
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier: EefXbD5dbnBNGek9tGz+B6e4XVniMa65s3ai9BF0ce4=
Subject key identifier: 8E:93:34:DD:2D:20:30:4D:6A:45:E2:5D:D5:87:1B:2E:BC:ED:AE:35
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number: 94
Signing time: Tue 03 Mar 2026 07:09:49 +0000
Manifest this update: Tue 03 Mar 2026 07:09:48 +0000
Manifest next update: Tue 10 Mar 2026 07:09:48 +0000
Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: pljJXPrRwKDjyaOfrgmcIpvJbFfDXhFgQAhMbndmw28=)
2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Validity
Not Before: Mar 3 07:09:48 2026 GMT
Not After : Mar 10 07:09:48 2026 GMT
Subject: CN=69a6893c-0add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:0a:f8:75:bc:45:ee:4a:8e:1c:76:c9:fd:
9b:4e:dd:27:a2:4d:97:6a:9d:1e:23:f7:e3:14:06:
40:e4:1c:1a:3a:72:6b:50:32:6b:62:fc:d6:8e:c3:
fa:e6:5a:07:7d:85:4e:c3:12:68:f2:b9:4e:67:a0:
d5:15:cd:57:59:f3:b7:5b:26:d8:8b:7b:03:72:a8:
1d:0d:16:3b:8d:d8:da:50:4b:18:c7:d1:c0:ce:db:
77:ba:90:e5:34:62:42:e6:14:b5:cd:23:d7:94:7e:
46:a3:fb:31:b4:0c:b7:92:b3:64:3e:ff:b3:5b:10:
f9:02:9b:e5:7a:0f:c6:32:70:83:7b:39:6c:52:bc:
cd:2c:00:bc:60:30:c3:2b:ef:f0:15:7f:44:2c:dd:
5f:39:a6:0f:be:5e:84:56:5f:41:1d:5a:01:33:3e:
9d:96:e2:f1:84:60:e1:78:fa:71:4c:51:51:c1:6d:
69:cf:99:47:0a:94:cf:77:fb:86:35:87:a1:c7:f4:
76:0a:0b:48:c1:e7:81:04:16:79:63:7c:3f:35:da:
37:6a:fd:67:65:85:85:9c:35:3a:1d:df:25:ed:81:
b0:b8:bd:49:8d:ea:ce:c2:0c:cc:ee:56:2f:79:9c:
9b:5f:a2:05:95:60:d2:dc:ac:c6:79:8a:5a:02:d2:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:34:DD:2D:20:30:4D:6A:45:E2:5D:D5:87:1B:2E:BC:ED:AE:35
X509v3 Authority Key Identifier:
keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:91:d2:39:d9:78:e2:c0:0f:c6:9f:6d:52:85:ad:11:1a:
32:b7:b8:c0:0d:b2:96:66:77:3b:43:04:19:33:8a:2d:7a:38:
22:2f:59:82:2f:cc:19:24:b3:13:80:eb:f6:6b:e9:8f:fa:fa:
39:09:8b:12:3f:a0:41:37:0b:e6:59:bb:c4:b1:5f:b8:5b:2e:
87:d3:a7:9b:5b:47:05:42:dc:af:e0:fb:62:58:29:37:0a:4e:
5e:e7:d8:48:29:22:a4:47:3f:b1:01:dd:b6:e1:69:70:bc:58:
62:c8:97:e6:67:9d:14:93:f8:90:07:f7:a4:bd:55:37:bd:9b:
2b:0e:0c:5e:6e:cb:c8:e7:04:ae:fe:a6:3f:88:ae:af:c7:e0:
d4:2c:f7:2c:c9:98:78:6a:35:84:7f:23:9e:9b:a7:ed:8d:e2:
57:a7:fe:36:4d:d5:27:ea:25:6b:9b:ee:f5:36:be:59:51:89:
0f:a6:f0:d7:e0:b7:74:90:a9:1d:dd:71:29:6a:c0:35:44:6e:
50:6b:76:4b:c3:26:6f:d4:ad:37:89:a4:f8:c7:03:20:f4:19:
df:4f:96:f7:04:84:88:b4:28:8d:e4:e5:f7:1d:27:75:de:d7:
2b:79:fd:53:29:5c:13:07:ab:3f:29:f6:c6:74:42:b8:4c:04:
ac:67:14:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxRkExMTAvBgNVBAUTKEYxNUM1QzVCQTUyMTQ1MzcwN0M4MUY1RkVDMDgxMUJG
MjFDRkY0MEUwHhcNMjYwMzAzMDcwOTQ4WhcNMjYwMzEwMDcwOTQ4WjAYMRYwFAYD
VQQDEw02OWE2ODkzYy0wYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnoAK+HW8Re5Kjhx2yf2bTt0nok2Xap0eI/fjFAZA5BwaOnJrUDJrYvzWjsP6
5loHfYVOwxJo8rlOZ6DVFc1XWfO3WybYi3sDcqgdDRY7jdjaUEsYx9HAztt3upDl
NGJC5hS1zSPXlH5Go/sxtAy3krNkPv+zWxD5Apvleg/GMnCDezlsUrzNLAC8YDDD
K+/wFX9ELN1fOaYPvl6EVl9BHVoBMz6dluLxhGDhePpxTFFRwW1pz5lHCpTPd/uG
NYehx/R2CgtIweeBBBZ5Y3w/Ndo3av1nZYWFnDU6Hd8l7YGwuL1JjerOwgzM7lYv
eZybX6IFlWDS3KzGeYpaAtJb0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6TNN0t
IDBNakXiXdWHGy687a41MB8GA1UdIwQYMBaAFPFcXFulIUU3B8gfX+wIEb8hz/QO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGQS85QTg3M0VCMDQ1
QTMxMUYwOTVFRkZENDhDNEY5QUUwMi84VnhjVzZVaFJUY0h5QjlmN0FnUnZ5SFA5
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlBNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTFGQS85QTg3M0VCMDQ1QTMxMUYwOTVFRkZENDhDNEY5QUUwMi84VnhjVzZVaFJU
Y0h5QjlmN0FnUnZ5SFA5QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASZGR0jnZeOLAD8afbVKFrREaMre4wA2ylmZ3O0MEGTOKLXo4Ii9Zgi/MGSSz
E4Dr9mvpj/r6OQmLEj+gQTcL5lm7xLFfuFsuh9Onm1tHBULcr+D7YlgpNwpOXufY
SCkipEc/sQHdtuFpcLxYYsiX5medFJP4kAf3pL1VN72bKw4MXm7LyOcErv6mP4iu
r8fg1Cz3LMmYeGo1hH8jnpun7Y3iV6f+Nk3VJ+ola5vu9Ta+WVGJD6bw1+C3dJCp
Hd1xKWrANURuUGt2S8Mmb9StN4mk+McDIPQZ30+W9wSEiLQojeTl9x0ndd7XK3n9
UylcEwerPyn2xnRCuEwErGcUpQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:49 2026 by rpki-client