
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json)
Hash identifier: HHd98Ul0IZOUS7X9BqpFrD/oDV0cFHhcQsaZN3JfKBY=
Subject key identifier: 82:1D:51:66:34:91:5F:0F:68:5B:19:CB:EF:0C:4F:C2:85:0F:64:DF
Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
Manifest number: 0209
Signing time: Wed 25 Mar 2026 02:22:22 +0000
Manifest this update: Wed 25 Mar 2026 02:22:22 +0000
Manifest next update: Wed 01 Apr 2026 02:22:22 +0000
Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: 9qXrglCLxsjo8jnBjSwD2rorkXCQb4K+uRfgDnmm+yk=)
2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /W0g7wRAuyXEotKxsKGa14VaFaP0rEyXWp6ttAdlMsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Validity
Not Before: Mar 25 02:22:22 2026 GMT
Not After : Apr 1 02:22:22 2026 GMT
Subject: CN=69c346de-54b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:da:c1:21:34:71:d1:e8:26:be:a6:90:d5:
8d:e4:44:50:90:20:1a:57:37:5e:cb:83:70:15:f7:
dc:08:ef:45:8b:86:69:aa:ae:1a:6e:ee:e1:32:3f:
d5:8f:7b:73:1e:72:4e:8c:4c:42:6f:da:5c:d1:1f:
8c:a5:dc:fd:f1:24:fc:48:71:f7:82:40:5a:bd:a3:
7a:de:d5:c6:94:93:1c:97:16:46:25:fa:78:63:39:
a3:27:00:3a:47:5a:31:71:99:5d:9e:40:3a:31:e5:
a5:17:77:f8:fc:fd:90:8d:9b:6a:13:c1:3c:5a:55:
d9:1a:9f:55:f0:b6:bd:7f:a3:16:67:c1:b7:89:1a:
09:54:ab:86:c0:db:1f:08:de:47:f3:3a:35:dd:90:
b0:94:2b:bf:2d:46:de:88:c0:7a:59:67:d4:64:62:
8d:65:35:37:c3:41:ae:f3:c9:14:5b:ac:0a:1b:22:
ad:70:f8:4d:65:9d:f0:ec:3e:cb:fc:00:4e:72:75:
05:5c:b5:0b:04:47:90:f8:a8:46:fe:d8:4a:9d:be:
3f:5f:44:0e:f9:95:a6:94:11:a1:19:97:39:ae:c0:
8f:aa:f3:19:22:50:56:55:6e:65:79:c6:03:88:80:
c7:e7:e2:86:a2:d5:da:23:08:0c:26:0a:4c:26:e4:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1D:51:66:34:91:5F:0F:68:5B:19:CB:EF:0C:4F:C2:85:0F:64:DF
X509v3 Authority Key Identifier:
keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2f:b0:58:31:e8:bf:0b:26:67:57:42:de:dc:e3:2a:ec:e2:
3a:7a:48:37:3b:93:01:d3:77:89:04:cc:ab:9c:d7:41:3c:df:
24:c4:dc:fc:b0:d8:18:2e:f2:51:f1:3d:06:43:a4:2b:4b:f8:
bb:45:a8:25:92:d3:95:c9:55:02:d8:84:36:34:1e:b5:3e:b2:
da:a0:98:12:20:7f:2f:04:5f:55:20:86:86:3a:97:b8:20:e2:
fa:e3:b7:5c:b0:8c:28:d8:fd:fd:50:dd:b4:0f:39:f6:54:24:
25:08:7f:b2:d1:68:fb:e3:b1:f7:45:5c:d5:9a:62:5f:29:69:
ee:00:4f:9d:88:8a:8c:5f:63:12:31:47:70:8b:cd:e6:fd:7a:
c4:eb:f1:5f:f7:f4:b6:cd:9a:5c:e4:b3:c6:10:f3:b0:b9:57:
1d:13:97:12:19:26:7f:0a:43:8f:2f:a0:af:3b:5f:e8:6b:be:
a2:af:bd:26:0b:e7:11:70:ce:b0:f3:c6:da:f4:8b:20:2b:99:
92:8b:6c:db:11:72:8c:93:5a:70:24:f5:78:be:f6:80:74:e9:
cd:99:f6:8e:ce:d6:a1:6d:2f:20:80:52:af:17:ce:e9:be:68:
81:d4:0d:af:92:00:12:96:bb:db:b0:bc:e9:c8:21:e3:ec:45:
84:59:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:25 2026 by rpki-client