
$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json)
Hash identifier: wtF7/NUexC2AiM+mhoKBPw8c+WOZZL3BaQNMehZLjaA=
Subject key identifier: 23:A3:FA:78:83:68:FA:EE:00:63:AD:D0:4D:08:00:8C:5F:FA:E7:3C
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
Manifest number: 0262
Signing time: Wed 25 Mar 2026 01:35:07 +0000
Manifest this update: Wed 25 Mar 2026 01:35:06 +0000
Manifest next update: Wed 01 Apr 2026 01:35:06 +0000
Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: /Cq8iq7iIL85t0Yf8+cdN7BqVfp3027XSOSCQboVXlA=)
2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ja+dV8F8droBnCPc3sPIfN0Ul1XNgCG3f5fT9ZFS1Y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Validity
Not Before: Mar 25 01:35:06 2026 GMT
Not After : Apr 1 01:35:06 2026 GMT
Subject: CN=69c33bca-ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:0d:cb:05:da:34:58:ee:7a:65:02:27:29:
c5:72:a5:9e:59:cb:2e:b6:d9:7a:3f:86:7a:e7:db:
1a:8e:46:08:77:aa:c7:ef:5d:56:56:1a:af:b0:19:
1b:bb:d5:5d:49:19:04:f7:ba:18:cd:63:f0:36:12:
ea:2e:32:11:3c:31:c7:2a:0b:90:a2:52:a1:44:5c:
67:28:c0:cd:15:4b:e4:76:c9:fd:e9:49:0b:7e:85:
47:d5:8d:c9:fc:5f:b6:ea:ae:bd:9f:67:bf:4a:80:
c6:91:09:8d:55:c0:54:26:47:52:1c:1f:ad:e3:d2:
9a:82:54:40:b7:0e:0b:76:fc:e2:8e:25:ec:59:03:
04:ab:72:45:36:26:cd:8e:7b:ff:71:78:55:39:22:
85:41:ef:2f:fd:57:e5:bb:c0:b9:a8:b3:63:8d:61:
d1:44:5b:71:d2:fb:9e:49:5b:7d:5f:6a:2b:d5:cb:
bd:a6:d0:6d:08:f2:8c:fe:3b:a1:2c:15:a3:af:88:
30:16:3a:c0:d9:e9:b1:13:a3:3b:89:68:81:84:a9:
c6:f7:6e:74:68:60:27:ab:49:4a:ff:60:d4:44:ab:
27:66:9f:e5:10:e6:4e:8a:bf:ca:4d:5a:8b:73:59:
70:dc:b8:f0:3d:99:3e:3f:17:7e:6e:09:b3:49:3d:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:FA:78:83:68:FA:EE:00:63:AD:D0:4D:08:00:8C:5F:FA:E7:3C
X509v3 Authority Key Identifier:
keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:9c:44:44:30:15:eb:4a:9d:93:5f:7b:b4:b2:aa:3d:8e:a9:
7a:2e:38:b5:c7:96:10:b1:e0:3c:c9:5b:f3:dc:0f:74:f9:f4:
ad:ed:6b:b5:52:a0:c0:db:c0:2c:43:5a:66:7a:b7:a3:a1:0e:
f9:36:bd:fe:39:5c:59:48:2a:d7:b9:08:42:f6:23:81:d1:a7:
42:c1:fb:5a:f2:fd:99:ca:83:b6:52:6d:df:4d:c5:34:1b:27:
ed:e8:00:ac:31:46:a5:7a:d6:03:59:81:a9:77:4a:7e:5a:77:
c8:0f:60:5a:72:07:21:40:be:fb:1d:6e:4d:df:e8:ba:43:14:
41:0d:95:ba:93:c8:f4:d0:05:55:48:f2:6e:be:96:40:d6:1a:
96:08:cf:72:4e:71:60:37:e8:90:d3:8f:cf:0a:28:a4:d9:44:
d5:b3:97:6d:b5:45:8a:64:dd:df:64:37:24:93:3c:c0:bf:92:
8a:be:d5:3e:ad:8c:10:ec:a4:44:1d:61:f7:67:ac:8f:9c:2a:
ec:19:e6:4a:12:b7:38:07:d7:d8:e8:50:0c:8a:93:7c:f4:d1:
b9:95:0f:7a:59:f2:37:16:68:37:ef:c6:73:84:f0:07:0f:26:
c4:a6:21:d2:4a:91:0f:b8:a8:0b:80:7c:1a:d7:23:d2:12:16:
4d:c8:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:29 2026 by rpki-client