
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: Squtf1vHc8OyPM6ZkLbAxa6mSe7EHrHddXHotl3+g5c=
Subject key identifier: 21:2C:C2:52:DB:5A:56:0F:F0:80:C4:3B:C2:C0:21:EF:59:63:8C:FA
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 0279
Signing time: Mon 21 Sep 2026 01:58:59 +0000
Manifest this update: Mon 21 Sep 2026 01:58:59 +0000
Manifest next update: Mon 28 Sep 2026 01:58:59 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: i+1uzC8+RGeDfyIc756AeMY50aoUNVrGVGbNREyubm0=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NLPxqKYUf9lOT/IENYdccH8n5nolWXb5/WWyykUnYuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Sep 21 01:58:59 2026 GMT
Not After : Sep 28 01:58:59 2026 GMT
Subject: CN=6ab08f63-2474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:44:44:36:d1:df:ab:ca:6e:aa:26:4d:0b:
58:27:4b:ee:df:1e:07:55:ab:12:1a:13:ba:6e:16:
b4:05:1f:15:37:4f:51:e1:ab:d0:65:84:99:21:9d:
a9:cb:8e:34:03:a8:55:23:43:22:0e:cb:27:46:7c:
f5:88:8a:c8:c2:8f:ce:04:61:d5:d9:1c:01:fa:0e:
ac:70:d8:a6:3a:74:ef:8b:11:b9:0f:f0:1e:2a:3e:
70:0b:c7:9a:6d:21:09:c6:73:64:11:91:88:c4:ea:
1b:78:3f:06:cd:2e:7e:aa:77:d6:aa:ae:72:2b:d7:
3c:4a:55:b5:b2:73:3a:3c:ee:35:f2:61:71:0a:ed:
69:29:c8:1f:fd:0f:72:c9:ae:7f:59:64:dc:fb:cd:
50:07:b1:d5:a4:20:34:82:3d:dc:e8:94:d5:c6:60:
35:b5:8d:fa:32:9c:d4:6a:d5:04:6d:91:2f:b6:92:
41:28:95:63:10:aa:4a:98:c0:8e:c4:f9:08:76:12:
36:12:7e:5c:cf:77:6d:69:7b:c4:7b:9a:20:0d:cd:
3e:a5:0a:79:de:7a:22:ee:b9:73:84:e9:e3:3b:46:
81:be:93:75:ea:60:f5:9f:6f:30:38:8b:da:a3:24:
d1:aa:d0:45:92:f5:39:8f:93:1a:4f:06:27:c3:32:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2C:C2:52:DB:5A:56:0F:F0:80:C4:3B:C2:C0:21:EF:59:63:8C:FA
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:c5:b6:80:3e:77:7b:d7:95:b1:76:f7:d2:64:ea:d5:e3:
47:06:b5:5b:97:82:8a:ba:f2:fe:c8:66:7b:74:5d:7b:06:cd:
c2:df:63:fe:38:e0:4c:31:8e:92:76:00:cc:91:8b:a4:13:eb:
35:76:22:82:92:1e:50:60:b8:b8:04:86:c6:40:d1:1d:7f:84:
7b:f5:f4:9c:93:4d:06:c7:b1:83:fd:a4:11:a1:9f:59:78:5f:
18:91:56:89:32:4d:df:e6:45:05:c9:4e:7c:33:11:8a:a0:ab:
56:e8:33:e7:dc:a0:58:bc:5c:6f:7d:de:aa:f0:d6:a1:5a:da:
bd:95:2e:12:57:81:4a:ec:cb:ff:f9:12:7e:af:81:76:e3:09:
30:26:ea:df:a3:bf:dd:d1:12:a6:62:f9:19:a6:16:e9:39:86:
2a:b0:d9:3f:af:41:a5:f6:53:95:87:75:a0:bb:bd:fd:01:3d:
8b:17:a4:00:be:ba:6c:6e:cb:47:ee:2d:2b:f4:48:c0:ed:67:
24:c5:65:54:44:9f:1d:30:2a:9c:1a:9a:29:3b:cf:34:ba:ab:
57:f8:0d:32:30:9c:af:3b:07:12:9f:83:98:e8:02:32:f1:ef:
7e:37:78:bb:52:5e:38:21:59:7d:b5:ac:01:ab:72:44:e2:cb:
dc:64:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:19:04 2026 by rpki-client