
$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier: V5i7sr9gj6WN3X/7R3aT0Oc8k7fI+AMVn0wMCRM3NNI=
Subject key identifier: 0D:90:30:B6:DB:49:43:B5:72:39:21:0C:13:AA:8F:E4:EA:F7:2A:08
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial: 0A5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number: 0A54
Signing time: Tue 24 Mar 2026 19:26:07 +0000
Manifest this update: Tue 24 Mar 2026 19:26:06 +0000
Manifest next update: Tue 31 Mar 2026 19:26:06 +0000
Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: BBZvaIpmSfD7gNyJVidvvcAzni4xPbDZfYIfmLVmBx8=)
2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: i4ZxxqpQ+3zI5So5ObXBzu07nchHUX/1pbi3p0o+9eE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Validity
Not Before: Mar 24 19:26:06 2026 GMT
Not After : Mar 31 19:26:06 2026 GMT
Subject: CN=69c2e54e-6ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:1e:4b:d4:65:ad:84:57:fb:31:e5:f5:5b:
c7:22:9b:2d:cc:fe:b9:5a:3c:74:d2:3c:7e:da:bb:
15:42:34:29:d9:83:15:30:b4:c9:2b:34:d1:4c:dd:
6c:c6:02:a7:57:66:4a:79:4d:58:48:5d:a2:4b:ad:
ab:f4:78:36:32:e1:82:6d:59:9a:69:e2:fb:97:42:
82:5c:c7:30:89:5e:b0:a2:24:e6:54:44:3e:f2:74:
2e:f0:6a:55:21:9b:fa:a0:cf:70:23:6f:79:45:04:
ea:c3:be:12:63:99:99:4a:dc:fc:1c:2d:e1:54:95:
db:4c:c3:71:08:02:23:9e:05:02:9f:a2:b9:b9:93:
fe:ca:34:8c:69:e9:f0:98:c7:70:51:96:65:6a:1a:
97:19:a0:89:ac:c0:fc:42:9a:16:e0:c1:36:f5:4d:
33:f8:ac:3e:48:3a:ba:1a:75:a5:7a:0f:4d:97:cf:
5e:8b:36:4a:3c:63:4d:56:3b:c4:56:0d:a1:ea:fd:
08:26:35:13:8d:00:43:d9:98:a2:da:56:4e:b7:aa:
5a:ba:34:a7:52:74:45:17:df:37:66:fb:d2:1b:b2:
5a:bc:0a:9a:97:ba:4f:9c:70:a9:09:e2:5b:b8:e1:
d3:a3:31:c8:7e:af:59:53:cb:22:93:ea:3f:6d:5e:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:30:B6:DB:49:43:B5:72:39:21:0C:13:AA:8F:E4:EA:F7:2A:08
X509v3 Authority Key Identifier:
keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:40:13:ed:f4:8e:56:8f:28:0f:00:77:67:1b:cb:04:22:49:
b5:56:4d:ea:74:9b:5e:62:f8:c3:bb:a6:7a:82:e8:e7:4c:d3:
65:26:39:0b:6a:67:e0:87:ec:2c:18:1d:a4:1c:1d:10:ce:8d:
63:eb:69:ab:61:f3:04:0a:1a:b3:8e:86:a2:31:87:33:14:63:
8e:80:bb:68:47:db:fc:8c:44:1a:13:c7:ee:8a:b6:23:d6:3b:
95:7f:b5:03:63:f2:21:4e:d8:e3:40:6d:0b:f5:6c:86:5b:47:
42:d7:e5:a4:24:a4:50:10:3f:00:37:60:b4:46:b2:69:63:36:
c9:a7:b9:72:cc:9b:d6:5a:07:fc:35:38:a7:87:d1:30:1b:57:
ef:22:fc:24:61:80:d8:82:4c:55:b0:43:15:83:55:18:c9:2e:
87:fb:62:6a:33:ed:08:1f:02:86:f9:bd:0b:96:ed:92:fe:24:
9c:4a:6b:31:90:68:f0:4f:b8:c1:37:0d:db:16:a9:96:00:47:
84:e8:10:a3:57:9f:1c:b9:4a:63:58:4b:16:e6:df:67:84:88:
bb:29:e0:9f:12:22:35:f7:fc:3c:97:41:55:cb:32:13:51:8a:
72:13:fa:39:57:70:39:88:db:1a:6d:64:7f:be:e9:18:f0:70:
4e:80:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:56 2026 by rpki-client