
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
File: 83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json)
Hash identifier: AIl8xZUV3uCCuAdPgrIA57KdrVr82e8k+S8a1374v6Y=
Subject key identifier: 7A:CC:E1:A7:E6:42:68:79:72:50:29:FE:4E:D1:84:8A:41:B8:04:6C
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Certificate issuer: /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
Manifest number: D8
Signing time: Wed 25 Mar 2026 05:55:58 +0000
Manifest this update: Wed 25 Mar 2026 05:55:58 +0000
Manifest next update: Wed 01 Apr 2026 05:55:58 +0000
Files and hashes: 1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: LEVTrfdxmyC+t58QLpBszN8UnGj0YopsyApHO2UhLEE=)
2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: hDpWfk2oDepevCOOT5MXSbWRVa0BBv9T+rrhb2S1tV4=)
3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: U5XpQ0ehMGdgmuN8+HXp5RjG+d9wkF5svI623aYi6Vk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Validity
Not Before: Mar 25 05:55:58 2026 GMT
Not After : Apr 1 05:55:58 2026 GMT
Subject: CN=69c378ee-910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:fc:e7:78:b6:74:e9:91:75:ad:16:d7:38:
9c:d9:7d:62:e7:05:9b:43:31:ac:0f:f3:fd:33:89:
d7:0e:89:0b:32:57:c2:5e:99:b0:17:8f:6f:83:d2:
d4:98:de:f1:6d:7d:9b:37:fe:92:c7:36:c5:37:4e:
2b:3a:a2:4f:e8:e3:be:51:11:a0:3c:f8:b3:b4:23:
4d:eb:d7:f8:31:80:68:08:10:d7:47:6d:9b:b7:a5:
9f:80:8c:cc:f9:db:60:23:36:be:90:58:2c:44:8d:
d8:88:98:bf:dd:29:33:84:e1:a1:cf:9c:88:9f:a7:
39:29:1e:df:2a:69:35:85:98:d6:92:f4:0a:3d:a7:
e0:95:89:db:66:85:45:6a:59:aa:e4:b6:17:fe:67:
46:99:bf:cd:bc:06:75:7a:cd:34:d6:eb:d7:cd:22:
24:85:17:83:71:ef:ad:51:f2:9e:60:2c:e8:c1:cc:
5a:57:0f:71:97:14:1a:1a:f2:64:bc:4c:42:09:65:
c3:d3:00:5e:11:64:06:22:ae:b4:39:41:3b:c7:1e:
6c:8d:5f:d0:20:11:ae:22:a3:47:08:e3:99:61:fb:
ff:0e:45:cc:24:85:0e:6b:71:91:90:bd:fd:61:28:
57:72:a7:68:5e:b7:28:8f:4d:b1:8b:92:c2:35:bf:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:E1:A7:E6:42:68:79:72:50:29:FE:4E:D1:84:8A:41:B8:04:6C
X509v3 Authority Key Identifier:
keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c1:60:8b:f2:a8:c6:36:44:47:d2:09:67:a9:a2:8e:55:4d:
29:5b:c1:e2:67:18:6c:18:7b:b2:6b:8c:6d:27:6e:c7:16:52:
e3:9b:75:49:1a:fc:b2:ad:a2:d0:26:af:0a:92:e4:15:4f:05:
46:08:8f:b6:58:c0:76:db:f8:5c:8e:f3:07:67:74:b1:cf:f1:
c9:c7:74:d9:b9:24:5f:4c:b7:03:6d:96:6f:f7:12:d4:f6:e8:
1e:5c:62:61:09:06:67:b0:b4:29:57:bf:98:9b:36:1d:d0:00:
05:88:42:e0:19:6b:b5:5b:92:d5:5c:11:0a:f4:86:48:c5:a0:
20:3e:63:e3:34:60:7f:76:f7:62:01:98:b1:64:0a:30:48:23:
83:a3:b3:9d:ee:40:50:07:a3:d1:d6:85:cc:aa:12:2f:13:3b:
96:16:0a:dc:46:b2:0d:c1:7d:66:a1:fb:64:5b:a5:42:90:96:
b3:d7:70:82:5a:69:1f:da:39:f6:29:c8:33:38:75:8b:5e:cc:
07:b4:d5:b5:04:07:52:32:ce:c2:95:ad:55:6d:6e:6e:15:10:
2d:e6:fb:4a:45:64:b9:88:40:f8:6e:8d:11:45:de:df:f7:f4:
8f:56:3d:27:06:6a:a0:06:d0:a5:95:eb:13:0b:dd:12:e4:3f:
05:c1:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:56 2026 by rpki-client