
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: 1XM/eNrHpqLy7pNnem8UjKoLlZFGGgT9mwlQSNq+88s=
Subject key identifier: 32:D0:00:01:1A:AD:4A:0C:5E:00:1E:DD:4C:1C:A7:A6:1B:1B:C6:89
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 027A
Signing time: Wed 23 Sep 2026 01:48:27 +0000
Manifest this update: Wed 23 Sep 2026 01:48:26 +0000
Manifest next update: Wed 30 Sep 2026 01:48:26 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: HzamE4UA1CVDlkKNy3O5Qoasbm8MQnZ6IcH2pgYVTys=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NLPxqKYUf9lOT/IENYdccH8n5nolWXb5/WWyykUnYuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Sep 23 01:48:26 2026 GMT
Not After : Sep 30 01:48:26 2026 GMT
Subject: CN=6ab32feb-50ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:3a:77:2c:41:cc:3f:b8:0e:23:0d:14:40:
e0:65:ec:bf:8f:de:0a:39:4c:17:9a:85:23:af:7c:
17:d8:97:2b:f2:6d:43:d4:fe:80:84:ee:91:a4:01:
b4:7b:9c:3c:35:c3:58:62:22:57:eb:97:9f:24:64:
64:4e:2a:5e:51:6b:55:f6:12:86:06:69:55:95:e3:
49:7a:9b:9e:3b:13:e0:da:4d:01:59:b8:12:16:f3:
cd:14:c5:6d:b3:25:01:aa:7b:f5:3b:f0:18:cd:47:
d9:44:51:d5:af:c6:fa:5f:c3:9c:59:90:84:dc:bc:
79:6d:a0:e9:39:ea:cc:75:ca:77:1f:06:41:18:f9:
39:7b:3a:72:e5:ec:9d:cb:7d:7c:b0:84:6c:1b:39:
d7:d6:9a:ef:90:25:e8:70:b8:4c:05:dc:ab:3f:1d:
ff:8f:d0:93:7a:55:e9:57:e8:c8:0d:78:40:fb:df:
9a:09:e6:29:89:af:3e:f8:75:33:fa:10:3b:25:c3:
b2:74:ff:6a:a7:fe:3c:2a:97:37:d3:5e:fa:7b:65:
fa:c9:2a:7e:a7:d5:eb:27:88:ab:b7:2a:16:fe:5d:
5b:e3:68:82:a8:91:a1:5b:e6:b0:16:45:d2:24:a9:
68:db:f6:3d:75:64:5b:8d:2d:54:38:49:39:9d:3a:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:00:01:1A:AD:4A:0C:5E:00:1E:DD:4C:1C:A7:A6:1B:1B:C6:89
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:61:06:b9:66:81:3b:b8:2b:83:06:8d:bd:19:81:da:10:16:
c1:d3:c5:df:3b:6d:5e:6d:26:30:4f:e3:0a:73:83:ea:95:d0:
0c:95:6b:21:d8:01:f1:12:c9:1d:c1:61:06:21:9c:62:50:5c:
86:7b:33:15:fb:df:52:da:54:3d:d7:bb:9f:1d:1e:22:ca:85:
88:5e:6f:1c:c0:f2:53:76:4e:ea:b7:76:de:1e:ed:63:c7:f8:
a9:be:44:31:18:30:ee:ab:87:ce:5d:af:23:7d:4d:08:8e:23:
bb:a4:bc:95:15:6f:bb:65:52:f2:07:ad:dc:67:08:99:63:6b:
a6:74:f5:31:34:15:58:29:c1:f6:0e:87:7b:9e:80:52:e2:9e:
a9:db:e5:78:62:6c:73:ba:f7:71:75:e9:66:ec:0e:ed:3c:ad:
70:9d:96:3a:f4:a7:25:98:5e:ed:96:f5:56:16:f3:57:36:15:
48:c7:63:5b:95:42:c3:c2:32:77:ff:69:38:51:95:02:6b:d8:
5e:ea:51:3e:77:1d:1a:a2:2f:a7:f2:0a:46:c1:1b:06:29:29:
7d:f3:96:dd:d6:92:23:e2:d6:c8:54:4d:2c:c4:49:c6:cc:9e:
cd:87:48:70:b8:32:26:56:2c:65:d5:9c:c8:d7:87:5f:4f:0c:
62:51:8b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:17:53 2026 by rpki-client