
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json)
Hash identifier: hVfLjd8s7TBIsFm8CN7TcN5y1qx6ZQnadFDl5zr4Pd4=
Subject key identifier: 73:F0:62:8B:11:4D:65:5E:6B:AA:F3:39:4B:67:E8:20:F0:BA:9C:DE
Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Certificate serial: 0940
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
Manifest number: 092C
Signing time: Fri 06 Mar 2026 19:56:36 +0000
Manifest this update: Fri 06 Mar 2026 19:56:35 +0000
Manifest next update: Fri 13 Mar 2026 19:56:35 +0000
Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: 9s8XCfzpSjTZc4ZzOzYvbhV98EsHFXZtrTmoqCOLZFA=)
2: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=)
3: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 19:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Validity
Not Before: Mar 6 19:56:35 2026 GMT
Not After : Mar 13 19:56:35 2026 GMT
Subject: CN=69ab3174-87cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:73:ec:0c:83:eb:f9:f7:c4:b9:0a:8a:2b:
1b:d6:44:c3:16:f3:c2:d8:01:56:39:34:97:be:4b:
80:8a:70:81:4a:5f:b9:b3:63:8e:40:46:7d:1b:62:
c6:74:32:ed:a0:50:ba:a8:7a:b1:04:b0:59:81:d5:
c5:a2:2c:e3:44:4f:44:e0:ab:21:f2:86:14:3d:8b:
a5:5b:f5:bf:da:d5:e6:23:f6:1f:08:d3:ea:8b:56:
66:58:bd:67:1c:e8:1c:08:3b:08:1a:e8:2a:0e:2e:
ce:49:4f:21:c8:be:9f:38:4d:bc:f9:cf:4d:26:57:
5a:47:3b:00:dc:99:93:a8:c2:65:90:34:5f:92:d7:
f5:d8:67:b1:1f:52:ea:7f:be:52:c2:b7:e6:64:e2:
f3:49:ec:bc:2b:d1:49:34:b5:dd:aa:5e:b9:4a:64:
22:09:51:8d:f7:ae:8e:97:8b:e3:e6:f0:c4:3c:b1:
ac:87:54:69:67:71:ec:0a:cb:ab:63:e6:c9:e2:03:
26:c1:19:60:03:42:66:4c:6b:ff:0d:6e:54:26:3f:
5f:7b:ea:c2:2e:bd:e5:00:e4:70:eb:8d:f7:3a:93:
96:b7:75:47:53:17:d7:47:c6:a6:63:05:df:6d:e7:
ce:f4:98:ed:8a:d0:ea:ea:7d:e4:02:f1:fe:1f:a4:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:62:8B:11:4D:65:5E:6B:AA:F3:39:4B:67:E8:20:F0:BA:9C:DE
X509v3 Authority Key Identifier:
keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:26:8d:e9:35:8d:73:bc:c9:27:ed:98:ba:fa:45:13:71:
16:0b:c4:54:2a:3b:0b:ee:b2:d8:c5:49:ef:72:88:eb:b8:d7:
8d:d4:a3:3e:66:15:2d:0a:fd:d9:e9:aa:32:73:8d:98:cc:57:
57:dc:3e:f8:9b:34:ab:fa:e9:d0:20:09:7a:6d:16:a4:4d:f9:
f7:9a:25:8b:72:fa:57:1b:b1:8d:e6:1d:83:25:c3:5c:4c:67:
1d:71:19:74:57:ae:59:0f:12:6a:c9:ff:12:e6:13:42:a4:45:
f4:04:ff:43:01:52:e4:4e:73:49:45:ca:f1:fe:7d:20:f8:86:
f3:a1:34:4a:45:09:75:88:31:83:3e:50:26:47:9a:2a:dd:96:
a8:18:7d:f8:0e:c5:32:be:b8:97:69:71:74:4d:dc:01:38:a3:
cc:a3:55:49:38:2e:e1:1e:4f:03:5a:3a:b4:9f:27:24:8d:6e:
f0:44:ec:cc:be:f1:bc:e9:bf:5f:74:1c:86:94:85:3e:02:71:
5f:3e:ad:31:f4:9c:6d:54:f5:2b:c7:5a:9e:62:1f:5c:a0:12:
71:c2:e2:d5:b5:7f:8a:f6:b9:a2:be:e5:5e:a4:05:95:12:b5:
06:a3:ba:f9:4b:56:c2:e3:06:e8:16:f3:ab:23:c6:61:7e:df:
3d:b3:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 08:38:40 2026 by rpki-client