
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File: s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier: 0v0JKolGKeetSTLGBi2gsBxj6tqYD9NSy0e5HLGVLNY=
Subject key identifier: 4D:EA:37:8E:DA:B0:1E:60:F2:35:0F:20:20:63:ED:26:BE:68:35:66
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer: /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number: 0278
Signing time: Sun 05 Apr 2026 01:28:31 +0000
Manifest this update: Sun 05 Apr 2026 01:28:30 +0000
Manifest next update: Sun 12 Apr 2026 01:28:30 +0000
Files and hashes: 1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: XpS5RIXvCcOFA6N6ahYmm7MsteeG/ZlpUS/0jiUYZ1Q=)
2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: euANKi0FBonGo36Nw13/+KNAEhPHHNlMgJqTV7qix5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Validity
Not Before: Apr 5 01:28:30 2026 GMT
Not After : Apr 12 01:28:30 2026 GMT
Subject: CN=69d1babe-4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:32:eb:74:e9:90:a7:fb:72:ed:0a:65:da:
36:31:c2:26:1c:9e:c6:a5:46:28:2d:76:8e:27:eb:
58:2d:ab:80:33:5b:54:e3:87:ec:4e:4c:70:03:26:
ef:a4:e7:f5:d1:ca:a3:f7:38:86:61:5b:d4:e6:d4:
f8:3c:51:c6:16:00:cc:f1:cc:13:62:05:84:8a:99:
b0:df:68:61:04:be:bc:1c:9e:a4:76:aa:91:f4:93:
7e:d6:fa:3f:fb:e3:97:26:2b:28:d1:9e:29:4b:db:
b6:d3:26:56:1c:f5:36:06:9f:73:53:e0:89:be:94:
66:69:43:48:13:6b:dc:67:77:ac:8c:b3:b1:07:c9:
9d:37:94:47:7a:b4:d0:70:08:d4:c8:23:77:3b:ef:
b2:bf:d7:96:c7:af:e7:af:37:00:fc:4a:ab:29:f7:
a7:4c:03:96:69:5b:90:dc:5e:df:e0:d0:d0:2d:9b:
63:b7:dc:69:c1:4d:13:7d:f1:2d:55:4f:2c:9c:fc:
36:7c:39:cd:ea:1f:c6:95:54:54:70:70:3e:52:89:
6e:4f:1b:f2:9f:4e:ad:5f:2f:79:dd:79:d8:61:c1:
e1:60:cb:71:f5:62:84:1a:f6:5e:72:69:94:3c:34:
a0:2b:19:d8:94:eb:75:2f:56:cd:3a:7a:39:e5:51:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:37:8E:DA:B0:1E:60:F2:35:0F:20:20:63:ED:26:BE:68:35:66
X509v3 Authority Key Identifier:
keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:30:af:f9:a3:f1:25:b8:f4:34:07:b7:24:74:93:07:0a:56:
43:0f:e9:1f:34:b1:77:ca:d5:f8:e6:5a:e4:a9:3f:3c:0b:b6:
6c:99:f5:f7:fd:1f:95:84:fa:66:cb:9e:23:3a:fc:af:af:40:
0d:d9:59:4c:c8:35:63:97:ab:7b:61:a4:10:b7:15:62:12:c0:
d9:89:64:e8:c1:57:62:bd:2e:0d:a8:38:fa:a5:a7:ee:d9:f8:
64:aa:f0:a4:0e:48:c4:2c:00:b8:7e:11:fe:22:99:77:89:14:
64:17:55:f8:6c:31:04:d9:4d:cf:ca:ec:f5:49:fd:e8:41:78:
44:9c:6b:57:ce:05:32:95:9f:40:5d:d2:c0:ca:2d:d1:47:9f:
09:0e:d5:01:b0:6e:bd:cd:e7:68:af:d1:39:b5:85:4e:b5:b0:
e4:72:a7:52:51:df:9b:44:86:87:55:2e:db:6d:63:aa:96:6a:
4a:2d:af:e2:b9:8c:94:08:16:e9:aa:dd:e2:7a:46:ed:61:4e:
a5:83:a6:6c:66:2a:2b:f5:77:21:93:d1:1b:d3:18:79:24:c2:
8b:0b:fa:82:cc:80:e2:6a:fa:28:81:6a:30:d2:b0:de:44:a5:
b6:0a:5e:02:95:37:f1:23:22:85:2a:4a:c2:eb:c5:f4:a8:9e:
d0:13:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:32 2026 by rpki-client