d5:66:49:a4:23:c3:af:f9:c1:fd:45:fd:
35:72:a0:53:62:ee:ad:ff:0b:40:5a:ba:66:56:75:94:31:2f:
94:04:ba:79:79:5a:f2:1f:7a:77:ee:06:e9:fd:fe:df:30:07:
2c:23:ed:b7:c6:1d:b4:32:6f:a9:28:53:6b:09:3a:bb:c0:d7:
84:97:40:a6:a8:c6:2e:26:f6:49:d4:5b:57:f5:70:0e:72:9f:
5f:fe:20:a7:59:04:f0:e5:ff:71:1b:f9:6e:88:4a:e5:f4:1f:
08:12:bf:01:c9:eb:d5:ee:a3:ef:b7:70:01:1d:b5:bf:5d:eb:
65:0f:f7:ff:82:79:4a:e3:9e:33:bd:10:fe:7f:68:24:ba:31:
41:95:ed:56:a6:26:6a:e5:48:21:3d:08:ad:e4:f8:2d:39:27:
45:a3:df:6e:23:dc:4f:d4:79:c9:07:4f:a4:0a:cd:39:a7:44:
34:4d:53:04:23:f8:59:8b:c5:a7:10:d9:90:63:f3:0a:9f:b9:
5c:74:e5:36:b0:cd:08:48:49:1f:da:75:25:16:b9:a7:84:76:
0d:84:85:99:a3:fd:62:79:f6:ce:8f:fa:89:5a:1e:37:4b:99:
b2:5f:1b:cd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTQ2RjExMC8GA1UEBRMoNDdFRjA4NTNBMkQ3REVBMjQ5QjdDM0ZBRjc4MTY5QzhG
OERCQzdFOTAeFw0yNjAzMDEwOTQ0MDJaFw0yNjAzMDgwOTQ0MDJaMBgxFjAUBgNV
BAMTDTY5YTQwYTYzLTk3OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5lSTduUWvrQvtuLyCxdLUTIBmVuKi/Fhdy9WqA5E77DAgzftAUFItbv8i3TVp
nWUbOnJd0YZ0jMrtdHyuaz9UDDYdalqu5j3QhvV4uEFQQhrRRCPPtnO/AoeyG3gO
NqkK069px/8BvGKfd/MKL0sbSYMAIn6IxjESA7pzMbRMiMJAT5/GNhYr/8sNV0B9
9/8kpmiTKVfZQ5uifw4CesWGhDuSRnJHbbAhilBIQ5/E9ECUOFI1nqikrg1l7ijJ
oherS56DPHPeXTmMTwtTjNsChEu4fKEKw1O1HkyLQI6NmW/P8hAKoV+x/cn6ytCS
b6W1vQ4fN2xmtjZ+ceE5SOZJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf6mTQpZI
xeKn/UCpfUztG+JbF5kwHwYDVR0jBBgwFoAUR+8IU6LX3qJJt8P694FpyPjbx+kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NDZGLzI1RDU5OERFQUIy
NzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FKSnQ4UDY5NEZweVBqYngt
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUi04SVU2TFgzcUpKdDhQNjk0RnB5UGpieC1rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
NDZGLzI1RDU5OERFQUIyNzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FK
SnQ4UDY5NEZweVBqYngtay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB0bQiPD3ZBHPbUMk5jf8bBNKvHFRn7KTnVZkmkI8Ov+cH9Rf01cqBTYu6t/wtA
WrpmVnWUMS+UBLp5eVryH3p37gbp/f7fMAcsI+23xh20Mm+pKFNrCTq7wNeEl0Cm
qMYuJvZJ1FtX9XAOcp9f/iCnWQTw5f9xG/luiErl9B8IEr8ByevV7qPvt3ABHbW/
XetlD/f/gnlK454zvRD+f2gkujFBle1WpiZq5UghPQit5PgtOSdFo99uI9xP1HnJ
B0+kCs05p0Q0TVMEI/hZi8WnENmQY/MKn7lcdOU2sM0ISEkf2nUlFrmnhHYNhIWZ
o/1iefbOj/qJWh43S5myXxvN
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:41 2026 by rpki-client