
$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json)
Hash identifier: clW2d9jsvRLtGI47W2YfnQR3izeT7xKr69dpllKHUWI=
Subject key identifier: 41:F8:F0:1A:53:80:04:F3:B2:26:D2:7C:CB:73:77:95:98:B3:0C:6F
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
Manifest number: 0268
Signing time: Sun 05 Apr 2026 01:40:46 +0000
Manifest this update: Sun 05 Apr 2026 01:40:46 +0000
Manifest next update: Sun 12 Apr 2026 01:40:46 +0000
Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: sRhszpLzJRJkcpriqrcgDHhsEMHzI+hcY+StcaGtj8g=)
2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ja+dV8F8droBnCPc3sPIfN0Ul1XNgCG3f5fT9ZFS1Y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Validity
Not Before: Apr 5 01:40:46 2026 GMT
Not After : Apr 12 01:40:46 2026 GMT
Subject: CN=69d1bd9e-18bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:2c:78:7d:10:dc:ad:56:ae:06:a8:f1:e0:
de:11:59:21:45:7e:0a:80:86:96:8f:0d:30:d6:dc:
16:32:aa:1b:28:cb:f2:dc:44:be:78:c6:dc:89:9f:
2e:f1:77:4e:fc:b8:e2:b4:52:d6:34:e7:34:ce:9c:
c6:7a:83:84:6f:0f:60:d1:5c:a5:c3:bd:0f:61:cd:
b8:e5:b1:df:7b:36:25:60:10:82:9d:cf:42:a2:a7:
1b:6a:2d:a4:13:05:3b:34:f9:30:0d:00:28:fe:cb:
b5:1e:8c:7c:f9:e7:e9:2b:bf:16:25:dd:0f:a6:55:
93:8e:81:df:4b:bc:9e:a6:74:8a:d3:51:f0:31:fc:
bf:82:1b:6a:80:49:3c:88:bd:61:22:b1:86:32:00:
c6:6c:13:da:c6:d4:ab:c8:9c:dd:cd:ed:2f:d9:bb:
ca:49:1d:3b:fb:79:1d:bf:9c:24:b5:ad:1e:37:14:
50:79:13:9c:29:41:49:c9:ff:21:17:6c:53:b1:3f:
3d:c5:37:9c:96:6e:a8:56:a4:34:88:40:25:df:30:
ab:ca:76:66:a6:25:c0:bd:d5:27:69:c3:ba:24:6f:
5c:d3:81:ab:10:c3:9c:f3:0f:af:79:b0:d8:40:1c:
3d:4f:df:1b:be:9d:63:2e:b1:29:8d:19:95:d0:63:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:F0:1A:53:80:04:F3:B2:26:D2:7C:CB:73:77:95:98:B3:0C:6F
X509v3 Authority Key Identifier:
keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:46:34:e7:b0:3d:75:00:c9:d0:18:c1:6d:ee:ea:b4:47:5d:
01:3f:37:03:77:bf:40:36:c7:28:94:38:7e:e9:dd:68:0f:77:
23:d9:ce:4e:91:a0:e1:79:4d:43:77:84:12:3d:d3:80:df:8e:
85:36:b9:e8:73:81:90:36:2f:29:fa:2f:68:9b:88:f9:ec:04:
b0:cf:dd:90:ab:bd:a0:0a:ed:18:2b:86:2d:83:cc:4e:09:de:
7c:77:2d:10:ea:89:fd:fa:70:32:03:42:73:17:ac:ff:68:fe:
31:45:77:b0:18:7c:b4:30:89:e7:ce:71:42:04:17:93:88:d5:
90:c5:aa:6f:41:6b:37:3e:31:3c:d5:a7:fb:d7:dd:30:c1:3e:
37:60:d1:66:8b:c3:f7:8e:17:50:89:54:ae:e7:d8:3f:e7:54:
a9:de:4a:07:87:46:d7:95:7d:f9:4b:61:4d:bb:05:b2:29:7a:
d9:ea:60:bc:fc:30:04:f7:66:c8:1d:ca:e3:bb:47:21:c9:dc:
a0:ad:6f:8a:0b:94:32:94:73:e2:9e:02:ec:1c:89:fe:90:16:
66:6a:74:ca:16:a2:c4:58:ab:13:1b:6c:15:38:74:d3:5c:19:
5d:ba:af:74:33:78:c4:e7:34:65:fc:8a:e6:be:0e:d6:ec:99:
1d:a3:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:59:52 2026 by rpki-client