
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File: Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier: PWDK12xMgMsveuXCfzXLqeHWcioLijVDxC63z9okGSE=
Subject key identifier: E1:AD:9E:69:62:12:CE:51:1A:1B:3D:93:AC:4B:11:BF:51:27:AE:3B
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0E2F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number: 0E0D
Signing time: Sat 28 Feb 2026 14:23:42 +0000
Manifest this update: Sat 28 Feb 2026 14:23:41 +0000
Manifest next update: Sat 07 Mar 2026 14:23:41 +0000
Files and hashes: 1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: 0ni0j/x+ZgJp6nWf/rRMUVtuhxPjcpd4OtdzdIQapaU=)
2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: z3Q0XwSryFlf5ykqdN5Y1TdhtSCfR2jxPCzlYL9e1mQ=)
3: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: YgDfwoJsux34uSaM5jXKcO0HoCC5yHWaw8GBRqOn1lo=)
4: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: VRtnd9Tj1mWAfM/JLgDB4PLLpcyhK2ei01M7Ec3zpI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3631 (0xe2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: Feb 28 14:23:41 2026 GMT
Not After : Mar 7 14:23:41 2026 GMT
Subject: CN=69a2fa6e-d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:c4:a7:ea:8b:e6:b9:d4:e1:3b:a3:71:eb:
aa:fd:8b:20:87:f2:d5:4c:1b:68:4e:bd:92:ba:62:
6a:69:f6:f1:e5:50:73:14:ac:15:a0:17:e9:e6:e1:
63:c1:23:39:10:b8:df:27:c4:26:9c:52:7d:b7:d2:
ce:c9:fd:15:c3:d4:d6:94:13:65:b2:23:b6:62:08:
96:e4:1b:80:1b:5f:a3:16:3f:9c:9c:4f:d7:bf:f2:
48:11:2a:32:b2:b4:ec:b8:c9:83:c5:2d:13:bf:7e:
11:df:a8:c3:00:6f:e5:b1:32:69:b0:27:bd:e1:fd:
ac:e7:3f:9d:cf:a7:99:7c:0e:d5:62:cd:50:29:75:
35:f9:6e:87:36:9a:25:df:2a:13:e3:7a:58:81:5f:
90:b3:35:f0:ac:d9:ce:93:ed:cb:fd:c8:4a:83:cb:
56:43:6a:3d:e8:29:22:73:5c:15:29:7b:ec:b3:81:
83:e4:16:e8:d2:6d:d1:d7:24:4d:00:01:d9:ae:13:
a9:01:79:67:40:5a:e5:03:16:87:96:78:a2:4e:6e:
bf:95:7b:a2:9a:24:92:73:76:ec:54:52:6f:43:1f:
0e:a9:82:63:06:00:8d:b1:fe:fd:62:7b:68:30:50:
9f:e0:07:c5:e1:93:e1:4a:d6:b8:b5:3c:3d:bd:33:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AD:9E:69:62:12:CE:51:1A:1B:3D:93:AC:4B:11:BF:51:27:AE:3B
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c4:9c:6c:6b:53:a5:1c:5e:ce:81:ab:16:c8:28:21:95:ac:
a5:39:27:57:ce:94:6b:eb:eb:6c:d7:4c:1f:3b:9d:79:80:f5:
33:9d:b2:d8:2d:68:fb:27:cb:87:f9:fe:43:f6:be:e8:63:11:
59:4b:da:b9:6d:59:e9:c4:92:41:6c:9e:94:68:e6:49:3c:ce:
89:a1:67:96:b3:1a:4a:a4:9f:1b:0e:d1:f8:19:11:42:dd:77:
dc:d7:16:b2:c8:49:52:de:d7:c7:0e:0a:0e:d9:19:d7:11:c3:
0e:e8:f5:ae:75:db:f3:fe:63:20:12:71:36:b9:36:b3:49:5d:
17:89:cd:0b:ae:d0:6c:0e:3d:33:b0:cf:b7:6f:c3:5d:cd:31:
64:45:30:3a:4b:c3:bb:ae:5c:54:68:45:d8:66:94:9e:0f:bb:
9a:11:a5:81:60:dc:fe:3b:b9:d3:69:8f:33:c2:4b:36:a5:00:
da:1d:c7:56:2d:ba:b1:06:ab:e5:82:f8:6c:52:14:80:87:ea:
8e:6b:88:a3:c0:01:e6:78:a8:f4:c0:b0:c5:47:3d:a6:ec:cd:
c5:46:7b:6e:12:a8:6b:b1:d8:b7:15:d4:6c:5c:f3:08:9c:29:
26:28:e1:fb:10:ef:ef:df:df:34:8b:c8:b9:b7:6c:74:da:b8:
f4:ad:ba:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1
MTk1QjNCQTkwHhcNMjYwMjI4MTQyMzQxWhcNMjYwMzA3MTQyMzQxWjAYMRYwFAYD
VQQDDA02OWEyZmE2ZS1kNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvTEp+qL5rnU4Tujceuq/Ysgh/LVTBtoTr2SumJqafbx5VBzFKwVoBfp5uFj
wSM5ELjfJ8QmnFJ9t9LOyf0Vw9TWlBNlsiO2YgiW5BuAG1+jFj+cnE/Xv/JIESoy
srTsuMmDxS0Tv34R36jDAG/lsTJpsCe94f2s5z+dz6eZfA7VYs1QKXU1+W6HNpol
3yoT43pYgV+QszXwrNnOk+3L/chKg8tWQ2o96Ckic1wVKXvss4GD5Bbo0m3R1yRN
AAHZrhOpAXlnQFrlAxaHlniiTm6/lXuimiSSc3bsVFJvQx8OqYJjBgCNsf79Ynto
MFCf4AfF4ZPhSta4tTw9vTP/iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOGtnmli
Es5RGhs9k6xLEb9RJ647MB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF
QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy8wMUIwNjlGNkNFQkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBD
NWc4a2FaR1RyaUZSbGJPNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAscScbGtTpRxezoGrFsgoIZWspTknV86Ua+vrbNdMHzudeYD1M52y2C1o+yfL
h/n+Q/a+6GMRWUvauW1Z6cSSQWyelGjmSTzOiaFnlrMaSqSfGw7R+BkRQt133NcW
sshJUt7Xxw4KDtkZ1xHDDuj1rnXb8/5jIBJxNrk2s0ldF4nNC67QbA49M7DPt2/D
Xc0xZEUwOkvDu65cVGhF2GaUng+7mhGlgWDc/ju502mPM8JLNqUA2h3HVi26sQar
5YL4bFIUgIfqjmuIo8AB5nio9MCwxUc9puzNxUZ7bhKoa7HYtxXUbFzzCJwpJijh
+xDv79/fNIvIubdsdNq49K26Dw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:08 2026 by rpki-client