
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json)
Hash identifier: BZHnS0QpuWNgPfOyEhwpHy7SeHKO0NBGbaH5TaThs6Y=
Subject key identifier: 6C:BE:B6:E7:54:FE:3E:2E:DE:98:DE:17:3F:19:EB:A8:64:E9:AD:CC
Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Certificate serial: 05D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
Manifest number: 05C3
Signing time: Tue 24 Mar 2026 22:48:44 +0000
Manifest this update: Tue 24 Mar 2026 22:48:44 +0000
Manifest next update: Tue 31 Mar 2026 22:48:44 +0000
Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: FEFYLi1/UPAE3YvDpv1i31foJaXvWj3IzHS2FnXnEzE=)
2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: HxYY2wdjUTx1jz43i/flgn+Xs2XHFyISZfK6XgBX4gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Validity
Not Before: Mar 24 22:48:44 2026 GMT
Not After : Mar 31 22:48:44 2026 GMT
Subject: CN=69c314cc-fe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:d2:35:81:e7:68:d0:a5:c3:98:cc:a9:f5:
fd:d0:ac:30:a1:34:50:82:2c:55:5d:83:35:2c:e6:
0f:db:2a:fd:91:04:e9:65:aa:5c:b1:a9:36:35:f6:
8d:e9:40:20:02:17:52:fa:f1:f2:fb:3b:1f:3c:55:
88:1e:41:67:a0:a0:5c:ae:66:cf:b3:f8:96:3b:1a:
59:e7:d1:ad:6b:c6:5f:ef:27:68:53:2f:1f:d8:79:
14:7f:62:2d:2e:d0:0c:bf:41:29:4a:d3:d5:46:43:
98:f8:84:30:eb:b2:91:d5:80:b1:d8:15:e6:9f:b1:
88:58:46:0d:91:51:e4:32:a6:ca:2c:a5:1f:b2:a8:
e2:17:05:54:c0:dc:2f:22:54:f9:54:60:a3:a8:f1:
a3:ac:42:f8:4c:cb:07:04:0f:f3:46:4a:76:fd:f5:
a6:4f:c1:27:75:0f:63:b0:b0:09:1a:24:dd:6d:00:
be:15:1d:a0:22:45:a4:ae:84:d1:fa:7c:bf:ef:ae:
3c:bc:eb:57:e1:17:c5:c9:d3:ac:3d:11:e9:3e:98:
17:64:d6:0c:a0:87:75:ac:ba:73:55:22:34:26:0f:
72:b9:cd:27:25:cc:eb:ad:77:4c:72:c3:ca:42:36:
99:15:01:9b:30:70:7f:68:c9:cc:ec:64:6e:24:88:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:B6:E7:54:FE:3E:2E:DE:98:DE:17:3F:19:EB:A8:64:E9:AD:CC
X509v3 Authority Key Identifier:
keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:85:f1:62:5b:41:c7:dc:94:a1:de:f1:7f:32:7d:bf:70:3b:
f7:0d:58:70:4e:9b:c5:63:5c:f4:f4:3f:01:81:a2:1b:e1:48:
d5:6c:01:5f:6c:38:03:4d:4b:1b:b4:f9:91:0e:63:79:d3:66:
41:db:21:68:95:d7:18:46:0a:78:3c:1f:b4:e2:4c:9a:ca:43:
f3:6e:4a:e0:02:94:5a:8c:c2:02:e9:29:32:30:67:4a:70:b6:
4b:56:c1:14:84:18:44:73:37:2e:d2:28:84:2a:5b:52:71:8c:
dc:99:0d:dd:80:c3:0a:ab:53:4d:1a:8d:79:bf:e8:2c:a2:f0:
6b:43:cb:13:b4:8a:44:fd:85:73:43:ee:5c:ec:77:f1:36:93:
ac:77:2d:c2:c1:a9:8e:9b:8f:a3:a2:2b:84:79:49:95:5c:45:
a1:79:71:18:01:52:86:86:7c:b6:aa:c6:f4:65:d7:85:38:ac:
b5:90:e5:7a:6e:c4:18:7d:96:e4:95:a7:0a:65:1e:3e:36:a1:
e7:12:3e:2a:73:3a:cc:96:87:b5:09:03:42:49:33:da:dd:78:
41:79:46:a2:f6:20:2c:8b:c2:4b:ce:c2:2c:c8:c5:96:2e:4e:
d7:bc:57:55:e2:2d:9b:41:cb:94:0f:8c:2f:01:1b:97:e3:a2:
86:1e:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:37 2026 by rpki-client