
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json)
Hash identifier: kGFRr5/OlnhX3aWE7i9/9B3/5cRZPqNOiC9nrEE8a1c=
Subject key identifier: B7:C7:39:1D:38:A2:8D:8E:1D:A8:D9:F9:21:75:D7:C6:50:EA:31:F0
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial: 0349
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
Manifest number: 0337
Signing time: Sun 01 Mar 2026 23:44:32 +0000
Manifest this update: Sun 01 Mar 2026 23:44:30 +0000
Manifest next update: Sun 08 Mar 2026 23:44:30 +0000
Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: sehSE14wNzi/RrBqfGbteYON8WYsMlJb1EJ8HagntDc=)
2: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wgip0DQGeaZ0QNSC6Osjp3LdtBXVxXRo5X2o3r8AIKo=)
3: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: 2bSuW/W2EAJDExuMn72UQi0Hj4wXVmW13H/TPfYijPA=)
4: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: BahbEschYMgJrMF0BLS9CUwIvpM5/L/G8tn8FPtp9ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Validity
Not Before: Mar 1 23:44:30 2026 GMT
Not After : Mar 8 23:44:30 2026 GMT
Subject: CN=69a4cf60-5565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:8b:cb:96:ae:a8:8b:0b:f8:f7:af:7f:cb:
78:2c:a6:e7:98:e2:cd:0a:e1:fc:3c:78:c1:69:b6:
b6:05:f4:4d:74:ec:83:4e:0e:a2:ba:98:f7:d5:12:
bf:47:eb:5d:84:32:39:2f:e3:1a:3b:0e:17:fa:b9:
f5:be:2b:8d:f2:9f:86:de:97:60:2b:dc:bf:c0:c9:
78:22:9a:cd:47:37:a6:b8:bf:89:0a:81:10:cc:c8:
a2:28:9e:ad:37:c4:54:31:b4:81:3b:95:41:d4:3e:
48:d3:dd:a7:90:42:fc:9f:84:9d:6b:ec:0b:d2:f9:
ba:18:03:2b:9d:65:8c:59:a2:41:d5:84:f3:16:49:
a6:ab:66:19:6e:6d:55:ed:48:51:dc:7b:88:1e:66:
02:35:9e:8b:a2:43:e7:24:19:b4:44:d4:e3:6e:a7:
34:90:5a:45:3a:fd:68:11:56:3d:ae:e0:05:fe:da:
de:a5:69:80:9f:52:1a:88:f0:15:16:8c:83:5f:90:
1b:0b:40:ee:97:56:d8:2d:93:a9:58:50:54:79:25:
3f:61:09:15:9e:01:74:b3:24:47:85:75:be:3e:78:
53:d7:55:8c:8d:1d:11:c2:a8:0c:64:b4:4a:fc:db:
e4:21:a9:f9:57:b4:b3:c7:de:bb:71:57:12:d0:c8:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C7:39:1D:38:A2:8D:8E:1D:A8:D9:F9:21:75:D7:C6:50:EA:31:F0
X509v3 Authority Key Identifier:
keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:4b:bf:4e:f9:cd:69:ee:0d:af:4d:d1:6a:07:ed:cb:6d:23:
e7:13:4e:62:64:3b:a2:e8:d7:cb:1b:72:f4:2e:a6:bf:d6:1f:
50:08:06:14:d5:93:99:ba:1e:40:37:c0:8f:8f:45:62:a8:71:
a7:70:4f:b8:25:1b:e4:67:c3:d3:2b:2e:e7:82:f8:f5:d1:bb:
a2:cc:b1:6f:3f:37:f5:6c:c1:76:5d:68:ef:97:f9:c8:8b:f5:
e7:16:32:3a:7a:f9:d5:19:f4:b3:c1:f1:4b:99:62:fc:fe:e6:
4d:ab:9a:14:0a:51:26:00:ac:52:ed:d7:6f:98:19:44:d3:d7:
75:8d:e4:21:e2:7d:2e:c5:cb:07:28:9b:f7:c9:9c:b7:9d:75:
d2:1f:a0:d5:dd:25:77:07:fd:f8:86:74:64:7e:38:c6:fd:b2:
ae:4d:d2:be:4b:43:aa:d2:23:73:a6:8d:e6:7b:be:4f:d8:a6:
70:26:78:15:c4:04:a5:17:71:31:c0:ac:08:7a:ba:40:eb:cf:
3b:97:89:08:d4:98:0c:4c:39:63:48:58:7d:58:c8:58:30:25:
6e:f6:be:49:c5:73:c7:c0:16:bf:33:be:04:76:4e:49:a2:94:
52:03:11:cf:98:f7:9d:99:33:6d:24:bd:02:63:d8:81:c2:da:
38:c3:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:49 2026 by rpki-client