
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json)
Hash identifier: bbAn82oIgYDp8QGBXBG+htmGmyGUj+iiWhVDKSi4FLo=
Subject key identifier: D9:2D:CD:A3:56:20:DC:72:3F:0B:8E:43:FD:DE:0A:45:4F:AB:93:03
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial: 084E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
Manifest number: 08CB
Signing time: Tue 24 Mar 2026 20:35:04 +0000
Manifest this update: Tue 24 Mar 2026 20:35:04 +0000
Manifest next update: Tue 31 Mar 2026 20:35:04 +0000
Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: kAqFrRpPX8KvGA5DmWCkjCmNjWwCy/bb8BtUMaAsOUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Validity
Not Before: Mar 24 20:35:04 2026 GMT
Not After : Mar 31 20:35:04 2026 GMT
Subject: CN=69c2f578-e5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:9b:3e:b2:98:c9:a6:5f:54:97:df:35:45:
96:5a:6f:f7:a8:8b:f9:35:e5:bd:0a:8d:f8:66:d3:
61:80:97:4e:7c:ec:a3:4c:2d:cd:4e:21:5e:ee:c2:
00:1a:75:c2:80:b8:0d:ee:6f:0a:f6:8c:0e:7d:d4:
76:0e:70:73:53:97:db:2b:58:8a:c9:df:29:33:a2:
1d:ae:d7:c1:0a:55:75:42:cf:9e:46:df:42:e2:45:
d7:73:1e:63:fa:34:fc:b9:29:ac:69:95:6f:20:cb:
32:a7:cd:b1:b8:3a:54:f3:5b:13:41:71:e2:2f:f3:
3c:a7:87:68:96:ca:95:a6:22:ba:d4:dc:8a:9e:c8:
8c:3d:c5:43:50:4f:8d:22:3e:d8:56:04:d8:7f:71:
35:39:b3:ec:27:0d:4e:53:57:eb:82:0e:94:7d:5b:
b7:86:ba:2b:01:a0:cf:04:f9:d7:2e:65:2f:69:8b:
85:80:24:d9:23:7d:d1:f2:69:c1:6d:e2:b8:fa:52:
37:ab:9a:0c:1f:20:64:02:7c:a1:8e:05:27:34:9e:
e2:0c:5a:e2:da:db:a2:ef:17:19:de:5b:65:a1:c7:
20:b7:52:17:cd:4a:00:ba:78:fd:2c:60:2d:c9:12:
05:83:ae:7c:3d:ae:a7:48:21:4f:0f:c3:1e:02:f4:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2D:CD:A3:56:20:DC:72:3F:0B:8E:43:FD:DE:0A:45:4F:AB:93:03
X509v3 Authority Key Identifier:
keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:22:6c:15:7d:98:cd:7c:83:b3:3a:c1:59:1a:de:c0:9c:
87:a3:ef:40:10:51:d2:fb:de:35:a8:41:50:25:e7:96:90:06:
3f:d8:73:4a:a6:00:76:d4:2f:6d:85:69:83:ee:1d:71:3e:16:
f9:8a:7f:49:38:0c:6d:95:11:46:82:1f:8c:45:31:f0:76:a4:
4d:a3:50:9c:eb:03:5d:77:5c:0e:eb:7c:a7:3e:aa:75:13:f6:
d5:24:32:14:1f:bf:3a:b7:31:6b:38:e2:82:d5:16:39:32:47:
88:b5:c2:80:c5:8c:39:c0:bb:c7:69:8c:a8:64:ae:72:c6:d9:
5a:54:cd:8e:d9:81:66:a2:31:19:aa:82:b1:fd:23:14:9c:e3:
4e:31:58:ee:eb:a1:4a:d3:d1:74:7b:01:e5:1c:9d:38:5f:3c:
2e:74:ab:15:25:05:3a:1f:1d:50:74:e4:f9:7c:f2:36:20:0f:
ba:37:71:d7:37:01:38:0b:00:5a:e4:60:12:be:89:32:fa:3e:
10:10:a1:be:35:96:1d:50:54:c1:31:88:d3:dc:9c:f7:24:97:
ed:c2:d7:23:e7:83:74:80:91:a9:aa:63:f2:d6:5f:fb:6d:3c:
8a:66:e8:b5:14:25:dd:50:b8:33:b9:de:30:79:c3:9a:b3:85:
2a:ce:e0:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE
M0ZDOTM3NEIwHhcNMjYwMzI0MjAzNTA0WhcNMjYwMzMxMjAzNTA0WjAYMRYwFAYD
VQQDEw02OWMyZjU3OC1lNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk3ibPrKYyaZfVJffNUWWWm/3qIv5NeW9Co34ZtNhgJdOfOyjTC3NTiFe7sIA
GnXCgLgN7m8K9owOfdR2DnBzU5fbK1iKyd8pM6IdrtfBClV1Qs+eRt9C4kXXcx5j
+jT8uSmsaZVvIMsyp82xuDpU81sTQXHiL/M8p4dolsqVpiK61NyKnsiMPcVDUE+N
Ij7YVgTYf3E1ObPsJw1OU1frgg6UfVu3hrorAaDPBPnXLmUvaYuFgCTZI33R8mnB
beK4+lI3q5oMHyBkAnyhjgUnNJ7iDFri2tui7xcZ3ltloccgt1IXzUoAunj9LGAt
yRIFg658Pa6nSCFPD8MeAvSuzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNktzaNW
INxyPwuOQ/3eCkVPq5MDMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy
NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY
Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYfAibBV9mM18g7M6wVka3sCch6PvQBBR0vveNahBUCXnlpAGP9hzSqYAdtQv
bYVpg+4dcT4W+Yp/STgMbZURRoIfjEUx8HakTaNQnOsDXXdcDut8pz6qdRP21SQy
FB+/OrcxazjigtUWOTJHiLXCgMWMOcC7x2mMqGSucsbZWlTNjtmBZqIxGaqCsf0j
FJzjTjFY7uuhStPRdHsB5RydOF88LnSrFSUFOh8dUHTk+XzyNiAPujdx1zcBOAsA
WuRgEr6JMvo+EBChvjWWHVBUwTGI09yc9ySX7cLXI+eDdICRqapj8tZf+208imbo
tRQl3VC4M7neMHnDmrOFKs7gog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:37 2026 by rpki-client