
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File: s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier: xPLsJa2y+bjy0RjPGd0PR1fWC8qcy255raUsjPIBg0U=
Subject key identifier: D5:38:5F:44:1D:2E:00:17:9F:95:13:FB:71:55:7C:9B:6A:0B:6E:B0
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer: /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial: 02D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number: 02CF
Signing time: Mon 21 Sep 2026 01:11:27 +0000
Manifest this update: Mon 21 Sep 2026 01:11:26 +0000
Manifest next update: Mon 28 Sep 2026 01:11:26 +0000
Files and hashes: 1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: U2+gE+nWG74jm29xo+vDMAix4kvjoKjRVkFQvkQXT/Q=)
2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: rd53I9p/WSE4c6AwU5a8hFcHTZZkVn7MtueB7HLYYks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725 (0x2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Validity
Not Before: Sep 21 01:11:26 2026 GMT
Not After : Sep 28 01:11:26 2026 GMT
Subject: CN=6ab0843e-1894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:78:18:fe:cd:de:27:5d:8d:94:c6:ed:cf:
3a:cc:c5:e8:11:f3:c9:25:d8:2a:4f:ff:b0:30:cd:
37:5c:bd:69:fc:bb:bc:d3:03:1b:56:c1:b5:8e:a5:
b7:55:54:97:8f:03:e1:b3:1d:95:0c:d3:4f:b2:f6:
e3:b6:2f:fd:4d:ea:df:47:9c:85:12:cd:3d:4d:ea:
f0:35:6b:78:49:82:3b:c2:a1:c4:3c:dd:b7:a6:c0:
09:fc:02:eb:66:10:3c:9d:42:76:13:c1:c3:80:96:
8a:5e:da:e5:d7:4f:74:96:02:8d:2d:55:8f:23:ff:
2a:b5:ff:5a:68:77:3d:74:5d:10:1d:01:d0:ef:6a:
cd:16:ba:ec:eb:32:67:63:d4:3c:ff:12:a7:18:43:
36:e4:bc:8b:12:c0:85:f1:1b:90:ea:bd:bb:eb:12:
4a:a5:80:7b:02:6f:5f:7e:9d:b2:59:bd:c9:d5:01:
92:53:8e:ac:05:bf:b3:1a:9f:4b:c8:b0:a8:c9:57:
36:c1:32:06:ae:6b:3d:9a:58:64:16:b1:e5:e7:f5:
3a:f1:23:42:13:b9:f7:69:46:29:53:4a:a0:10:9c:
ba:0b:1c:03:03:1b:f5:60:0a:a6:b0:85:78:e2:80:
e2:25:b3:7a:fa:a1:48:bc:94:1f:67:77:ba:8a:cf:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:5F:44:1D:2E:00:17:9F:95:13:FB:71:55:7C:9B:6A:0B:6E:B0
X509v3 Authority Key Identifier:
keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f2:66:5a:df:f0:aa:59:15:0b:3e:51:8b:16:64:7e:4c:22:
4a:56:51:db:2d:a9:4f:20:c6:6a:d3:27:0e:cd:5c:4b:ac:d0:
43:c4:a3:da:06:66:e6:a4:ed:53:d9:1b:01:57:81:ef:ad:92:
43:85:9b:f8:54:97:57:9c:a9:2f:71:7c:b7:94:cc:7c:6e:99:
75:83:da:b1:02:e0:d3:fe:be:7a:8a:95:35:29:fb:30:77:9a:
96:59:72:5a:02:ea:7b:30:41:ef:75:cd:21:d4:8a:bd:27:cb:
20:44:d7:c4:56:bc:96:ea:11:ad:b9:fe:15:e2:da:62:b8:eb:
98:e0:27:a8:56:5b:64:c7:66:9e:bd:ef:cb:a3:a7:56:56:29:
8f:26:02:5a:d3:87:54:2e:c2:e5:bd:d5:be:e8:14:0c:f4:1b:
81:bf:16:90:81:87:04:26:19:f5:2f:1b:2a:4e:55:0b:20:e7:
ee:06:cc:ea:8a:68:07:97:6b:3b:77:b0:ed:f6:47:46:da:e4:
42:56:b2:bb:4b:5c:9b:b6:2e:36:fb:b4:96:cb:2d:3f:5c:01:
8c:ad:1c:56:cc:39:4c:99:18:52:3c:31:ff:29:e9:e2:43:93:
b3:ae:26:8c:91:e5:7e:c3:35:34:81:35:34:32:da:b6:5e:b0:
5f:e3:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:10:14 2026 by rpki-client