
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json)
Hash identifier: pjTnoBrS4f1L8ypqhPYuwbgkILSgKldvdUsClnFdNAM=
Subject key identifier: 9E:A6:1E:E7:82:69:E7:A9:23:8A:69:23:36:39:72:71:AA:5E:5D:D0
Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Certificate serial: 05BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
Manifest number: 05B4
Signing time: Sat 28 Feb 2026 23:43:20 +0000
Manifest this update: Sat 28 Feb 2026 23:43:20 +0000
Manifest next update: Sat 07 Mar 2026 23:43:20 +0000
Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: Fj+k4CEhpOYOPHjEXdBa1XKIAuu6V5l2MqAa7aViP1M=)
2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: qee+KTCUp6bDNFwH36fAFYsE8VZ1yRt+iGxeFmVp9gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Validity
Not Before: Feb 28 23:43:20 2026 GMT
Not After : Mar 7 23:43:20 2026 GMT
Subject: CN=69a37d98-94b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:a2:9e:fc:0f:99:ca:a6:4d:e0:34:63:5a:
0a:53:b1:b7:62:ff:84:44:ec:5b:fe:56:68:66:d1:
66:fb:2c:df:b9:e7:e1:07:28:b5:b1:f1:16:ac:14:
4d:bb:39:f4:bb:2e:68:68:a7:2a:f7:6d:6b:b2:c8:
e9:b1:46:7c:be:ec:bf:44:f8:03:ed:2a:57:62:7f:
1b:3c:f1:c3:6d:51:65:c0:1a:c4:80:d8:16:91:66:
0e:9f:38:25:37:f0:e4:7d:2b:ea:aa:79:0c:4c:b5:
65:ca:3c:71:5b:8b:ac:ed:5e:96:2d:c1:52:64:7a:
1a:4b:04:cd:b7:d3:bc:8c:b5:3c:a6:94:bd:48:31:
94:30:19:04:14:1e:7a:cb:73:72:68:d5:15:9a:e8:
a8:f8:75:71:c2:d7:cd:25:93:42:f7:9f:fd:99:ae:
eb:92:a4:6b:26:e4:9d:53:65:26:ce:09:dd:ee:8f:
52:dd:9b:a4:f5:a6:af:ad:e7:8c:37:4c:50:10:04:
46:ef:fa:ff:fe:6d:3d:78:bf:6c:42:b8:23:71:8f:
a6:dd:7a:22:72:67:5e:79:5d:ac:d0:aa:47:13:b9:
99:c7:6b:c0:cb:2b:59:5e:b4:8b:69:48:0e:22:16:
86:22:ec:fd:d2:52:c7:f2:a5:ba:57:54:31:7d:30:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:1E:E7:82:69:E7:A9:23:8A:69:23:36:39:72:71:AA:5E:5D:D0
X509v3 Authority Key Identifier:
keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:7e:5f:47:22:06:ee:50:b0:67:b4:49:84:94:7c:36:31:
95:7f:d6:69:5a:a7:27:0b:4d:7a:e2:44:b4:96:5d:8f:b2:ee:
67:33:f2:a0:3b:c3:9a:e7:33:98:82:e7:ac:cb:5c:43:c0:f7:
7d:d2:80:fa:c8:b4:1e:fa:9d:67:4c:8b:02:cc:12:a6:86:45:
b5:20:ad:b8:cb:1d:95:e8:d9:1b:7f:da:1b:26:3d:db:cf:d6:
d8:0e:8c:7f:d9:25:d9:54:79:9c:86:05:1a:81:9d:dd:15:06:
d8:61:d7:b0:6d:d4:f8:02:47:8b:ef:78:2a:3d:23:68:d9:50:
bf:0b:aa:71:0d:41:46:5d:47:51:76:c0:25:7c:7b:2f:cd:50:
ab:eb:56:da:aa:2c:3e:33:47:39:e4:3d:f7:34:ea:66:b9:9a:
9c:35:26:be:05:aa:d4:74:3b:61:bb:ee:12:87:4c:07:a6:1a:
cc:51:59:fe:2a:b0:c3:e1:cc:f1:bb:8d:9b:c9:57:8c:da:85:
71:c6:69:42:38:79:05:b4:f4:04:80:24:2f:0c:b1:c0:49:30:
8d:c4:bf:18:22:4e:0f:38:cc:be:32:5f:92:f8:b1:c9:8c:99:
66:40:1a:11:00:9e:7e:84:be:c1:4a:89:51:fd:2a:bb:07:05:
c1:86:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:46 2026 by rpki-client