
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
File: 8cgPvdVMGAKQLIXOmQoRLtMLX18.mft (raw, json)
Hash identifier: RVFH3Elty3UpSf6necCLdZbVQNJIe8JASptKDEC6jG4=
Subject key identifier: 27:BB:44:0B:AD:AF:BC:8F:D0:76:9F:25:FD:30:73:13:06:30:D8:43
Authority key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
Certificate issuer: /CN=A915AC36/serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
Manifest number: A8
Signing time: Sat 17 Oct 2026 07:55:33 +0000
Manifest this update: Sat 17 Oct 2026 07:55:32 +0000
Manifest next update: Sat 24 Oct 2026 07:55:32 +0000
Files and hashes: 1: 8cgPvdVMGAKQLIXOmQoRLtMLX18.crl (hash: +XNPmWdg5FsNx7MT9GNfsNrBMiUkEj5ouy6/7ci6gKY=)
2: 4E7FF5F8CF4011F093323D50C4F9AE02.roa (hash: tKUyqADQNHpmGouxD/J8Dml9YhqA+hcHH8c4dolMR/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 07:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Validity
Not Before: Oct 17 07:55:32 2026 GMT
Not After : Oct 24 07:55:32 2026 GMT
Subject: CN=6ad329f5-3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:65:61:80:f3:c2:8f:45:d7:2f:62:3f:3e:
40:5d:e1:d1:82:f9:9d:54:b2:ab:57:b7:86:52:f7:
db:76:0f:59:4c:a1:d9:f4:4b:68:11:dc:56:43:bc:
d1:f9:7d:d2:21:cd:0d:f8:da:06:68:c5:e7:0c:04:
04:e2:24:75:c7:b6:e9:a5:0b:77:48:4e:64:d7:d9:
0a:8a:de:01:1a:dc:96:92:72:f8:aa:18:1a:ab:82:
37:cd:ba:dc:09:e9:cc:1f:7e:29:37:d8:cf:be:9d:
16:71:5a:01:c5:0d:cf:90:66:ac:eb:36:e8:6f:87:
02:30:ba:f7:9f:5d:57:07:f5:a8:b0:20:21:a7:8a:
7f:3d:0f:9a:ff:cd:36:e7:11:17:a4:44:a7:5d:2e:
28:3e:3d:06:78:95:c1:08:44:21:88:5f:4f:4f:42:
42:6b:f5:e4:bb:6d:fc:fa:4d:6f:16:53:a3:31:4d:
95:23:a4:69:ca:be:2c:29:3f:ca:dc:7e:4e:8c:48:
7a:1c:c7:32:84:0d:7a:0c:8d:94:38:36:3f:08:79:
98:86:ec:af:12:ae:be:5c:12:cc:51:34:b0:9f:97:
8a:f7:e6:e2:30:47:8a:74:86:75:f7:d5:4d:06:1d:
94:04:43:8c:0e:97:30:03:44:6f:07:da:b4:a0:cf:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:44:0B:AD:AF:BC:8F:D0:76:9F:25:FD:30:73:13:06:30:D8:43
X509v3 Authority Key Identifier:
keyid:F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:0f:20:82:75:35:4c:e4:99:bf:c3:6e:e9:31:a8:1b:90:
bf:3e:b8:b0:6e:6a:5d:26:d2:20:a6:04:53:cc:07:66:a7:07:
5a:b4:95:58:dc:d1:db:53:1b:79:97:c7:1a:4d:6c:af:cf:bb:
4f:03:bf:90:53:c7:73:26:83:8a:d4:4c:7a:38:09:00:a3:0f:
38:af:da:5c:07:f3:c3:50:28:b1:93:fb:a4:5f:5c:3c:eb:17:
21:75:c4:20:24:b4:2d:89:df:69:87:34:54:87:76:5f:5e:c5:
ce:f8:81:10:c6:6d:7f:6a:ee:a0:bd:d3:9e:50:c9:cf:44:80:
61:da:c8:66:90:14:56:c5:30:77:85:bb:c8:93:2c:95:70:a0:
89:21:c5:8e:51:cc:7b:c3:85:b2:c6:8f:6e:82:53:c6:e2:ff:
f8:bb:8b:31:9d:64:df:62:83:89:31:d1:3b:bb:5b:a5:9c:4f:
7b:ee:af:f3:f7:e9:03:6e:55:1a:06:b5:d9:d0:f9:99:29:21:
05:58:a1:9c:9f:09:f8:bf:94:0d:34:55:80:4a:73:5f:da:b5:
3c:44:c6:ec:61:e6:0f:14:7a:df:3c:76:b7:46:00:dc:45:99:
06:ea:d6:a2:7d:56:85:e7:4b:1f:24:12:0e:25:9d:86:ba:51:
5f:b2:12:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFDMzYxMTAvBgNVBAUTKEYxQzgwRkJERDU0QzE4MDI5MDJDODVDRTk5MEExMTJF
RDMwQjVGNUYwHhcNMjYxMDE3MDc1NTMyWhcNMjYxMDI0MDc1NTMyWjAYMRYwFAYD
VQQDEw02YWQzMjlmNS0zMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFplYYDzwo9F1y9iPz5AXeHRgvmdVLKrV7eGUvfbdg9ZTKHZ9EtoEdxWQ7zR
+X3SIc0N+NoGaMXnDAQE4iR1x7bppQt3SE5k19kKit4BGtyWknL4qhgaq4I3zbrc
CenMH34pN9jPvp0WcVoBxQ3PkGas6zbob4cCMLr3n11XB/WosCAhp4p/PQ+a/802
5xEXpESnXS4oPj0GeJXBCEQhiF9PT0JCa/Xku238+k1vFlOjMU2VI6Rpyr4sKT/K
3H5OjEh6HMcyhA16DI2UODY/CHmYhuyvEq6+XBLMUTSwn5eK9+biMEeKdIZ199VN
Bh2UBEOMDpcwA0RvB9q0oM9z3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCe7RAut
r7yP0HafJf0wcxMGMNhDMB8GA1UdIwQYMBaAFPHID73VTBgCkCyFzpkKES7TC19f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUMzNi9FNDIyQTk5OEND
MUIxMUYwQjkzRDhGMkNDNEY5QUUwMi84Y2dQdmRWTUdBS1FMSVhPbVFvUkx0TUxY
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhjZ1B2ZFZNR0FLUUxJWE9tUW9STHRNTFgxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUMzNi9FNDIyQTk5OENDMUIxMUYwQjkzRDhGMkNDNEY5QUUwMi84Y2dQdmRWTUdB
S1FMSVhPbVFvUkx0TUxYMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcO0PIIJ1NUzkmb/DbukxqBuQvz64sG5qXSbSIKYEU8wHZqcHWrSVWNzR21Mb
eZfHGk1sr8+7TwO/kFPHcyaDitRMejgJAKMPOK/aXAfzw1AosZP7pF9cPOsXIXXE
ICS0LYnfaYc0VId2X17FzviBEMZtf2ruoL3TnlDJz0SAYdrIZpAUVsUwd4W7yJMs
lXCgiSHFjlHMe8OFssaPboJTxuL/+LuLMZ1k32KDiTHRO7tbpZxPe+6v8/fpA25V
Gga12dD5mSkhBVihnJ8J+L+UDTRVgEpzX9q1PETG7GHmDxR63zx2t0YA3EWZBurW
on1WhedLHyQSDiWdhrpRX7IS+w==
-----END CERTIFICATE-----
Generated at Sun Oct 18 18:19:20 2026 by rpki-client