
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json)
Hash identifier: f11wwixAH9NLwVO2JzHjTmmJSrlzLP58rv27+0omlmY=
Subject key identifier: 9C:31:91:37:B9:D2:04:90:33:13:E3:28:AA:E8:31:A1:F1:05:9E:56
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
Manifest number: 010F
Signing time: Sun 01 Mar 2026 07:01:49 +0000
Manifest this update: Sun 01 Mar 2026 07:01:49 +0000
Manifest next update: Sun 08 Mar 2026 07:01:49 +0000
Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: HnTSkKq/wSj3HF+5F9HmQArvr9005SBFGz8PuFkz9WM=)
2: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: +qIyoxy4aGRwH3KPJiIeeGzTmFk3xSC3JgRiA3rxQ1E=)
3: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: i/i9Fi7DO7CQzIWXaTSwtFH1LWaUqhByPYFzXOD85Kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Validity
Not Before: Mar 1 07:01:49 2026 GMT
Not After : Mar 8 07:01:49 2026 GMT
Subject: CN=69a3e45d-e0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:6d:37:06:86:5b:a1:86:e4:63:76:22:cb:
2a:8f:a9:9f:11:44:c1:1f:2c:f2:84:78:8d:0a:45:
5b:64:1b:5f:ee:c3:b5:57:83:74:cc:0d:9e:79:1f:
b1:d6:5c:26:00:ad:26:0b:71:56:44:67:76:09:0b:
f7:cc:ea:6b:c7:99:11:ad:4f:13:da:a3:e8:0c:e9:
91:53:b1:d8:dd:bf:1d:a7:21:ec:ab:01:78:12:c2:
6a:79:8e:67:53:fa:56:7c:78:3c:52:0e:87:e2:14:
bb:bc:3d:d3:b9:a7:53:d4:bf:5e:eb:0e:2c:43:68:
39:be:9d:2d:a8:28:1a:6f:15:42:c2:2a:91:33:20:
05:a8:6f:df:93:63:1e:0b:24:ce:76:2a:c2:7f:5c:
7d:d9:be:54:0a:e1:95:13:d7:37:64:4b:d8:d5:e2:
a9:77:0e:b3:ea:fd:55:5d:83:fe:c0:e1:dd:77:ff:
b0:81:40:c9:21:b2:b1:bb:bc:70:6a:13:dc:c2:8b:
72:96:be:63:8c:bb:91:52:4d:ca:01:59:fb:2f:42:
0e:d9:78:b6:bf:5c:91:77:99:d5:37:91:1a:7e:dc:
98:5e:61:bc:99:88:d8:d4:2f:71:6b:a5:86:91:d1:
9b:b1:89:58:d4:aa:a6:4e:29:8c:4a:40:ce:97:dc:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:91:37:B9:D2:04:90:33:13:E3:28:AA:E8:31:A1:F1:05:9E:56
X509v3 Authority Key Identifier:
keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:a9:0f:e9:84:74:23:ed:be:03:7b:85:7b:89:7a:80:60:
74:0c:eb:40:aa:c0:42:4d:30:0d:28:92:f7:a7:a0:53:ab:96:
b4:8f:0d:f1:b6:7a:3f:1c:3e:2e:64:8d:d9:55:2e:c7:64:e4:
74:bc:05:23:fe:78:9f:12:f9:c6:7e:a8:66:0a:2c:9c:04:c0:
e2:8b:47:06:b7:9b:c8:2d:c4:07:b9:7b:1e:b0:c6:5d:ef:ed:
22:f9:54:84:20:55:d4:e4:23:7c:ab:f7:d0:ee:36:c0:f5:95:
27:9a:63:9e:ac:f5:72:33:9a:e7:32:3a:ca:37:e7:4c:46:cd:
df:8b:5c:5d:64:5c:f4:17:68:27:1f:b5:c8:f9:16:3a:85:da:
06:6a:bb:2f:77:8e:a7:f0:a3:c9:8c:de:62:8d:e2:09:57:33:
c5:8f:65:8b:af:82:d4:de:aa:28:2b:20:3f:05:93:d3:8e:84:
67:ef:24:67:8c:98:29:9c:83:fd:80:a9:c7:23:58:6d:49:a8:
3b:8d:39:f9:81:52:ca:2e:27:fd:67:8d:c4:8b:62:6c:43:d7:
b5:28:90:fb:01:4a:9a:bd:6f:d6:cf:08:53:02:1f:8b:00:0b:
2f:a5:7c:48:d2:13:bb:91:d5:50:d3:59:e6:1b:b3:11:0d:e0:
08:dc:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:37 2026 by rpki-client