
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
File: 8cgPvdVMGAKQLIXOmQoRLtMLX18.mft (raw, json)
Hash identifier: nZXy4o1K6eO9W7iYqQVhziFk9nxfXho5rRpnrJpFZ+k=
Subject key identifier: 81:1F:5A:8C:03:FE:5E:06:7A:AF:EA:DD:49:3E:F4:71:24:3A:A8:BB
Authority key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
Certificate issuer: /CN=A915AC36/serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
Manifest number: 35
Signing time: Tue 03 Mar 2026 08:16:42 +0000
Manifest this update: Tue 03 Mar 2026 08:16:42 +0000
Manifest next update: Tue 10 Mar 2026 08:16:42 +0000
Files and hashes: 1: 8cgPvdVMGAKQLIXOmQoRLtMLX18.crl (hash: BMVbMsrdxSvp/Z1FzBxf9XHYAwzLt3fTucdUDL8PpCE=)
2: 4E7FF5F8CF4011F093323D50C4F9AE02.roa (hash: tKUyqADQNHpmGouxD/J8Dml9YhqA+hcHH8c4dolMR/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Validity
Not Before: Mar 3 08:16:42 2026 GMT
Not After : Mar 10 08:16:42 2026 GMT
Subject: CN=69a698ea-f0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:89:6c:23:37:41:7b:ba:b3:21:2b:3e:25:
fc:de:4d:aa:18:d5:16:23:aa:be:19:9e:fd:c7:f3:
f9:15:e1:b7:81:66:e5:73:5a:96:9f:9e:b2:8f:61:
67:06:90:8e:cb:ef:82:fc:c1:a1:25:ed:88:39:1f:
00:82:03:6a:a4:e8:d9:a5:39:ac:1b:76:e6:df:e2:
9f:cf:06:5c:b7:ce:4d:33:86:88:d0:9a:2a:63:02:
2d:43:14:64:b9:e1:e9:f5:83:1b:61:6d:20:fc:53:
dc:e9:a5:3c:a8:2c:19:a8:d8:1b:8e:63:e9:10:05:
f5:c9:f1:fc:46:38:7c:3f:e4:e6:91:32:10:95:78:
ca:db:6d:39:60:14:09:b6:56:00:c7:8f:cc:b2:db:
00:b0:3b:b5:ee:9d:73:29:d8:86:a0:e3:93:d3:99:
93:8c:1d:3d:37:51:84:1d:cf:89:35:8c:1b:30:c7:
ad:bc:a3:0c:86:1a:25:35:8d:ea:13:dc:39:18:62:
c0:39:50:3f:7e:df:9f:a3:ed:6e:2e:38:3c:ed:1d:
ce:2d:31:b1:f6:0a:81:b8:8e:9f:66:c4:11:9f:29:
f1:1d:ed:9d:79:9d:f5:71:d1:b3:14:b0:b0:6c:a8:
8c:58:d4:70:0e:ea:65:fe:82:ab:7f:52:13:15:2f:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:5A:8C:03:FE:5E:06:7A:AF:EA:DD:49:3E:F4:71:24:3A:A8:BB
X509v3 Authority Key Identifier:
keyid:F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0a:63:a1:3a:96:97:cd:96:d2:f9:2e:b6:2b:91:be:52:79:
16:a1:b4:83:0b:00:75:1b:27:bb:3f:ef:e3:4a:69:72:50:71:
b7:80:a0:0a:a5:fc:95:84:0c:e0:3b:69:a3:e7:cf:38:a0:0d:
35:25:14:db:18:34:7c:ee:08:e9:7a:1e:5e:b2:91:77:6e:cc:
6a:67:35:14:eb:1a:5f:5c:de:35:6f:50:56:bd:f5:24:e5:01:
48:ed:bb:53:3c:84:b4:00:a1:6a:bf:8c:3a:e7:f7:8a:80:fb:
9c:21:cd:14:3a:aa:fc:c1:3f:f7:52:9e:71:27:1a:e2:a1:b6:
bf:98:cf:f7:37:bd:d7:f4:f2:3f:e3:63:53:4c:86:f4:8d:29:
37:e9:df:ea:9c:c9:37:77:0b:33:45:29:c8:48:d6:1c:84:68:
7a:cc:50:81:fd:50:02:f5:74:f5:04:8d:c8:0f:95:5c:66:be:
f6:9f:84:e7:f4:70:b9:1b:97:4c:c6:c2:1f:2b:b3:5a:92:b9:
b6:e4:b4:81:1f:fa:86:b4:3a:c9:55:1c:9d:d7:de:e4:3f:0b:
39:2a:a0:12:4f:c2:75:6e:33:b0:8b:c6:91:04:b9:ff:7b:a7:
9e:d2:42:7c:54:6c:0d:3e:0e:c3:6e:37:53:c6:63:f4:c3:c5:
5e:31:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:34:37 2026 by rpki-client