
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json)
Hash identifier: 0opEZff2WKZG0jOZlrr/QCb3Cb8OIej3ijKuCJW1buw=
Subject key identifier: 40:FE:0A:AB:D7:7F:69:AF:FC:75:B9:51:1D:8C:69:FE:73:52:FC:21
Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
Manifest number: 0939
Signing time: Mon 12 Oct 2026 22:26:24 +0000
Manifest this update: Mon 12 Oct 2026 22:26:23 +0000
Manifest next update: Mon 19 Oct 2026 22:26:23 +0000
Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: 9BgWPZDdqRl4kEOFjoItO68tAypXFcsOCNmTA2lwNlc=)
2: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: fUcrgjwtKp7MjAj6eCSpwpGAUIRsUv3G1ku8PQ5LCQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 22:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Validity
Not Before: Oct 12 22:26:23 2026 GMT
Not After : Oct 19 22:26:23 2026 GMT
Subject: CN=6acd5e90-436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4a:85:d6:5b:80:c1:7d:14:65:52:2f:bc:37:
d5:df:0f:b5:0b:4a:44:cf:0b:6e:5f:a6:4e:64:b2:
34:5c:7b:33:22:a0:f9:11:58:7f:fe:6d:09:56:2e:
80:db:9b:a5:32:76:f6:fe:53:22:98:65:06:60:ac:
21:26:09:1b:f4:f2:cc:2d:f1:4a:e7:5b:e9:37:90:
31:bb:0d:c5:d7:a3:f4:78:3a:f5:62:38:9b:c1:da:
44:de:a2:89:82:24:57:43:43:2f:cf:d4:a8:06:00:
24:60:77:52:89:89:b2:3d:55:98:00:38:8c:5f:9a:
48:fe:09:28:cb:40:55:a3:04:66:8d:99:42:7d:c8:
a1:68:b8:5b:56:0a:d3:05:a3:c1:9b:84:08:5b:09:
a4:a1:44:df:07:9b:9e:f5:49:28:a4:c6:37:ba:38:
72:da:28:1e:d8:4e:1f:3c:ec:7c:47:dc:dd:9e:36:
2c:a2:7f:c1:1a:6e:8a:e0:dc:01:a6:06:f4:ce:b8:
7a:cd:d6:02:5a:ba:f4:b5:09:08:42:c1:dc:39:75:
7c:08:cd:52:9a:fa:87:14:a2:7e:57:f0:cf:fa:93:
58:14:a3:93:77:4b:dd:6f:7d:fb:c0:b3:e3:e0:06:
26:cd:28:86:c6:91:1a:54:a1:f9:e1:af:2a:4d:b7:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:0A:AB:D7:7F:69:AF:FC:75:B9:51:1D:8C:69:FE:73:52:FC:21
X509v3 Authority Key Identifier:
keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:d3:a5:22:60:8e:f8:38:aa:44:5e:7f:bb:73:23:7c:f8:a5:
3a:ec:5f:e9:44:af:5e:af:99:f2:13:e9:d3:71:30:be:61:58:
02:96:be:1f:b2:a4:d8:a7:43:7e:ce:f3:0d:dc:4f:3e:25:49:
7a:78:81:fd:e9:db:03:eb:8e:e8:75:97:6f:17:2f:9f:a8:6a:
de:2b:78:97:e6:4e:ca:b5:31:c9:c3:8e:a3:f4:12:9e:16:dc:
d3:74:47:f2:14:7c:b7:e2:7e:76:7a:c7:0f:9c:d7:3a:49:49:
14:2d:12:98:fb:c7:53:7f:a7:f1:53:65:99:83:da:77:40:5c:
d6:53:04:b6:d3:ce:b3:b6:c9:e1:fa:ee:66:af:6d:49:91:0d:
2a:44:91:1c:f5:6d:1c:6e:c2:58:29:4c:e4:93:cd:b3:46:91:
c0:e1:2b:74:2f:0c:07:74:c4:75:12:5f:f3:6b:45:a7:68:99:
e1:25:5a:ec:22:6f:e4:63:fe:55:d5:9b:7e:da:b9:24:2e:d3:
79:78:23:1d:c5:c0:f8:41:62:6f:ef:11:03:64:79:c4:52:44:
11:53:23:70:3d:a8:4e:5e:7e:fd:8a:9d:72:97:7e:0f:27:ff:
c7:97:36:17:17:cb:ca:d6:c0:05:b7:34:61:4b:6f:61:e1:c2:
96:f5:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:40:14 2026 by rpki-client