
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
File: 8cgPvdVMGAKQLIXOmQoRLtMLX18.mft (raw, json)
Hash identifier: n5w2bvFStOTaOd5wWIPX94cZNVTnHlKJXTYvyClSZIs=
Subject key identifier: 70:75:2A:70:14:EF:ED:1C:FC:BE:5B:CB:D6:C4:52:8F:FE:6D:0C:D7
Authority key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
Certificate issuer: /CN=A915AC36/serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
Manifest number: 40
Signing time: Wed 25 Mar 2026 07:40:02 +0000
Manifest this update: Wed 25 Mar 2026 07:40:02 +0000
Manifest next update: Wed 01 Apr 2026 07:40:02 +0000
Files and hashes: 1: 8cgPvdVMGAKQLIXOmQoRLtMLX18.crl (hash: L8GtcdR1Gc9OEXaufzboUgrY7q2v2yHFQmDeyWdfCdU=)
2: 4E7FF5F8CF4011F093323D50C4F9AE02.roa (hash: tKUyqADQNHpmGouxD/J8Dml9YhqA+hcHH8c4dolMR/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Validity
Not Before: Mar 25 07:40:02 2026 GMT
Not After : Apr 1 07:40:02 2026 GMT
Subject: CN=69c39152-549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:c4:b6:18:6f:5e:f1:d4:3a:d4:ca:3b:53:
ea:b2:61:2a:bf:34:ca:24:81:70:f8:17:1c:9f:e4:
5e:c6:9d:81:ba:04:81:7a:cd:bc:5b:f0:0f:32:00:
bc:c9:8b:a5:54:9a:ed:51:4a:9e:41:b5:cd:44:a2:
6f:c5:12:f3:90:a4:92:9a:a1:a0:94:b6:ce:8e:df:
23:14:37:1e:34:e2:e2:6f:70:9a:15:b5:82:33:e0:
f4:7a:9a:e2:54:ad:02:a3:a4:49:7c:a3:e7:f2:89:
ab:fd:08:fc:e8:07:5b:8c:97:80:49:f7:c3:91:c4:
b6:b4:c4:c5:bf:06:f4:ed:2d:36:0d:58:92:fa:90:
3d:f1:17:6e:5d:99:fd:cf:92:b6:94:87:01:ae:cb:
97:68:b9:87:3a:d7:ea:ce:e9:90:27:13:40:92:e7:
ac:e5:8c:3a:70:0d:f7:cc:51:37:8b:85:2c:16:be:
ad:ba:6a:c6:26:d6:82:d9:8b:92:92:e3:85:34:97:
60:38:2e:33:7f:ed:24:98:3d:ba:d3:bd:12:ec:ef:
91:a2:45:e7:00:a1:2a:a2:20:16:4c:5c:65:98:9f:
11:68:41:e8:f6:bd:22:b4:d5:9d:db:80:be:7f:9b:
60:53:09:9d:3d:93:8a:1b:23:e7:a7:22:83:a1:9d:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:2A:70:14:EF:ED:1C:FC:BE:5B:CB:D6:C4:52:8F:FE:6D:0C:D7
X509v3 Authority Key Identifier:
keyid:F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a4:a7:2a:3e:57:a6:ca:9b:43:8a:66:5c:82:bb:97:34:89:
a8:05:36:f7:96:13:66:9e:67:a6:53:21:48:16:8b:89:1f:70:
89:1a:c5:05:f6:c3:15:89:dd:a7:14:ce:83:1f:cf:67:8b:fb:
9c:18:58:7e:f4:da:99:52:68:0e:d2:fd:c6:d3:66:62:9b:eb:
9d:63:be:f6:3c:aa:c0:94:96:f9:63:18:60:40:6d:16:66:ec:
66:34:9f:d0:56:90:e4:b4:00:03:e8:e0:af:ed:1b:b9:03:44:
63:4e:17:74:a0:e8:c1:35:aa:45:30:4b:47:fa:61:2f:27:95:
72:55:56:03:8c:3c:cb:c2:e2:ab:fd:ac:e7:b2:d6:2d:93:70:
ad:3f:9f:cd:04:d5:79:7a:63:13:d6:2a:2c:4d:8a:2c:83:1b:
35:19:b4:8f:97:07:20:bc:1d:5a:ea:e4:b7:d1:87:27:54:f4:
73:76:67:42:f6:0c:fc:c4:ad:be:2b:88:55:8c:7c:fa:31:22:
04:42:59:fa:77:1d:93:d9:dc:5b:c2:9b:a9:3d:6d:3a:4c:5c:
7e:2c:a0:6a:18:fe:ed:28:e9:b3:8c:2e:93:0a:e2:11:83:89:
89:b4:10:18:15:0b:78:af:ae:f1:26:50:51:ed:14:69:89:a0:
d5:4d:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:23:39 2026 by rpki-client