
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
File: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json)
Hash identifier: ROVu0DF4jpBy2ZDWSmtqFlWQC4zPG+kCmAWAhRvHyoI=
Subject key identifier: 2E:A8:B5:96:B2:E7:D1:7B:46:52:90:FE:23:99:91:81:41:56:2D:89
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Certificate issuer: /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
Manifest number: F8
Signing time: Sun 15 Nov 2026 06:33:58 +0000
Manifest this update: Sun 15 Nov 2026 06:33:57 +0000
Manifest next update: Sun 22 Nov 2026 06:33:57 +0000
Files and hashes: 1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: S4F/q3wnG0HBWmJIrVOEliBOCVo3YKM+Wj6hz1Tno9I=)
2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: fSYltpxk2u14lPvWhCXB9QKuMuDj8l4c6pcDEmZNiXo=)
3: 940EC266D74B11F1B20DE27B2966CEF9.roa (hash: sr49U1JfbACqi+33fge2G9ScZE/RPu3TVKiHQ06Z+kM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Validity
Not Before: Nov 15 06:33:57 2026 GMT
Not After : Nov 22 06:33:57 2026 GMT
Subject: CN=6af95255-ecb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:82:4a:85:8d:75:76:fe:ca:46:7e:80:e6:
01:94:5b:71:cf:87:4b:b9:5a:a3:0d:81:66:60:e4:
29:e2:a0:fe:10:fb:e9:43:82:41:3f:89:7e:8c:4b:
85:bf:6c:b2:eb:ca:12:58:5c:cd:a1:84:0d:82:49:
f5:8d:cc:68:a4:d3:22:53:c5:20:0e:e9:de:11:28:
48:c9:88:96:50:02:b1:76:5d:9c:a8:a1:79:b6:57:
b6:8b:9e:59:60:34:f2:75:2b:5b:cc:24:96:93:15:
c2:6c:9f:6d:32:95:00:e3:d9:6e:17:d8:f1:1b:cf:
b0:8f:95:d2:b8:3b:23:d7:c2:73:e6:cb:d7:ed:10:
06:64:fc:ba:96:6a:f2:6d:09:c1:00:77:2d:cc:f8:
99:3d:53:ba:99:4c:07:d9:ec:e8:f5:9f:41:17:5d:
91:68:3f:52:fd:d1:65:c8:6d:ef:9d:1e:6e:8a:34:
db:93:43:11:53:1e:cb:bb:6e:de:ca:92:bf:2f:b4:
90:0c:6d:9b:75:0a:d6:7f:d4:71:3f:1d:f7:86:3a:
ae:f2:e8:de:3b:62:34:9c:51:71:36:ba:38:6c:cd:
cd:ba:d7:69:85:84:34:2b:02:f6:4d:32:9d:a9:24:
88:92:09:ed:75:5c:4d:9e:92:45:41:a9:66:89:7b:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:B5:96:B2:E7:D1:7B:46:52:90:FE:23:99:91:81:41:56:2D:89
X509v3 Authority Key Identifier:
keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:92:a1:1e:55:d3:72:18:e6:6b:ac:fe:1d:3c:15:08:4f:89:
30:fb:72:b7:ee:3f:2b:a1:20:93:03:d6:d3:02:73:81:b9:1e:
ca:24:bf:31:e9:17:84:47:79:e0:4c:36:ec:6f:9d:be:b1:51:
f4:e4:57:cc:b8:33:7e:b9:3f:1c:80:90:8c:8a:b7:83:10:2a:
a0:12:e1:93:d4:09:c9:eb:03:d2:73:cc:e5:f4:bd:f3:fa:85:
31:cd:be:08:e2:4b:51:61:ca:4a:8a:78:4e:af:8e:26:0e:56:
ec:17:8c:51:dd:a7:6f:29:02:88:a8:c3:cb:3f:f8:02:0a:76:
46:fe:02:66:40:e4:85:92:df:66:34:4f:fb:2b:c0:4b:5e:a2:
cd:29:cd:02:b2:d9:dd:b8:05:f6:1d:5b:2f:90:9f:9b:e1:1f:
e4:2f:ee:04:29:3b:d6:e3:3c:83:ff:8c:e1:0d:50:0f:b8:d9:
5f:09:b8:cb:db:2d:fe:9f:22:82:8a:8f:fe:a9:80:6b:bf:0a:
72:13:64:45:35:94:7c:d5:f5:8d:61:62:f7:69:bb:51:9a:22:
e8:65:0a:16:20:17:13:28:f9:73:81:a0:e1:d1:0e:68:2e:b8:
00:dd:d7:a6:26:c3:cf:ef:af:b2:d6:f7:db:79:e5:5f:35:4c:
d5:7d:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:51 2026 by rpki-client