
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json)
Hash identifier: 9B4HMsM5yeQFtVIbF4jNnPi0iSgKzmg6Ov2fmT+4F6g=
Subject key identifier: 1E:72:B9:38:50:9C:9B:20:66:5C:25:A8:92:32:DC:D2:84:8D:CD:A5
Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
Manifest number: 08C7
Signing time: Mon 22 Jun 2026 22:30:04 +0000
Manifest this update: Mon 22 Jun 2026 22:30:04 +0000
Manifest next update: Mon 29 Jun 2026 22:30:04 +0000
Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: JyciAo1pLkK5Pab9A4+IAZsPPLYxy+7BKAEk9tMTi+U=)
2: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: fUcrgjwtKp7MjAj6eCSpwpGAUIRsUv3G1ku8PQ5LCQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 22:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Validity
Not Before: Jun 22 22:30:04 2026 GMT
Not After : Jun 29 22:30:04 2026 GMT
Subject: CN=6a39b76c-3e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:94:5c:5f:41:b3:49:5e:30:56:00:5a:da:
ea:51:36:98:4f:ea:22:6b:a2:f7:77:60:82:7c:8b:
cb:96:a0:1b:1a:70:87:59:6c:68:5e:51:5f:44:24:
d8:f6:00:23:a0:d3:2a:f7:88:67:0d:0d:25:c1:8f:
a4:64:78:bb:d2:18:dd:c5:4f:51:a1:73:d5:87:39:
e3:09:bb:41:81:f8:28:c5:fe:50:46:93:0e:ec:38:
bf:17:1f:06:89:67:c5:df:12:ea:9b:47:78:86:27:
bd:a7:9b:6a:12:bf:52:e2:d1:cb:75:c4:fe:04:3f:
80:49:a9:66:da:dc:3e:5c:e1:6b:e0:06:79:a1:1f:
53:ca:83:e3:b7:ac:a2:0e:73:88:e2:7b:c7:bb:02:
5d:d0:a9:05:57:24:5f:9b:d2:f7:7c:b2:26:e4:92:
50:ad:3a:f5:b1:b1:a3:01:f3:6b:2d:6f:2f:5f:3a:
ad:f3:e0:b3:c4:2f:bc:50:b1:d7:a9:98:74:c0:b8:
f7:28:1d:01:d6:4e:e1:72:b2:96:e3:a0:be:4c:64:
d2:45:c2:74:09:1e:3e:d2:2b:16:76:ed:fd:29:72:
1b:dc:94:1b:8e:cf:a7:68:94:4a:ab:dc:a7:fd:74:
be:da:5c:8d:26:cc:1a:4b:35:6f:f6:9b:57:bf:39:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:72:B9:38:50:9C:9B:20:66:5C:25:A8:92:32:DC:D2:84:8D:CD:A5
X509v3 Authority Key Identifier:
keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:dd:48:b5:8f:bf:71:a7:17:96:d2:06:8f:1c:79:93:55:4c:
d0:93:6b:3c:28:dc:a8:4d:5d:ac:a6:32:14:9f:50:fa:4d:e0:
a1:fc:5e:03:15:82:3c:e1:5f:d8:c7:e6:72:86:59:63:94:7a:
53:94:d5:64:1e:4c:1a:9b:0d:cf:07:e4:be:3d:4e:80:7a:b6:
a7:04:b3:f4:7b:c5:7e:e2:8d:4f:bf:7b:b4:ef:78:87:4d:a4:
37:a0:17:8d:7d:6d:bf:1c:32:01:0e:c0:01:89:30:56:28:2f:
62:32:3a:33:87:00:66:be:d7:3c:67:39:9c:13:62:fa:28:c7:
a8:3f:bc:85:74:7f:77:ce:ae:1e:56:94:de:b4:44:89:ec:af:
53:34:5e:64:c4:17:8a:5c:c7:db:86:3f:4a:bd:70:2d:df:8f:
cc:1e:73:5f:cb:51:a0:6e:84:25:06:21:06:bd:c6:f2:d4:6b:
20:fd:bb:c8:d0:58:a8:3d:71:62:4d:6b:df:d8:64:02:b9:c6:
f6:e4:10:d7:bf:71:41:bf:68:fc:c4:4d:fc:75:d9:dc:52:43:
6e:c3:3f:c9:c2:cd:c7:40:75:7c:f6:a1:1b:0c:f0:d9:ab:58:
e3:e6:1c:69:94:37:1d:9e:f8:f5:98:1b:78:b5:43:e6:80:cb:
4a:37:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:36 2026 by rpki-client