
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
File: 08nS13n2aEMJcSuzDPoZkpDhuNY.mft (raw, json)
Hash identifier: J9OwMZfVI3OrGGcoGEvlvgFvnjEra2t3V0IF7q8OWDM=
Subject key identifier: 13:C8:B8:99:16:9E:2F:A4:0A:24:8F:25:79:0E:3E:87:03:99:AA:94
Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
Certificate issuer: /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
Manifest number: 010A
Signing time: Sun 05 Apr 2026 05:27:12 +0000
Manifest this update: Sun 05 Apr 2026 05:27:12 +0000
Manifest next update: Sun 12 Apr 2026 05:27:12 +0000
Files and hashes: 1: 08nS13n2aEMJcSuzDPoZkpDhuNY.crl (hash: bPqiNgW8BpnyOAuudltqrzSfvLqAaqLhAHemuvGX4lo=)
2: 6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (hash: XPN51TPloT0Sb6kUSDOMyNz4bBTH/IHqHYJPkeZz8vA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE8F, serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Validity
Not Before: Apr 5 05:27:12 2026 GMT
Not After : Apr 12 05:27:12 2026 GMT
Subject: CN=69d1f2b0-a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:4d:25:1e:ba:33:80:16:5d:81:c9:36:d0:
89:4a:83:87:70:22:98:cb:1d:e8:dc:c0:f6:bd:23:
e2:fa:29:26:66:b6:bd:73:63:a0:49:08:79:2a:c8:
7f:8a:99:d2:0a:8d:43:06:3c:e2:15:de:e1:f1:19:
95:ad:95:15:a6:ed:34:b8:2b:e6:75:08:85:3b:c7:
94:14:69:40:3e:f0:0b:54:5c:25:f7:c4:71:44:59:
af:2e:5a:c9:36:ff:df:b1:31:d5:b6:14:3a:b5:1b:
e4:8c:70:bd:7b:ff:21:bc:80:f4:46:b3:f8:b8:c5:
14:92:3a:0d:f0:0c:0a:02:78:b3:2e:86:27:e6:85:
25:59:81:c6:62:19:4b:28:d5:45:70:80:27:9e:7d:
c9:d0:74:94:7d:da:72:22:9e:6e:fe:61:9d:73:26:
49:6b:79:3e:2b:81:0e:6b:99:13:35:1c:cb:ef:bc:
9a:9b:13:68:40:4d:83:92:c3:f4:2f:51:f7:69:e0:
be:e1:41:6d:5d:96:42:73:5c:d0:06:26:9d:07:8c:
1e:c4:b8:9e:bd:f0:0b:05:86:88:ea:4b:be:d9:e4:
65:58:e6:69:48:3a:1a:77:50:d2:b6:00:6c:d4:cf:
7c:97:f6:cc:1b:83:97:08:d5:6e:05:02:85:28:e7:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:B8:99:16:9E:2F:A4:0A:24:8F:25:79:0E:3E:87:03:99:AA:94
X509v3 Authority Key Identifier:
keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:c3:76:b3:12:48:1e:9f:9e:4e:c1:da:8e:c7:0e:18:f9:af:
5c:b2:61:df:d0:37:f8:f3:62:ed:41:23:70:97:59:70:b4:a3:
8a:8d:98:39:a4:d1:9d:1d:54:be:9d:8e:bd:14:63:5d:b7:5f:
70:ff:6a:3b:13:08:cd:50:47:c4:4a:cd:db:ef:96:9e:7a:78:
38:f1:63:eb:ab:02:65:c7:8f:7f:06:96:8c:3b:0d:f0:83:b5:
36:5c:eb:35:72:15:b6:31:a3:fd:f7:c4:9e:17:11:af:27:2a:
2a:1d:87:c2:4f:e3:f6:a8:f9:78:99:56:35:63:2e:ae:6c:55:
0b:e8:7f:26:50:6a:e3:f5:44:c3:97:e7:4e:67:5a:e4:ab:91:
66:f3:9b:a8:0b:13:6d:e6:33:95:1c:28:61:14:e7:fc:d5:77:
23:55:e1:fa:62:c2:ba:cb:45:ba:c2:51:52:80:d5:ee:bc:65:
59:7c:05:9a:93:93:fb:32:a5:4a:ad:ee:2f:44:a3:8f:35:74:
de:11:9f:26:aa:3c:a1:35:a5:8f:48:6c:41:4b:12:ad:c7:14:
64:10:ed:ce:b9:54:5a:aa:15:f0:d3:ca:24:8f:90:e4:26:e4:
dd:4c:56:57:2f:67:0b:3e:0e:f0:14:1b:9c:f9:d6:ad:e1:26:
55:e2:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:16 2026 by rpki-client