
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier: xMtgv0DII19gDU4hfmBr0XqdfXZIK1DNpu0mWMGGwlY=
Subject key identifier: 20:3C:C3:4C:92:42:9E:7B:CC:A3:40:22:ED:FA:13:67:AC:75:28:56
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number: E8
Signing time: Sun 01 Mar 2026 23:32:18 +0000
Manifest this update: Sun 01 Mar 2026 23:32:16 +0000
Manifest next update: Sun 08 Mar 2026 23:32:16 +0000
Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: bvhThhIavw2QStKn6db8pUO7zDGDLXXcu1+2Slj4YL0=)
2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Validity
Not Before: Mar 1 23:32:16 2026 GMT
Not After : Mar 8 23:32:16 2026 GMT
Subject: CN=69a4cc82-5168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:bb:54:fc:41:49:74:94:14:8e:7c:8e:f6:
e7:8f:89:39:08:f4:a6:12:33:f6:62:de:26:dc:e9:
6d:6e:0e:11:45:fc:9e:1a:c1:0c:89:a3:ad:ef:0e:
cd:6e:f4:1e:62:a0:bb:e1:95:c2:3e:8e:15:c1:83:
13:df:d2:62:c3:ea:d9:14:7b:97:fb:7b:76:6c:4f:
5f:a4:b8:cc:ed:74:2a:80:e7:b9:15:a8:05:ea:ad:
9a:ad:30:9e:9c:2c:8a:94:88:c1:fe:ef:d6:89:fd:
78:95:53:98:50:0b:77:0f:be:76:d7:c3:cf:fa:e4:
93:91:cf:fb:4d:27:28:9d:e7:d7:b0:a6:2b:e2:b5:
f2:26:80:82:d9:c1:c2:a9:08:10:8f:3d:6b:a0:10:
50:ea:07:8a:b3:8c:72:32:26:17:05:d9:95:60:40:
fe:7a:f0:9f:28:68:0d:16:fd:53:7b:63:c5:27:52:
5c:d6:e1:38:79:ad:e5:d4:89:be:c7:55:57:29:e2:
5f:3d:09:76:11:96:8d:f6:dd:08:f2:c3:28:ca:2d:
bc:8b:6d:6c:64:7b:2c:de:e1:92:1e:c1:13:4c:47:
72:65:8b:c5:9d:bd:7a:7b:8f:2c:9b:7b:23:1b:ff:
c9:cd:3a:d6:a8:cd:6e:49:c7:3f:c6:f2:f3:dc:c8:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:C3:4C:92:42:9E:7B:CC:A3:40:22:ED:FA:13:67:AC:75:28:56
X509v3 Authority Key Identifier:
keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:54:bb:f7:f6:69:30:14:56:39:98:22:0a:be:00:48:87:cd:
62:55:d0:41:fd:c3:12:85:35:8c:ad:63:82:6d:36:ea:ea:ae:
58:6c:b0:c4:3d:63:b8:3d:f8:c3:15:df:3b:7c:52:92:e9:76:
f3:73:25:64:74:fd:c5:50:47:2c:e2:e6:55:33:1f:b3:59:44:
e1:75:27:7e:2c:25:4b:f2:ac:10:11:bd:b0:59:1f:49:ad:0a:
f6:e7:fe:7f:b0:b2:55:86:2e:15:8a:9a:0c:11:c0:c5:35:77:
78:16:fe:97:01:3a:94:35:d5:68:5d:fc:3f:9a:0e:6f:b4:c8:
33:c9:0d:58:19:b9:c6:08:ff:e9:cf:fe:bd:ce:db:ac:db:2d:
0f:69:d8:ae:3a:b9:2e:c1:9a:2a:42:f8:d3:2c:83:df:dd:27:
7b:44:1c:81:2f:15:2c:f0:87:7e:43:76:79:ae:bc:40:bb:c2:
1d:8b:0e:6d:54:01:7e:75:94:5d:26:3a:09:fb:0e:9f:cc:c7:
67:45:38:a8:a3:61:7b:eb:98:7d:7f:f6:b7:bc:27:37:42:02:
c4:b3:74:c8:4a:59:a1:fd:3b:95:09:35:44:36:f3:95:7d:a1:
2f:c6:60:28:45:d1:81:d6:3f:06:10:10:51:f7:cd:5a:6a:17:
b3:f2:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:35 2026 by rpki-client