
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
File: 8T313f28CQG_wEdBIIjaNJOg8kQ.mft (raw, json)
Hash identifier: oUVQpvYeCVBRHIeydcLn+6eYrkkKdueuqyHJy5bxoGM=
Subject key identifier: 6D:C7:AF:7F:6B:BE:B2:96:CF:98:AC:04:20:FB:5D:66:F0:11:64:76
Authority key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44
Certificate issuer: /CN=A916E1C6/serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
Manifest number: 3A
Signing time: Fri 27 Mar 2026 08:04:57 +0000
Manifest this update: Fri 27 Mar 2026 08:04:56 +0000
Manifest next update: Fri 03 Apr 2026 08:04:56 +0000
Files and hashes: 1: 8T313f28CQG_wEdBIIjaNJOg8kQ.crl (hash: H9xsgHiDoYsR386ZZHuwWRn0YFlAxdJkK+1WxXRqkZw=)
2: 20F76E36056911F187C42801313D8C67.roa (hash: Se4FSt1iM9MDo+gX2SyfdFL5Hm8kZKb/ZKJR41JulNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl
rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 08:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
Validity
Not Before: Mar 27 08:04:56 2026 GMT
Not After : Apr 3 08:04:56 2026 GMT
Subject: CN=69c63a29-520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:be:b8:b0:1c:d6:57:e8:cb:4f:9a:cf:e9:
97:0d:e5:2e:f4:3d:9a:82:99:9f:44:5f:93:ce:45:
f4:bb:e3:ac:c9:a3:4e:63:0e:0a:3f:67:60:9e:06:
cb:af:9b:51:b5:26:4b:5a:bc:64:6b:fe:67:5b:98:
9e:3e:84:ee:ae:2a:72:f5:28:f0:d5:76:b9:2d:1e:
74:53:0a:39:1b:ef:07:4c:d3:47:8d:b6:8f:0c:be:
c7:16:d2:a2:d3:d6:10:51:41:0a:70:ed:7a:12:5c:
b0:c9:89:81:a3:2a:68:99:ac:96:e5:ce:9e:97:08:
bb:56:67:92:b0:dc:85:9b:0e:1d:cf:2f:ef:82:25:
d8:92:09:a6:60:c6:36:66:0a:4e:67:6c:0f:b0:3d:
15:ca:d5:7b:60:4f:8a:e3:d8:9e:f3:f4:ad:00:b8:
69:8c:85:74:e0:51:21:d5:47:7f:4b:16:24:79:97:
fd:88:59:5f:51:d9:02:7d:70:78:6b:5d:0b:88:5a:
1e:34:ff:83:9e:74:67:21:7f:e1:5c:12:58:48:48:
d9:45:16:46:84:38:cb:22:79:fd:46:af:25:c3:ac:
cc:5e:33:6e:4e:50:ed:02:79:bb:3e:98:17:95:3a:
00:e4:82:24:64:1a:2d:06:45:22:43:ac:d4:45:3f:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:AF:7F:6B:BE:B2:96:CF:98:AC:04:20:FB:5D:66:F0:11:64:76
X509v3 Authority Key Identifier:
keyid:F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d4:5d:7b:61:b7:be:d1:fa:a6:94:c4:f1:d0:19:08:a9:62:
27:7f:67:9d:fc:2b:d2:30:02:ae:c9:e3:30:85:78:dc:cb:60:
f1:33:40:86:9f:c3:d8:65:3b:da:ac:3a:d7:55:dd:65:fe:be:
a3:60:f0:65:9b:22:94:67:ae:6b:79:6e:ba:47:eb:02:52:f6:
ae:52:f9:1c:3f:e9:be:ea:6a:f8:82:ac:53:cc:90:45:c5:37:
2e:4b:ee:07:33:40:03:be:9f:5b:d7:72:2b:05:bb:dc:22:50:
ae:51:0e:7c:07:a3:81:d1:fe:d4:23:71:09:63:b1:46:da:a5:
85:83:c3:8d:ec:c3:dd:af:0c:e4:e9:b2:a9:03:e1:70:cc:33:
17:9a:93:b4:28:66:7e:a2:fc:fe:37:c4:17:cf:21:51:0f:c4:
59:ac:44:b0:60:79:6d:e1:08:58:25:9c:bb:f8:de:b2:49:14:
59:a0:d6:d3:c9:f9:58:80:75:bf:b8:1f:32:b0:e1:b7:7b:cd:
2e:29:f1:80:82:fd:fd:6f:c9:aa:3c:1c:62:76:74:d7:71:96:
ad:a1:45:61:68:28:42:10:eb:72:b9:d2:3e:50:ea:32:6d:61:
09:fa:be:f2:da:88:5e:3b:ec:de:ec:03:d6:9b:ae:fd:9f:a8:
71:9c:5f:67
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RTFDNjExMC8GA1UEBRMoRjEzREY1RERGREJDMDkwMUJGQzA0NzQxMjA4OERBMzQ5
M0EwRjI0NDAeFw0yNjAzMjcwODA0NTZaFw0yNjA0MDMwODA0NTZaMBgxFjAUBgNV
BAMTDTY5YzYzYTI5LTUyMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmJb64sBzWV+jLT5rP6ZcN5S70PZqCmZ9EX5PORfS746zJo05jDgo/Z2CeBsuv
m1G1JktavGRr/mdbmJ4+hO6uKnL1KPDVdrktHnRTCjkb7wdM00eNto8MvscW0qLT
1hBRQQpw7XoSXLDJiYGjKmiZrJblzp6XCLtWZ5Kw3IWbDh3PL++CJdiSCaZgxjZm
Ck5nbA+wPRXK1XtgT4rj2J7z9K0AuGmMhXTgUSHVR39LFiR5l/2IWV9R2QJ9cHhr
XQuIWh40/4OedGchf+FcElhISNlFFkaEOMsief1GryXDrMxeM25OUO0Cebs+mBeV
OgDkgiRkGi0GRSJDrNRFPytnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbcevf2u+
spbPmKwEIPtdZvARZHYwHwYDVR0jBBgwFoAU8T313f28CQG/wEdBIIjaNJOg8kQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMUM2LzQyRTBCNkIyRDUx
RjExRjA4NzkyQjU3REM0RjlBRTAyLzhUMzEzZjI4Q1FHX3dFZEJJSWphTkpPZzhr
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOFQzMTNmMjhDUUdfd0VkQklJamFOSk9nOGtRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF
MUM2LzQyRTBCNkIyRDUxRjExRjA4NzkyQjU3REM0RjlBRTAyLzhUMzEzZjI4Q1FH
X3dFZEJJSWphTkpPZzhrUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCb1F17Ybe+0fqmlMTx0BkIqWInf2ed/CvSMAKuyeMwhXjcy2DxM0CGn8PYZTva
rDrXVd1l/r6jYPBlmyKUZ65reW66R+sCUvauUvkcP+m+6mr4gqxTzJBFxTcuS+4H
M0ADvp9b13IrBbvcIlCuUQ58B6OB0f7UI3EJY7FG2qWFg8ON7MPdrwzk6bKpA+Fw
zDMXmpO0KGZ+ovz+N8QXzyFRD8RZrESwYHlt4QhYJZy7+N6ySRRZoNbTyflYgHW/
uB8ysOG3e80uKfGAgv39b8mqPBxidnTXcZatoUVhaChCEOtyudI+UOoybWEJ+r7y
2oheO+ze7APWm679n6hxnF9n
-----END CERTIFICATE-----
Generated at Fri Mar 27 10:58:17 2026 by rpki-client