
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
File: A8hWADTpF_SEBrQEaVALI_OVa10.mft (raw, json)
Hash identifier: /KsO+QYMEBlHFBjq6fEptID5cTTRwTaJts0faL7O3x4=
Subject key identifier: 44:9C:D3:7B:24:DC:15:02:72:0C:04:16:2B:E9:E1:67:AE:4C:B2:FC
Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Certificate issuer: /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
Manifest number: 0211
Signing time: Sun 01 Mar 2026 04:15:41 +0000
Manifest this update: Sun 01 Mar 2026 04:15:40 +0000
Manifest next update: Sun 08 Mar 2026 04:15:40 +0000
Files and hashes: 1: A8hWADTpF_SEBrQEaVALI_OVa10.crl (hash: hE6EFCd9fiDIyBP8qYHoacKEqKDjJ/f3mcbqhqXCsio=)
2: CAD00992C9C611F09C9EF018C4F9AE02.roa (hash: ReD45q5RkEAZzOqO7G9hg/fTrgFRDlSbU1Y1kh6RTWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Validity
Not Before: Mar 1 04:15:40 2026 GMT
Not After : Mar 8 04:15:40 2026 GMT
Subject: CN=69a3bd6d-4b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:c6:22:10:9b:22:f8:61:a1:48:30:9f:9a:
a3:c4:02:35:23:80:3f:ce:1f:e8:bc:63:41:9d:11:
ba:2c:06:c1:e5:72:65:e1:f5:0b:e2:55:07:e5:86:
03:fe:55:b9:72:0a:74:45:85:8d:90:1d:83:9a:2f:
3d:db:58:14:da:70:44:6f:de:f5:0c:b0:1f:d7:f9:
79:69:64:53:3f:9a:b7:12:52:3d:24:8e:99:43:f4:
d7:d9:0e:ae:7d:fa:80:bd:7a:be:20:7c:37:a1:71:
8c:74:54:a7:55:8c:87:3a:17:95:bb:28:95:2a:0c:
11:0b:13:cb:5f:81:9b:c5:1e:6d:7b:84:38:11:7f:
0c:bf:b6:b5:b8:2c:d9:fe:fa:7f:a9:1e:10:68:3c:
92:10:cb:b5:2b:f3:94:7b:91:62:a9:f2:a5:b3:b8:
35:1b:12:dc:58:8e:16:c0:8f:45:0a:60:e1:aa:61:
c5:61:2e:4d:15:2b:7a:fb:90:2b:59:3b:ca:a6:2c:
f3:4f:1a:e8:93:46:34:53:99:e3:c7:42:76:56:cb:
70:af:b4:e2:dd:fe:bc:b7:2a:d9:93:d2:e8:64:c5:
50:67:c2:67:ec:f3:d4:4f:8b:bf:e7:50:05:c6:ac:
40:11:f1:34:51:4b:c4:98:12:3f:8a:5e:62:1f:3c:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:D3:7B:24:DC:15:02:72:0C:04:16:2B:E9:E1:67:AE:4C:B2:FC
X509v3 Authority Key Identifier:
keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8e:b9:92:d4:85:67:32:42:3f:d3:48:75:b9:52:f9:95:b9:
d9:58:a8:30:0d:dd:85:e4:a7:0d:3a:dd:05:b3:2c:d9:92:08:
6b:7f:fd:dc:dc:69:83:72:47:c6:6a:39:40:d5:64:bf:28:b3:
a3:76:40:90:b2:37:0b:62:5b:52:8f:64:78:62:cd:21:6b:3a:
2b:2e:7b:4d:fe:a6:98:12:d7:e4:b1:f5:7c:a5:8a:a8:f4:1a:
2f:9f:39:0c:c1:6d:b2:38:5f:a5:9e:bb:f1:b1:61:10:f1:86:
08:2a:68:ce:be:62:d1:20:8c:c5:ab:23:50:fe:07:90:91:55:
bd:82:b3:f7:ac:c7:e3:95:6b:47:52:de:fd:d5:a0:c0:d5:17:
db:5f:30:03:69:9f:84:17:4b:9e:f4:b6:b5:cf:1c:6b:aa:f7:
11:84:d1:30:63:00:2d:14:21:1d:69:12:ce:2f:53:d6:6e:4f:
e6:17:32:20:3b:06:73:00:ba:8a:23:6f:32:05:5f:6a:3b:19:
a3:7b:e0:9f:22:f8:37:0b:44:33:c1:98:99:cd:6d:dd:14:f9:
29:97:f3:eb:f9:d1:5a:ff:40:2f:74:bf:43:e7:24:31:e8:8e:
a3:b0:39:bd:a9:0e:d1:0c:80:8b:c3:f6:5f:ee:2b:6d:3d:02:
79:ff:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:11 2026 by rpki-client