
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier: o3Ep/AyevmcL9n2GgRC6qAOZvJ03FHruCIivEDk/m6U=
Subject key identifier: B8:F0:D9:C5:EE:7C:E9:1C:57:98:05:0B:3D:2B:B9:5C:83:1D:25:89
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number: 0102
Signing time: Wed 25 Mar 2026 05:22:15 +0000
Manifest this update: Wed 25 Mar 2026 05:22:15 +0000
Manifest next update: Wed 01 Apr 2026 05:22:15 +0000
Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: QDMO/4A0Jri7/ErDu3HT5tF+imbt5RsqEmO2GwoJtBc=)
2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: T1zCfhDV1GULebI1Zrd7vcq1PSLqbmhv8BwiI/PVCOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Validity
Not Before: Mar 25 05:22:15 2026 GMT
Not After : Apr 1 05:22:15 2026 GMT
Subject: CN=69c37107-105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:1e:5c:92:5f:60:99:09:41:25:02:76:5f:
32:e6:16:22:4a:e2:8d:43:4c:4e:cd:91:c0:63:93:
ba:4a:28:3a:75:ec:0b:86:5c:82:6a:3a:5c:72:73:
d5:25:bd:f0:84:d3:6d:f3:25:dd:90:84:1b:4e:4a:
92:85:54:d2:51:cd:f8:08:a2:fd:3a:79:9e:b7:b6:
71:25:30:0d:3e:5c:e4:01:02:3d:04:81:ff:8b:96:
55:8d:16:c4:4f:c3:31:d0:90:65:02:72:1a:60:c8:
fb:7c:59:e7:b1:4c:65:48:04:ae:32:c5:29:a0:97:
ba:dd:f3:bc:4b:b2:fe:8e:f8:6f:45:1a:02:52:be:
40:bb:d5:b3:d2:dc:9d:39:4c:5c:f8:93:30:95:77:
85:b9:9b:94:9e:12:84:5f:0b:b0:fa:83:86:b7:0a:
91:43:14:eb:7a:58:6b:04:7b:88:64:3c:ab:e9:0a:
90:24:07:ad:41:7c:35:a6:b4:a2:c3:90:b0:d3:aa:
d5:0e:34:f7:bf:3d:ad:a1:70:6e:00:13:e8:6a:75:
45:ce:64:3d:6b:9a:84:aa:2d:41:40:be:27:87:5f:
3e:57:6f:d0:c2:11:37:b4:53:ff:af:e5:94:17:de:
a2:df:a5:df:a0:6d:ba:e0:a5:23:73:f1:7f:c0:b0:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F0:D9:C5:EE:7C:E9:1C:57:98:05:0B:3D:2B:B9:5C:83:1D:25:89
X509v3 Authority Key Identifier:
keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:5d:f7:4e:91:ea:f7:54:38:25:6c:e2:3e:51:50:e9:eb:
8a:89:79:f5:00:c1:61:77:23:32:4a:cf:e7:ee:7e:f7:ce:a8:
a6:f8:2f:67:80:6d:83:dc:2f:e6:52:a0:7f:59:d8:2f:3f:fe:
5a:3b:e8:bd:12:07:57:03:4e:ca:72:ca:50:57:6b:31:ac:9b:
04:1a:ba:11:11:c8:a0:ba:24:1d:5d:7c:6a:41:a2:40:90:ad:
85:93:0b:2b:f7:68:de:be:2d:58:44:a6:ef:b3:ee:f1:6e:e3:
dc:4b:dc:f0:71:ca:5b:6a:57:26:77:32:2f:dc:5a:67:da:1e:
5d:62:98:ee:59:06:b7:23:6f:bd:e8:15:90:a6:85:ef:41:3f:
e9:25:1b:51:35:e2:cc:b5:2d:d1:fe:bd:5a:1d:a7:45:3a:46:
82:ed:f1:97:62:66:76:28:bf:10:3d:6e:db:e9:8a:30:c1:9f:
ed:7d:4e:07:5a:c3:ca:f9:9b:c2:c4:73:ae:02:a9:59:ee:75:
e9:8d:79:84:08:5e:7f:86:c7:05:6a:0b:bd:37:16:f6:24:2b:
14:7b:55:87:b5:e9:3c:c1:6e:c4:81:df:c2:6b:0e:58:63:a2:
b5:27:a8:e8:1e:15:1b:ae:c1:98:a0:43:2f:85:d6:37:ed:cd:
ca:78:da:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1RDkxMTAvBgNVBAUTKEYyNkE4MTAxOTE2OTUyRkIyMEJFMDFFOEZDN0M5MEVE
QzlFRTlGNzgwHhcNMjYwMzI1MDUyMjE1WhcNMjYwNDAxMDUyMjE1WjAYMRYwFAYD
VQQDEw02OWMzNzEwNy0xMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntAeXJJfYJkJQSUCdl8y5hYiSuKNQ0xOzZHAY5O6Sig6dewLhlyCajpccnPV
Jb3whNNt8yXdkIQbTkqShVTSUc34CKL9Onmet7ZxJTANPlzkAQI9BIH/i5ZVjRbE
T8Mx0JBlAnIaYMj7fFnnsUxlSASuMsUpoJe63fO8S7L+jvhvRRoCUr5Au9Wz0tyd
OUxc+JMwlXeFuZuUnhKEXwuw+oOGtwqRQxTrelhrBHuIZDyr6QqQJAetQXw1prSi
w5Cw06rVDjT3vz2toXBuABPoanVFzmQ9a5qEqi1BQL4nh18+V2/QwhE3tFP/r+WU
F96i36XfoG264KUjc/F/wLCYbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjw2cXu
fOkcV5gFCz0ruVyDHSWJMB8GA1UdIwQYMBaAFPJqgQGRaVL7IL4B6Px8kO3J7p94
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DRDU0RDczOEEy
ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2c2d2Z0hvX0h5UTdjbnVu
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhtcUJBWkZwVXZzZ3ZnSG9fSHlRN2NudW4zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTVEOS9DRDU0RDczOEEyODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2
c2d2Z0hvX0h5UTdjbnVuM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAonRd906R6vdUOCVs4j5RUOnriol59QDBYXcjMkrP5+5+986opvgvZ4Btg9wv
5lKgf1nYLz/+WjvovRIHVwNOynLKUFdrMaybBBq6ERHIoLokHV18akGiQJCthZML
K/do3r4tWESm77Pu8W7j3Evc8HHKW2pXJncyL9xaZ9oeXWKY7lkGtyNvvegVkKaF
70E/6SUbUTXizLUt0f69Wh2nRTpGgu3xl2Jmdii/ED1u2+mKMMGf7X1OB1rDyvmb
wsRzrgKpWe516Y15hAhef4bHBWoLvTcW9iQrFHtVh7XpPMFuxIHfwmsOWGOitSeo
6B4VG67BmKBDL4XWN+3NynjaFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:49 2026 by rpki-client