
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json)
Hash identifier: Fc4Z2XLV/mMSMsgCkK5/i5rJmgIyFLauhGHbKEDqlHs=
Subject key identifier: CC:26:DD:DC:97:68:DD:E2:E3:65:AA:29:64:04:84:38:D4:C9:9F:F2
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial: 0E6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
Manifest number: 0E68
Signing time: Sat 28 Feb 2026 17:53:47 +0000
Manifest this update: Sat 28 Feb 2026 17:53:47 +0000
Manifest next update: Sat 07 Mar 2026 17:53:47 +0000
Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: 4yyTzMEfpfZqfIiBqqvFYDsZwETZH5WUwEGmamf4nDs=)
2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: 0IBVwDZ7i+J4nVvUTeF7Wzqm6YjeaulpyuMa4quZjWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3694 (0xe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Validity
Not Before: Feb 28 17:53:47 2026 GMT
Not After : Mar 7 17:53:47 2026 GMT
Subject: CN=69a32bab-9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:3c:91:3b:a5:02:d0:aa:df:87:26:59:0d:
ba:9b:0f:77:3e:15:d1:44:d2:05:cf:20:e3:07:a3:
1c:47:3e:d6:d9:8f:a6:d1:8a:93:cf:41:47:27:50:
49:9c:72:db:db:76:41:1c:29:e3:3f:14:b8:f0:e3:
5d:5b:ee:2e:49:2f:9f:4b:e2:bb:53:b4:31:1a:84:
74:ea:e8:68:56:52:d8:12:5d:3c:b0:f0:b7:37:5a:
8a:a6:a1:ba:3e:34:7b:67:06:51:12:69:b6:e8:17:
db:41:93:2a:d9:b4:f6:c2:4d:5b:b5:cd:25:0d:37:
a6:1e:de:c9:b5:d3:29:6d:a6:02:aa:57:d1:13:05:
aa:50:aa:84:51:63:91:b1:27:a8:fd:d8:90:9e:52:
e8:e8:a5:0b:b2:ff:0f:79:47:aa:f0:7d:ab:6b:83:
66:d0:0b:91:c1:02:09:6d:ea:56:8a:db:bd:24:1e:
f4:54:0c:de:4e:cb:5f:17:41:a3:31:0f:56:dc:63:
17:57:6b:2f:1b:9d:86:80:12:7d:d7:83:8b:8c:75:
72:af:b8:5c:5c:46:d6:4f:12:c4:48:44:23:18:ad:
78:e6:e1:8d:58:c2:4e:04:1f:cc:a8:a6:4b:99:88:
07:17:79:89:17:4b:ca:c5:b5:e7:76:b5:fd:ad:06:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:26:DD:DC:97:68:DD:E2:E3:65:AA:29:64:04:84:38:D4:C9:9F:F2
X509v3 Authority Key Identifier:
keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:46:62:ff:97:d0:57:57:bd:66:c4:f0:45:d5:9f:6c:a9:67:
78:5d:57:96:0a:bb:3f:b1:8e:28:2a:2c:f4:93:20:9b:cb:ea:
c2:35:9e:76:50:df:4a:61:df:0b:8f:63:27:be:85:10:c2:72:
2a:6c:38:bb:c1:19:35:e9:9b:3d:97:5a:cf:c3:c0:9e:33:7e:
d7:c7:0a:9b:44:86:c8:8f:a1:8b:42:9e:55:b7:de:55:49:20:
f4:19:4b:21:bf:b0:3a:39:f0:23:6d:d7:a3:42:b5:68:79:51:
43:27:44:85:b9:59:e3:0e:22:58:a8:f4:89:cf:08:67:bc:21:
ee:a4:77:66:9f:ae:e1:dc:1d:5b:b3:13:c2:3b:e9:d6:63:a6:
6a:5c:a1:65:7e:9c:83:61:0c:f5:10:c4:b6:61:5a:d6:b4:fc:
65:eb:e8:b5:e2:f5:7a:b0:e9:b1:b8:aa:a4:93:e9:52:c8:4b:
91:3e:cd:ab:95:30:2a:f8:74:08:47:77:db:37:5c:81:61:26:
14:03:db:0e:2f:aa:54:6e:e4:67:dc:82:49:3d:a5:6d:bf:fd:
d6:f1:82:08:14:fe:0d:0f:ae:00:53:9a:d2:d3:46:33:14:c6:
3c:8d:31:ef:b6:b1:30:6a:76:0b:19:c9:f4:b2:1e:5d:3b:48:
aa:4b:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:11:01 2026 by rpki-client