
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json)
Hash identifier: RLCCydnuPIeFO4SaqS4w2O9VOsde5TQPk9wUvHuAtu0=
Subject key identifier: D6:4C:D3:C1:C2:EE:5A:ED:61:A4:6F:87:6B:01:20:3A:0E:DA:F7:06
Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
Manifest number: 0859
Signing time: Thu 12 Mar 2026 22:12:27 +0000
Manifest this update: Thu 12 Mar 2026 22:12:26 +0000
Manifest next update: Thu 19 Mar 2026 22:12:26 +0000
Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: ocKpL95eaDDDEwpxb74rCE67cybWWJs4Yb9U0VMg5UI=)
2: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: Sqb1RnCHe7QmViOCcQqLHGN8k0RimMvBeGf+h/lyiNs=)
3: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: ToDqmpyYy9fDyBGitKxxqoCmfFWhXOoX4JrjahgKPgk=)
4: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: w4L8dHVS1XHD4h6I2xHvOIj7Z4mM+7gLcE1i72z+Mh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Validity
Not Before: Mar 12 22:12:26 2026 GMT
Not After : Mar 19 22:12:26 2026 GMT
Subject: CN=69b33a4b-ff00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:fc:5c:ba:4b:9e:36:9b:57:f5:f2:01:41:
11:12:48:df:fd:93:05:75:7a:e5:0e:2e:a5:33:a2:
71:6e:6f:90:b7:a5:cb:a4:03:c3:35:46:d5:5e:95:
c7:b3:50:29:ff:1a:78:8b:f2:88:8e:ee:73:af:18:
86:a1:fe:ff:67:65:2b:b2:22:2c:b9:bc:b7:b4:0f:
fd:1e:72:90:94:1b:5a:d2:aa:fd:ec:b0:62:96:7f:
1e:7b:c3:c3:95:37:2c:4f:8c:94:26:d2:a4:53:87:
46:53:42:ef:eb:74:af:99:53:43:5f:13:36:82:2e:
d1:b5:30:d0:a6:eb:34:51:4d:4c:99:1f:9e:a4:4c:
fb:e0:d0:fe:a0:e1:c7:3e:06:1b:51:4e:da:15:28:
1f:20:2f:b4:6a:be:fa:ce:04:fc:dc:85:56:fe:04:
97:90:cf:f2:a1:a7:62:fe:e4:c2:e2:e2:b8:48:88:
61:67:30:1c:2f:72:35:92:f7:76:c6:7a:12:78:15:
7a:6a:77:2e:73:3a:88:76:d9:19:5b:72:14:bf:21:
b2:dc:da:90:ec:65:95:28:14:df:8a:10:79:9c:ca:
06:d8:9a:df:7c:af:1d:f6:5c:58:1b:a1:50:ff:0c:
b5:d8:e8:7c:63:b4:13:62:b0:77:94:57:15:79:22:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:D3:C1:C2:EE:5A:ED:61:A4:6F:87:6B:01:20:3A:0E:DA:F7:06
X509v3 Authority Key Identifier:
keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7b:77:05:bf:2e:a3:3a:68:60:49:e9:d9:0b:8a:44:83:96:
48:cd:14:2d:83:27:e1:97:db:77:a0:0a:f2:7c:7f:7d:eb:68:
ae:4f:64:07:0d:a8:96:12:c2:45:e4:b2:1d:7e:dd:fd:eb:cb:
0e:5e:5a:3d:3d:b1:72:bf:25:a5:e5:d4:24:c5:07:3d:ec:28:
9e:ec:6a:e4:17:bc:f0:6e:3d:cc:66:67:57:25:11:1f:10:b9:
c6:ce:17:ce:4a:7b:38:c8:a1:11:fe:e9:f3:1d:69:41:49:b7:
37:c3:ad:97:d4:a9:75:c9:54:98:5b:1f:4b:6e:67:a3:c1:a3:
d4:dc:a7:15:20:ec:7d:7a:21:69:64:d9:8b:28:ca:f2:9d:89:
4f:27:db:aa:ba:f2:96:90:a2:b3:b0:5a:35:fd:18:20:59:c3:
f1:75:37:23:6e:8c:51:69:3c:a0:5b:84:0b:d0:30:7c:ab:ae:
5d:16:0f:40:24:ac:ce:b0:9e:b9:13:f0:e5:34:d3:97:d4:fd:
5e:96:1c:a2:1d:6f:4a:88:16:02:c4:b9:54:2f:62:3a:47:64:
57:10:68:db:6b:e1:52:e7:f3:4b:4c:30:09:3b:2c:fd:dd:64:
b1:ad:1c:d8:b9:58:6a:73:75:ce:bf:74:7d:4a:59:ed:65:75:
38:3d:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:51:11 2026 by rpki-client