
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json)
Hash identifier: 8EuHB/iWYDikwFkjA3dH++0BeiDS8Mk8A8JTBDtGSlI=
Subject key identifier: E9:00:5F:7B:CB:39:2D:81:87:F6:48:2E:6F:CA:9C:09:2B:90:91:A9
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
Manifest number: A2
Signing time: Wed 25 Mar 2026 06:34:19 +0000
Manifest this update: Wed 25 Mar 2026 06:34:18 +0000
Manifest next update: Wed 01 Apr 2026 06:34:18 +0000
Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: TA6OQ3Wau5j02P6iX5XQqp77z9y37yPPpDXWqin5nq8=)
2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: TgVrDlat2+ByZMpKIQ8pI5WNmuoF/FmyVp9TGWTtSyI=)
3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: q/nsqh9kiH+bznpNaj8r4apm6/Ae9GpQkbbiW39Shpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Validity
Not Before: Mar 25 06:34:18 2026 GMT
Not After : Apr 1 06:34:18 2026 GMT
Subject: CN=69c381eb-db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:28:3e:23:17:ec:a6:25:42:89:52:83:56:
1e:61:46:33:1b:c9:d9:10:29:fa:2a:09:62:e1:6a:
ce:42:7a:42:d8:6f:bc:78:7f:48:14:bc:7a:d7:35:
74:05:d2:00:bc:2d:0d:bd:23:df:c7:ec:a1:02:ec:
12:27:f2:2a:a8:88:c6:08:0d:b0:08:3c:c3:92:aa:
1c:0d:64:5d:17:d3:a4:cc:f1:30:c2:9e:0e:22:00:
32:16:1c:3a:6a:12:de:8f:88:e9:a4:87:64:6f:ab:
64:cb:c1:d1:23:e5:1d:ec:be:5d:15:0d:d6:52:92:
93:b4:c1:da:90:69:59:90:19:d9:72:4c:b5:01:12:
40:c7:db:b5:3d:23:c5:00:82:b8:63:ae:44:61:1a:
93:0f:ca:e5:67:36:36:e2:a5:fa:0d:7d:1d:8d:5e:
42:b9:38:6f:51:80:f2:bf:04:8e:c1:b9:36:a6:4b:
71:ac:9d:63:23:72:c3:45:3a:ce:d8:82:32:50:06:
65:f3:8b:8e:a0:46:6e:fa:fa:6f:a8:02:b4:9d:4c:
09:ce:2a:42:8c:e7:c1:fe:2f:f8:7c:78:b9:03:b8:
c7:ef:a1:21:a5:5d:80:e0:7d:86:c0:68:38:2b:4f:
6c:92:50:76:16:60:c5:4f:f3:b1:67:a5:0c:04:2d:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:5F:7B:CB:39:2D:81:87:F6:48:2E:6F:CA:9C:09:2B:90:91:A9
X509v3 Authority Key Identifier:
keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:15:b0:df:27:9c:9d:21:47:49:84:4a:20:c0:d7:46:6b:3e:
a7:98:84:33:68:21:e1:50:fe:e0:c4:cd:0b:9b:a7:e4:96:54:
33:9a:af:53:3c:53:f5:26:95:1a:8c:9e:c8:54:c4:33:b1:55:
2a:b0:56:1a:e7:6c:60:27:05:4b:b9:3d:83:0c:08:73:e8:8d:
2e:d8:20:ba:57:77:8b:fe:b0:ad:e6:b1:f7:01:81:02:36:5e:
6a:90:60:5c:e7:ab:5a:c6:a8:9b:0a:6d:4a:e0:26:48:b4:91:
46:b8:3a:6f:81:85:50:1c:93:69:75:44:1f:4c:4f:3f:28:2d:
40:18:d5:e2:8e:50:51:40:5b:d7:65:c3:82:6a:b0:58:0a:80:
c7:da:49:dd:69:87:1e:2d:01:4a:76:5e:68:8b:c8:08:bf:2d:
29:20:70:7f:61:d8:04:d8:85:98:2a:90:23:1e:43:8f:30:3f:
31:fd:06:bc:75:0f:aa:9f:1c:c0:fb:db:d0:3a:fd:12:49:09:
47:dc:4d:82:6a:89:07:42:a3:c0:59:d1:13:9f:7e:a5:fe:c3:
05:4e:4b:9d:29:02:40:38:5b:d9:b4:ad:e2:0c:eb:8b:8b:65:
08:44:03:51:8d:bd:56:19:ac:bc:dc:8f:58:20:66:d7:9c:6a:
b7:e7:20:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ2ODQxMTAvBgNVBAUTKEYxRTUwMTYzQUM1MDZBNjJDQ0ZCNUE4QUY1NjUxMUMz
OEYxNTA0MTQwHhcNMjYwMzI1MDYzNDE4WhcNMjYwNDAxMDYzNDE4WjAYMRYwFAYD
VQQDEw02OWMzODFlYi1kYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiPMoPiMX7KYlQolSg1YeYUYzG8nZECn6Kgli4WrOQnpC2G+8eH9IFLx61zV0
BdIAvC0NvSPfx+yhAuwSJ/IqqIjGCA2wCDzDkqocDWRdF9OkzPEwwp4OIgAyFhw6
ahLej4jppIdkb6tky8HRI+Ud7L5dFQ3WUpKTtMHakGlZkBnZcky1ARJAx9u1PSPF
AIK4Y65EYRqTD8rlZzY24qX6DX0djV5CuThvUYDyvwSOwbk2pktxrJ1jI3LDRTrO
2IIyUAZl84uOoEZu+vpvqAK0nUwJzipCjOfB/i/4fHi5A7jH76EhpV2A4H2GwGg4
K09sklB2FmDFT/OxZ6UMBC2ViQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkAX3vL
OS2Bh/ZILm/KnAkrkJGpMB8GA1UdIwQYMBaAFPHlAWOsUGpizPtaivVlEcOPFQQU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDY4NC9CNkJBMDEyQzM5
ODYxMUYwQUNDNTU5MTRDNEY5QUUwMi84ZVVCWTZ4UWFtTE0tMXFLOVdVUnc0OFZC
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDY4NC9CNkJBMDEyQzM5ODYxMUYwQUNDNTU5MTRDNEY5QUUwMi84ZVVCWTZ4UWFt
TE0tMXFLOVdVUnc0OFZCQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlxWw3yecnSFHSYRKIMDXRms+p5iEM2gh4VD+4MTNC5un5JZUM5qvUzxT9SaV
GoyeyFTEM7FVKrBWGudsYCcFS7k9gwwIc+iNLtgguld3i/6wreax9wGBAjZeapBg
XOerWsaomwptSuAmSLSRRrg6b4GFUByTaXVEH0xPPygtQBjV4o5QUUBb12XDgmqw
WAqAx9pJ3WmHHi0BSnZeaIvICL8tKSBwf2HYBNiFmCqQIx5DjzA/Mf0GvHUPqp8c
wPvb0Dr9EkkJR9xNgmqJB0KjwFnRE59+pf7DBU5LnSkCQDhb2bSt4gzri4tlCEQD
UY29VhmsvNyPWCBm15xqt+cgiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:34 2026 by rpki-client