
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json)
Hash identifier: Ij1ItF1q2RbCckhzb42exyLMefbgQBei++E6q7rfEcI=
Subject key identifier: 8F:D5:0B:CC:22:69:11:07:B3:98:50:25:FE:4F:51:2E:9E:ED:A6:5F
Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Certificate serial: 0A1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
Manifest number: 0A12
Signing time: Mon 02 Mar 2026 19:39:54 +0000
Manifest this update: Mon 02 Mar 2026 19:39:53 +0000
Manifest next update: Mon 09 Mar 2026 19:39:53 +0000
Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: Yb5cRDdd4hpDM7YMx08PVLctvSejxhd/RTnMATf+vt8=)
2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: 12BxNNG4r0fp+ny7K/GCAHiE9UmqCnqwlOwyKQlw0O8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587 (0xa1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Validity
Not Before: Mar 2 19:39:53 2026 GMT
Not After : Mar 9 19:39:53 2026 GMT
Subject: CN=69a5e789-6ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:7a:b3:70:61:f8:26:c6:53:ba:ef:a2:ca:
76:7a:1f:2e:b7:fe:80:da:f7:b7:a3:d2:34:95:bd:
d6:9a:74:00:73:c2:ed:90:77:f5:81:f2:97:0c:66:
ac:0a:fd:40:8f:29:bd:01:74:46:e5:ad:e7:44:04:
04:7c:a6:2e:bd:b7:55:94:d5:b6:c1:0f:d7:72:eb:
de:50:62:e0:cc:69:8f:24:85:ba:6a:91:af:02:c1:
69:ea:bb:2d:4e:90:a0:7a:59:80:2b:fd:3d:c2:b6:
f0:1e:8a:ba:aa:b9:e3:30:df:7f:fd:6b:51:6d:58:
27:0a:9e:30:50:23:8a:29:a0:d9:80:67:19:40:7a:
5a:0e:2c:a2:02:56:38:2e:29:9a:f2:3e:b6:de:27:
90:73:90:74:77:eb:8a:95:49:da:4a:9c:3b:bc:76:
e3:5e:34:c9:84:bf:f0:3d:73:bd:34:73:c8:11:94:
0c:ab:b6:17:c4:12:a2:9a:03:c7:8f:a2:9c:66:eb:
22:32:2b:89:ed:d9:53:e1:64:8e:c2:73:bc:23:93:
6e:db:80:ef:fe:20:c7:e3:b1:b7:3e:5a:90:65:cf:
97:3d:1c:f7:2e:6c:f2:e2:3c:7c:a5:16:2f:c3:cf:
e6:40:78:73:61:b2:8f:47:21:06:0b:2a:05:79:a1:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:0B:CC:22:69:11:07:B3:98:50:25:FE:4F:51:2E:9E:ED:A6:5F
X509v3 Authority Key Identifier:
keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d8:6b:8e:27:ff:6f:b1:e1:54:e3:96:60:c1:93:8e:da:7d:
47:6e:8c:8c:f0:87:9c:93:a4:d0:87:88:ec:2e:47:ab:18:82:
1d:60:40:fd:43:fe:67:17:5d:ff:fb:31:fb:c7:66:22:b4:df:
62:ad:14:ef:5e:6a:f8:da:70:64:ed:f0:68:f2:f7:d2:7c:b8:
64:6c:6b:8e:23:24:83:6c:4b:05:a2:d4:04:55:05:03:88:2b:
67:17:ca:4e:42:62:19:fd:34:68:a2:13:9b:a0:f1:12:be:44:
d6:eb:3b:92:c5:27:1c:6d:e3:c5:e4:da:c3:62:7e:da:0c:d6:
f9:d0:7b:ec:06:8e:69:77:01:c3:7f:7b:4d:f0:22:4a:eb:4e:
ea:e5:5a:98:6c:f4:5e:96:b0:a5:3e:6c:72:74:cc:b1:e1:a6:
5f:7b:f2:19:a0:67:f3:a9:7a:60:68:10:3b:6e:cc:33:68:d4:
8c:b9:17:41:9a:49:d7:a7:41:70:1e:a5:ae:24:97:2b:21:72:
9e:d5:4b:42:2e:aa:e2:da:2b:64:53:9e:54:12:9c:62:4a:50:
89:51:61:07:eb:ce:32:65:47:ea:a0:00:3f:45:10:29:e3:39:
62:ba:4b:14:e7:13:12:17:b0:7d:4c:40:ee:08:7b:a0:72:c5:
05:33:95:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC
MURGMzAzQjEwHhcNMjYwMzAyMTkzOTUzWhcNMjYwMzA5MTkzOTUzWjAYMRYwFAYD
VQQDEw02OWE1ZTc4OS02Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4Z6s3Bh+CbGU7rvosp2eh8ut/6A2ve3o9I0lb3WmnQAc8LtkHf1gfKXDGas
Cv1Ajym9AXRG5a3nRAQEfKYuvbdVlNW2wQ/XcuveUGLgzGmPJIW6apGvAsFp6rst
TpCgelmAK/09wrbwHoq6qrnjMN9//WtRbVgnCp4wUCOKKaDZgGcZQHpaDiyiAlY4
Lima8j623ieQc5B0d+uKlUnaSpw7vHbjXjTJhL/wPXO9NHPIEZQMq7YXxBKimgPH
j6KcZusiMiuJ7dlT4WSOwnO8I5Nu24Dv/iDH47G3PlqQZc+XPRz3Lmzy4jx8pRYv
w8/mQHhzYbKPRyEGCyoFeaFfeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/VC8wi
aREHs5hQJf5PUS6e7aZfMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF
N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt
VV93VUg0dkJyQ2V4M3pBN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf9hrjif/b7HhVOOWYMGTjtp9R26MjPCHnJOk0IeI7C5HqxiCHWBA/UP+Zxdd
//sx+8dmIrTfYq0U715q+NpwZO3waPL30ny4ZGxrjiMkg2xLBaLUBFUFA4grZxfK
TkJiGf00aKITm6DxEr5E1us7ksUnHG3jxeTaw2J+2gzW+dB77AaOaXcBw397TfAi
SutO6uVamGz0XpawpT5scnTMseGmX3vyGaBn86l6YGgQO27MM2jUjLkXQZpJ16dB
cB6lriSXKyFyntVLQi6q4torZFOeVBKcYkpQiVFhB+vOMmVH6qAAP0UQKeM5YrpL
FOcTEhewfUxA7gh7oHLFBTOV/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:49 2026 by rpki-client