
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.mft
File: 8o5mmd5TyazxjWGSpcfjs94y8kE.mft (raw, json)
Hash identifier: 1mDX2qXpiPjbzuJAeNYG8w3p1oMscAu0DpcxKhnmEzU=
Subject key identifier: 17:81:E8:97:D8:AA:2F:C1:C4:15:75:AB:17:8A:EE:96:5F:38:66:E8
Authority key identifier: F2:8E:66:99:DE:53:C9:AC:F1:8D:61:92:A5:C7:E3:B3:DE:32:F2:41
Certificate issuer: /CN=A916B889/serialNumber=F28E6699DE53C9ACF18D6192A5C7E3B3DE32F241
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8o5mmd5TyazxjWGSpcfjs94y8kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.mft
Manifest number: 0E
Signing time: Wed 21 Oct 2026 08:33:07 +0000
Manifest this update: Wed 21 Oct 2026 08:33:07 +0000
Manifest next update: Wed 28 Oct 2026 08:33:07 +0000
Files and hashes: 1: 8o5mmd5TyazxjWGSpcfjs94y8kE.crl (hash: wJ9bQPwu/7/p6xmiW1qrpmOeV25h47/5IC8YfZ9VMXI=)
2: C5C16298C86711F180AAD3994711F970.roa (hash: vIa4mbeK9kikpH+/M+Xj5JgiXqWNyB6uvSXKpDoW7O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.crl
rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8o5mmd5TyazxjWGSpcfjs94y8kE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 08:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B889, serialNumber=F28E6699DE53C9ACF18D6192A5C7E3B3DE32F241
Validity
Not Before: Oct 21 08:33:07 2026 GMT
Not After : Oct 28 08:33:07 2026 GMT
Subject: CN=6ad878c3-bab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:a6:2a:a2:3c:06:bb:8e:c5:a0:5b:e1:c4:
e8:d3:e9:7a:d8:20:7c:9f:f1:9e:7f:5a:9b:c3:60:
6c:12:96:03:96:fa:fc:04:8d:30:b2:65:13:8d:23:
17:56:eb:5b:22:ee:51:22:b1:a0:bb:e7:90:cc:97:
ea:05:ec:87:3b:30:a7:5b:4b:78:c0:f2:b9:d0:59:
d7:91:55:00:0a:25:b4:a2:50:f9:f1:96:d0:57:f0:
ed:89:e4:ce:07:0f:01:b6:33:be:40:62:1d:3d:7e:
7b:6d:b3:65:10:48:d2:aa:37:dd:35:23:4b:ef:18:
7b:1e:09:f7:e4:c0:c5:59:71:47:be:f2:de:36:40:
4d:55:5f:d3:5e:08:4c:74:7b:f4:74:8e:06:ca:e4:
0f:4f:0a:45:29:fb:5e:d4:d3:5f:2f:4b:bd:15:ed:
7e:1c:8e:5a:4b:9c:e5:83:7a:2d:08:92:a4:3f:72:
0f:04:e0:df:da:8c:ef:fe:f3:12:d1:bc:f9:25:62:
fb:76:c4:c2:4f:0d:2a:f8:87:40:cc:cc:2d:79:3e:
26:26:2b:c8:5a:57:8d:88:ee:c7:b2:4e:d6:cf:b8:
59:72:ff:99:7e:6b:d6:86:4f:ea:bd:48:26:4c:8e:
cc:7c:5e:1e:90:85:d9:a2:0b:36:3f:46:f7:d6:55:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:E8:97:D8:AA:2F:C1:C4:15:75:AB:17:8A:EE:96:5F:38:66:E8
X509v3 Authority Key Identifier:
keyid:F2:8E:66:99:DE:53:C9:AC:F1:8D:61:92:A5:C7:E3:B3:DE:32:F2:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8o5mmd5TyazxjWGSpcfjs94y8kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6f:b7:fb:03:95:37:48:45:5b:f7:13:40:ce:1d:b6:7d:6e:
13:9c:d8:d1:38:b1:f9:d9:63:fc:0c:f4:90:f9:a1:60:95:e7:
20:33:82:ce:b4:47:ef:1a:c0:2f:5a:af:46:56:0c:8e:fa:7a:
27:3f:14:45:9b:2c:15:48:dd:82:8a:e2:08:d8:2a:9a:99:7e:
c1:80:3a:43:51:0a:87:9d:e6:ee:88:c1:ca:24:78:5a:75:54:
35:ac:2e:6e:04:30:e0:3b:33:a3:04:65:5c:3c:e5:1b:89:35:
79:93:7d:69:37:e2:4a:fc:1b:00:c9:b2:c9:d9:ef:ec:c3:5e:
c3:92:e0:35:71:49:8f:af:80:81:81:42:47:0b:4a:5f:a1:58:
72:8d:94:4e:68:5f:34:54:91:01:5b:73:17:2f:10:64:79:07:
e4:b6:98:d2:87:aa:bd:93:3c:7f:11:7e:d8:0d:ab:d3:16:94:
8b:de:90:f6:10:fa:6e:1e:d3:90:1f:8f:7c:20:41:54:35:6b:
0c:51:d1:5e:f9:e5:2b:44:3d:52:0b:79:06:41:16:d4:c4:3e:
f1:51:bf:8c:24:f3:83:f1:c6:07:7b:bb:22:de:f7:93:99:e3:
4f:4a:e4:2b:fa:4f:a6:4b:c3:c1:5c:a6:d6:f8:a5:ee:a8:aa:
c9:19:43:79
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Qjg4OTExMC8GA1UEBRMoRjI4RTY2OTlERTUzQzlBQ0YxOEQ2MTkyQTVDN0UzQjNE
RTMyRjI0MTAeFw0yNjEwMjEwODMzMDdaFw0yNjEwMjgwODMzMDdaMBgxFjAUBgNV
BAMTDTZhZDg3OGMzLWJhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDB9aYqojwGu47FoFvhxOjT6XrYIHyf8Z5/WpvDYGwSlgOW+vwEjTCyZRONIxdW
61si7lEisaC755DMl+oF7Ic7MKdbS3jA8rnQWdeRVQAKJbSiUPnxltBX8O2J5M4H
DwG2M75AYh09fntts2UQSNKqN901I0vvGHseCffkwMVZcUe+8t42QE1VX9NeCEx0
e/R0jgbK5A9PCkUp+17U018vS70V7X4cjlpLnOWDei0IkqQ/cg8E4N/ajO/+8xLR
vPklYvt2xMJPDSr4h0DMzC15PiYmK8haV42I7seyTtbPuFly/5l+a9aGT+q9SCZM
jsx8Xh6QhdmiCzY/RvfWVb39AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF4Hol9iq
L8HEFXWrF4rull84ZugwHwYDVR0jBBgwFoAU8o5mmd5TyazxjWGSpcfjs94y8kEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCODg5Lzg2QTM3REQwQkQ0
RjExRjFBNjAwNUNDQjVBMTFGOTcwLzhvNW1tZDVUeWF6eGpXR1NwY2Zqczk0eThr
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOG81bW1kNVR5YXp4aldHU3BjZmpzOTR5OGtFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
ODg5Lzg2QTM3REQwQkQ0RjExRjFBNjAwNUNDQjVBMTFGOTcwLzhvNW1tZDVUeWF6
eGpXR1NwY2Zqczk0eThrRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBtb7f7A5U3SEVb9xNAzh22fW4TnNjROLH52WP8DPSQ+aFglecgM4LOtEfvGsAv
Wq9GVgyO+nonPxRFmywVSN2CiuII2CqamX7BgDpDUQqHnebuiMHKJHhadVQ1rC5u
BDDgOzOjBGVcPOUbiTV5k31pN+JK/BsAybLJ2e/sw17DkuA1cUmPr4CBgUJHC0pf
oVhyjZROaF80VJEBW3MXLxBkeQfktpjSh6q9kzx/EX7YDavTFpSL3pD2EPpuHtOQ
H498IEFUNWsMUdFe+eUrRD1SC3kGQRbUxD7xUb+MJPOD8cYHe7si3veTmeNPSuQr
+k+mS8PBXKbW+KXuqKrJGUN5
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:12 2026 by rpki-client