
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json)
Hash identifier: KADeSVoWvLVF6YO9xQpXEm7cLTCbI3n62kE6Gxhqoqo=
Subject key identifier: CA:EF:2B:26:22:11:DF:02:64:BF:CA:B3:AA:F4:68:8E:49:E9:5D:06
Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C
Certificate serial: 0B20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
Manifest number: 1561
Signing time: Tue 12 May 2026 19:21:15 +0000
Manifest this update: Tue 12 May 2026 19:21:15 +0000
Manifest next update: Tue 19 May 2026 19:21:15 +0000
Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: Mkq2GpTkZhWgmn/mxRoMNKoUe+oBSmKYoQYdVQDQ91I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl
rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2848 (0xb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C
Validity
Not Before: May 12 19:21:15 2026 GMT
Not After : May 19 19:21:15 2026 GMT
Subject: CN=6a037dab-8577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:51:9d:4b:4d:c8:d5:e2:e2:be:39:c6:3a:
f8:3f:7d:58:df:22:5a:f3:74:be:66:1f:e1:91:5a:
c2:e8:fd:99:ea:cc:9b:15:77:90:90:52:3c:db:a8:
de:e6:fc:d0:a3:3f:a1:9c:7d:bf:99:5c:43:dc:b2:
43:33:c7:1c:07:7b:90:a2:af:05:2b:cd:39:9c:b2:
f7:4d:6d:b5:70:e8:cd:06:ac:69:77:eb:1a:94:3e:
66:4a:a2:3c:8c:0b:8a:fa:3d:7b:5e:31:75:60:18:
1f:0d:0b:c1:0c:ed:0c:ee:9b:5f:e2:bd:3a:a0:cf:
c6:36:61:43:17:8b:78:99:cf:15:3b:bb:9d:e7:b7:
c6:19:69:9a:9c:0b:82:28:70:00:4a:62:51:e0:3a:
29:5e:34:b0:d1:00:58:2f:d3:2a:78:46:04:d6:fc:
f9:e1:4b:06:08:7d:58:82:09:0b:a3:cc:ed:bc:a8:
e1:e2:b8:4c:0d:7c:cc:e9:3d:d3:15:95:be:b7:8a:
4a:c4:0b:9d:f4:ee:f9:77:5e:b7:04:cc:33:52:7b:
84:72:94:69:32:1b:cc:00:b3:62:79:f9:2a:ab:c7:
79:29:e7:01:25:0d:ce:d0:46:15:8c:e2:59:ce:0e:
6b:7a:a6:95:f0:3f:4d:e4:6b:5e:2d:89:13:60:70:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:2B:26:22:11:DF:02:64:BF:CA:B3:AA:F4:68:8E:49:E9:5D:06
X509v3 Authority Key Identifier:
keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:84:d3:30:08:c5:cb:51:0c:74:14:be:df:8d:38:7a:56:bb:
da:a6:b0:6d:01:92:3f:22:fa:5b:15:98:fb:e1:4a:bf:06:f6:
88:7b:bc:00:4a:0c:b3:59:6c:21:41:06:7c:c4:77:52:eb:f2:
f2:18:57:7d:b1:d8:80:21:07:3f:ac:84:a8:58:41:d8:67:ef:
0f:7c:6a:3c:66:0b:14:0f:9f:07:69:38:89:a1:59:2e:eb:3f:
2a:51:c5:c5:13:0c:37:8a:ef:d7:eb:43:42:2f:97:5e:3e:e7:
54:61:71:d5:e9:3a:92:1b:2a:6f:5b:07:01:69:3b:ed:d6:67:
9a:1d:55:7c:c5:25:dc:60:4b:78:b3:94:ff:91:e7:6b:1f:d7:
c1:2e:8a:b0:4f:42:3b:af:74:fe:c7:2c:22:aa:ac:0a:e8:15:
25:c2:97:4b:dd:bf:72:f0:ae:c3:fe:bb:72:3e:c2:10:d9:ae:
b0:08:28:ad:7a:02:3a:31:30:87:16:85:be:ab:28:f0:e5:ef:
ee:e9:3c:f7:9b:e0:c4:5d:f2:65:d2:f2:e2:78:87:63:a6:7d:
3c:1b:98:21:1b:2f:8d:4f:c1:ba:0d:65:fc:e3:4b:e2:f7:76:
96:e6:93:f2:4b:48:f3:4f:88:c4:e9:55:20:c4:59:57:30:1b:
7d:5e:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:51 2026 by rpki-client