
$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: lYbVGCmnGUu6+6AAJB6+D5sO4q7Vf5NOE17uplsEaRs=
Subject key identifier: F9:9D:0C:C3:E1:50:6B:3A:FC:D4:39:BB:89:35:EF:A9:2F:88:F1:B2
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 020E
Signing time: Sun 01 Mar 2026 03:42:43 +0000
Manifest this update: Sun 01 Mar 2026 03:42:42 +0000
Manifest next update: Sun 08 Mar 2026 03:42:42 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: pKBIB2urBB5bNjJEOu15w+2utnQB6dzUdkQ1BWsf/Us=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: f37dHVQCBKGAv6cZ++QH+hDhUU+kBGU4CSkotJ/zJb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Mar 1 03:42:42 2026 GMT
Not After : Mar 8 03:42:42 2026 GMT
Subject: CN=69a3b5b3-f247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:d5:5f:71:59:29:40:dd:36:36:6f:27:9c:
66:70:60:5c:87:13:ab:4c:a1:b9:bb:51:1f:89:47:
25:7a:ce:cb:b9:5b:70:80:f2:61:fb:62:81:da:af:
48:56:6d:3f:b2:e1:51:c7:3e:fd:ec:bb:89:ba:01:
c3:40:8c:4a:9f:11:a9:80:39:9d:df:58:a7:ae:71:
7b:0f:c4:d2:37:62:fa:77:51:58:01:42:78:a6:05:
35:f8:3c:74:87:91:ef:94:92:d0:29:e9:09:0e:9f:
70:4a:00:c0:37:e8:22:3c:40:2c:6a:18:b0:9b:ef:
18:7d:81:60:90:3a:19:41:ed:46:9c:52:30:b1:2e:
9c:2f:6e:6d:2a:f2:c5:50:df:b3:d9:ba:26:31:60:
52:0e:95:44:f6:99:b3:fa:68:fa:af:df:dd:29:5e:
35:33:4b:27:9f:ec:cd:c9:79:d8:ff:86:e7:08:5a:
f1:e6:5d:98:6a:de:87:42:a4:8c:59:21:a5:e3:9a:
8d:82:15:47:9c:e8:7e:3e:f9:ad:f1:af:50:0e:f9:
20:56:83:85:52:23:7f:e0:f5:7d:5a:54:58:33:69:
3f:85:f5:cb:15:7d:04:6a:cf:98:43:74:23:ef:94:
25:82:65:b5:39:6a:c3:0a:c5:58:15:ad:34:2a:20:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:0C:C3:E1:50:6B:3A:FC:D4:39:BB:89:35:EF:A9:2F:88:F1:B2
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3e:e3:bc:02:ae:1e:5f:75:4d:97:ec:a1:0a:9d:d1:04:6c:
f7:23:b4:39:45:9f:62:75:b9:b3:a5:3a:29:9b:ef:5e:b1:4b:
48:b1:f5:d9:3e:65:19:79:02:a5:18:81:0a:1c:66:0c:a0:b5:
1b:c7:69:3e:70:d5:07:c1:be:d1:65:ae:2f:12:dc:cd:22:1a:
44:ee:c8:97:56:b8:75:a7:01:3d:bd:9a:3e:8b:37:e0:85:e7:
78:e1:9b:cc:b3:1b:88:ea:85:4d:b9:a5:bf:50:f9:2e:2e:0f:
ea:c9:8c:8d:87:02:90:0b:a2:43:92:48:2b:12:64:96:bb:9c:
ae:7b:de:7b:2e:79:01:6a:13:7f:18:97:b0:d0:38:92:4a:3a:
b0:b1:f8:3e:62:6c:eb:20:d1:97:5d:2c:d9:de:a2:e1:5e:60:
f0:0b:b0:4e:5a:7e:be:f9:cd:f6:14:d2:a7:28:ba:18:5f:9e:
0d:de:07:50:94:72:19:90:39:41:42:4b:22:63:94:b1:6d:77:
62:59:d6:f3:6d:33:51:a9:e6:95:55:c8:86:e9:2b:87:f8:f9:
3c:bf:92:6e:de:52:55:74:aa:50:83:96:ba:3b:9f:d0:24:4a:
c4:9e:1d:ff:e1:29:b3:8e:b4:45:f6:36:f0:e0:eb:74:4e:b4:
a0:c9:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:57 2026 by rpki-client