
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json)
Hash identifier: bwzvwC02odSUif136hmiauDefTW/oEeQSDAlytVuN7c=
Subject key identifier: 85:6A:76:08:A6:07:DD:37:22:FF:40:73:A1:5D:8C:CC:79:82:7C:45
Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Certificate serial: 0DC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
Manifest number: 0DB6
Signing time: Sat 31 Oct 2026 18:06:13 +0000
Manifest this update: Sat 31 Oct 2026 18:06:12 +0000
Manifest next update: Sat 07 Nov 2026 18:06:12 +0000
Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: nK+g60j/AK9BsTem4UJ3akcerHGMiisRODu7Q/28Cc8=)
2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: UDW+dsOCznAjSoGbOEEbQ9JmE9TBtIe+eSGscHflZ+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 18:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Validity
Not Before: Oct 31 18:06:12 2026 GMT
Not After : Nov 7 18:06:12 2026 GMT
Subject: CN=6ae62e14-0361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:ee:d5:2e:f3:9a:2f:ae:c9:63:f5:85:a2:
c9:23:ea:02:88:9f:d9:cc:0e:72:be:45:d5:7e:1c:
21:d0:12:77:5a:49:b0:8d:69:3b:06:09:15:f7:9f:
38:20:4a:e5:c2:e3:2a:05:20:a0:b2:59:d8:0f:c6:
31:37:aa:8c:89:18:7b:e0:4d:31:b4:ff:37:d5:ed:
c3:dc:b7:f8:05:5d:9e:2f:c1:9c:f6:11:4c:5d:60:
f3:76:84:b2:2d:f4:30:59:8d:44:f8:e7:a8:5b:5d:
ca:b8:0d:e4:7d:28:d9:e8:00:d5:95:e9:71:4e:95:
a7:e0:32:d6:17:e9:c8:61:be:69:92:c8:da:7c:b5:
eb:f7:7e:52:e5:a6:67:60:52:2e:5d:70:7f:b4:d7:
f5:bd:8a:64:c8:64:0f:6a:aa:35:5a:6f:67:b5:80:
e4:82:6b:d6:51:06:0a:b8:04:a9:47:5c:71:83:62:
ee:ee:ea:6a:26:ba:38:4c:41:b6:59:4d:68:af:ba:
ab:fb:43:7f:26:f3:91:79:77:d9:01:b9:da:dd:b0:
95:a1:e2:14:b4:af:e2:a6:72:bb:b4:cf:ab:bb:9c:
b2:00:bb:4e:1d:db:2d:71:83:c9:88:91:8d:6e:2e:
b6:a5:ec:f4:26:65:a5:d5:e2:49:1a:d8:68:e9:0e:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:76:08:A6:07:DD:37:22:FF:40:73:A1:5D:8C:CC:79:82:7C:45
X509v3 Authority Key Identifier:
keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b8:eb:2d:16:7c:78:b7:05:80:f9:66:df:ff:1a:c5:24:48:
9c:00:f0:0d:67:90:13:4e:ea:5a:7a:35:f9:11:83:64:23:a7:
75:9c:f1:d3:ea:21:bc:ef:c1:16:e3:bc:2c:30:a5:81:4a:36:
1e:4b:01:e2:d3:a2:67:85:f2:e4:dc:d1:7e:06:ac:b9:a3:63:
b7:21:2d:28:20:41:3b:ed:96:ff:bf:e2:27:fb:c1:ce:78:e5:
d4:03:7b:80:b6:b1:d5:43:19:0d:23:bc:60:3a:a7:0a:7d:76:
90:0b:65:74:f9:19:89:a1:49:12:5c:2c:2c:42:dc:df:02:87:
3f:29:85:a7:08:aa:0b:4c:12:b7:38:2a:b1:d4:bb:36:be:21:
c4:d6:c5:2e:92:8e:5c:5c:bf:dc:ba:e1:4c:1a:ae:88:95:5c:
87:cf:f3:bd:c9:84:e3:6c:8e:5a:96:86:ed:20:5b:be:8f:26:
b6:db:1c:74:37:70:2b:7a:04:93:89:8e:2a:ac:9e:87:69:fd:
1b:a5:ab:d6:4b:fe:3c:66:17:75:fd:e6:db:03:d2:15:6a:b0:
2c:ab:5a:d5:e7:63:2f:62:03:ca:37:c1:69:f6:e5:7d:48:a7:
17:a8:bf:97:b5:04:de:8d:d7:b6:58:46:16:dd:af:8e:ab:f4:
4c:d3:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:24:44 2026 by rpki-client