
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json)
Hash identifier: dNvX+LykqP+BW07RZUt76pujYWHwo1KSztKAQjgEo3c=
Subject key identifier: 93:BA:BF:7F:3D:B4:35:01:70:DF:82:C4:8C:FE:CC:5F:04:44:8A:6B
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
Manifest number: 013B
Signing time: Tue 03 Mar 2026 04:56:39 +0000
Manifest this update: Tue 03 Mar 2026 04:56:39 +0000
Manifest next update: Tue 10 Mar 2026 04:56:39 +0000
Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: PIoTVpehXWx0abCDKM5NbeHHtGY39BR8fab7+yrP6V4=)
2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: EdoKG/rO2TUcNqvrT3rmtowwCMBDjmlbd0wrAkkItCE=)
3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: fXNyTYwGL5hwQV4+C/rGk2vU+rMPw5B8cRLeFXzc6ZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Validity
Not Before: Mar 3 04:56:39 2026 GMT
Not After : Mar 10 04:56:39 2026 GMT
Subject: CN=69a66a07-11a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:53:21:35:f4:7b:8e:52:ac:0c:27:6d:08:
43:23:48:f9:b7:fd:ee:21:9b:ab:56:3f:be:b8:27:
54:ca:c5:21:0e:2f:b6:06:e9:32:58:90:a5:be:1c:
7c:da:f9:93:91:a6:f5:da:57:cd:2c:27:08:7c:ea:
f9:65:1c:25:2e:92:dd:4e:d7:22:37:1f:32:7c:ce:
59:62:f3:e1:61:23:53:db:1e:f8:96:d5:16:43:f7:
9a:ac:68:b5:c0:df:2b:27:99:a5:0e:43:b3:c5:a5:
73:10:d9:1a:16:32:1e:18:a8:f3:14:01:e3:71:24:
da:a1:41:cb:ca:ba:34:98:71:55:70:37:e1:2d:f1:
b2:dc:7f:5d:1d:42:d2:74:b3:a5:3f:ee:64:03:bb:
50:a3:f9:51:9e:02:7f:69:ee:a9:6d:af:88:ac:fd:
1d:a4:37:66:74:77:2c:ec:2e:d2:89:c9:8a:e8:f5:
63:da:a3:cf:7d:99:86:1b:68:5a:4d:3d:dd:55:db:
47:9a:fd:0c:aa:18:37:74:b1:57:ea:dc:88:7a:5a:
fd:15:1a:c0:2b:f9:2f:b6:20:bc:2d:b0:b4:d1:0f:
30:75:ff:e2:32:ea:57:63:80:dc:96:3a:56:3d:57:
bc:d1:e7:e6:2b:72:ad:61:b8:5e:67:3d:53:b7:3b:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BA:BF:7F:3D:B4:35:01:70:DF:82:C4:8C:FE:CC:5F:04:44:8A:6B
X509v3 Authority Key Identifier:
keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:72:22:d6:84:cc:be:80:83:04:a9:d3:c4:be:d3:17:2d:e8:
26:75:de:d3:5c:e8:31:01:17:81:45:b2:97:dd:dd:67:64:ac:
e9:21:96:3f:f9:16:81:a0:fd:98:64:ee:2d:25:c7:fa:e8:72:
7f:10:22:a6:2b:57:b5:8f:64:74:a3:f2:b3:37:5e:ae:72:78:
53:f9:be:4b:d9:f1:6b:ba:c8:95:8d:9b:37:f0:bd:87:ee:44:
d8:0d:7e:fc:3a:ac:37:7e:f7:39:10:7e:6c:d1:60:a0:c6:54:
e5:af:c8:5f:d6:27:44:01:0d:86:53:65:72:cb:58:47:31:3e:
71:7e:a2:5a:1f:62:50:c8:53:c0:55:87:3e:da:d8:bd:05:b5:
31:d3:77:43:4f:0f:ab:4a:a0:94:d7:2c:08:65:a6:5c:25:68:
3d:11:66:e8:d9:bd:69:a8:61:2c:d4:3a:e9:a3:68:a8:f4:7f:
78:92:7a:e8:0d:79:36:20:26:54:fb:24:78:82:b2:ae:f4:f6:
dc:28:5a:35:3d:3e:61:fe:04:bd:b7:47:79:20:b2:c7:61:36:
4b:fe:ec:7d:f1:ea:b9:01:ab:58:13:2e:43:f9:51:d1:2c:de:
bb:91:24:dc:d2:40:fd:5d:7d:17:c7:6d:f7:7f:d1:2a:c1:c8:
72:22:a4:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy
QjVDRERBRTcwHhcNMjYwMzAzMDQ1NjM5WhcNMjYwMzEwMDQ1NjM5WjAYMRYwFAYD
VQQDEw02OWE2NmEwNy0xMWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2QNTITX0e45SrAwnbQhDI0j5t/3uIZurVj++uCdUysUhDi+2BukyWJClvhx8
2vmTkab12lfNLCcIfOr5ZRwlLpLdTtciNx8yfM5ZYvPhYSNT2x74ltUWQ/earGi1
wN8rJ5mlDkOzxaVzENkaFjIeGKjzFAHjcSTaoUHLyro0mHFVcDfhLfGy3H9dHULS
dLOlP+5kA7tQo/lRngJ/ae6pba+IrP0dpDdmdHcs7C7SicmK6PVj2qPPfZmGG2ha
TT3dVdtHmv0Mqhg3dLFX6tyIelr9FRrAK/kvtiC8LbC00Q8wdf/iMupXY4DcljpW
PVe80efmK3KtYbheZz1Ttzt8HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO6v389
tDUBcN+CxIz+zF8ERIprMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3
QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj
dmxuUUZPdW03cGNyWE4ydWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMXIi1oTMvoCDBKnTxL7TFy3oJnXe01zoMQEXgUWyl93dZ2Ss6SGWP/kWgaD9
mGTuLSXH+uhyfxAipitXtY9kdKPyszdernJ4U/m+S9nxa7rIlY2bN/C9h+5E2A1+
/DqsN373ORB+bNFgoMZU5a/IX9YnRAENhlNlcstYRzE+cX6iWh9iUMhTwFWHPtrY
vQW1MdN3Q08Pq0qglNcsCGWmXCVoPRFm6Nm9aahhLNQ66aNoqPR/eJJ66A15NiAm
VPskeIKyrvT23ChaNT0+Yf4EvbdHeSCyx2E2S/7sffHquQGrWBMuQ/lR0Szeu5Ek
3NJA/V19F8dt93/RKsHIciKkqw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:28 2026 by rpki-client