
$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json)
Hash identifier: 9sjt85jgBqcvS6e+1yRgvIiueeqH2rKGA3YBKdJfk/0=
Subject key identifier: A9:6D:73:FA:86:3B:4B:B6:B7:96:EF:FE:21:06:0C:53:75:8F:92:E1
Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Certificate serial: 0744
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
Manifest number: 073B
Signing time: Thu 26 Mar 2026 21:37:35 +0000
Manifest this update: Thu 26 Mar 2026 21:37:34 +0000
Manifest next update: Thu 02 Apr 2026 21:37:34 +0000
Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: jGUzWM/EcJ1R1dKN9XqJozdTq60dI/JtFU+lY1RBHgA=)
2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: te1kdq92VgFygTtdop1iQjv7JxZOQ/Lth61MfMSAoiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Validity
Not Before: Mar 26 21:37:34 2026 GMT
Not After : Apr 2 21:37:34 2026 GMT
Subject: CN=69c5a71f-6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:c5:f4:cc:2b:99:e7:9a:41:46:ce:e6:c0:
9b:cc:13:7c:43:37:01:1e:4c:56:b4:f7:f9:c9:83:
34:1b:7c:89:25:f4:c4:41:c1:d9:2d:c8:c1:68:5b:
68:ff:a4:33:4e:54:11:1f:53:c1:86:a1:18:77:76:
db:4d:e1:b8:bc:e2:2f:61:8d:64:37:56:b9:46:d2:
1a:ab:5a:6d:5c:35:d0:b7:e7:1a:c6:98:14:81:91:
65:a9:a7:ec:65:93:f6:46:bd:14:f5:d1:91:80:a5:
67:8a:c1:96:2f:e1:e7:2c:00:e6:42:36:91:23:44:
6d:57:6b:79:47:e3:88:39:64:74:0b:4e:59:04:ad:
dc:bb:2f:4c:0a:38:ca:82:98:2c:18:a0:04:ca:84:
06:b4:65:fe:29:30:05:30:c0:6a:7c:38:2e:ca:14:
ee:d7:5f:f7:df:ee:0f:5f:04:79:bf:db:99:97:cb:
93:8d:71:b9:04:93:21:f9:aa:e3:32:2a:71:57:74:
12:1f:89:17:40:5e:4b:e6:eb:c9:45:a3:6a:a8:b0:
d3:4e:17:4e:64:fa:bd:3a:f5:68:26:28:9c:26:50:
a7:a6:0d:7b:a3:a4:bf:5b:b6:74:0f:19:8f:6a:23:
b1:9b:cf:12:09:9b:b0:a7:ef:75:66:17:0e:19:7c:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6D:73:FA:86:3B:4B:B6:B7:96:EF:FE:21:06:0C:53:75:8F:92:E1
X509v3 Authority Key Identifier:
keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c9:4e:67:08:85:43:e6:8b:ff:73:55:db:94:15:14:b1:f3:
f7:e8:7d:cd:06:fe:ce:ad:6e:a3:01:7c:39:eb:3b:fc:94:d8:
65:4f:1f:c6:33:50:54:ce:5f:d1:d3:f9:92:7c:b4:ba:59:5d:
c7:2b:6d:fb:d4:f3:98:36:43:1e:ff:9f:e1:56:95:3b:29:3a:
96:8d:ae:f3:4d:57:08:75:0f:5a:9a:01:cb:81:29:e2:17:f8:
0b:5b:57:2f:c5:a2:da:13:1a:7b:51:b3:e1:e4:59:04:a4:f3:
08:43:7b:1f:b5:03:db:b2:9e:fc:12:ff:75:bc:4b:3e:35:d2:
03:b2:22:83:fe:d0:47:01:1c:bd:c7:8f:f8:98:7d:8e:58:06:
d4:4e:c2:45:13:6d:5d:7c:08:89:94:27:f2:88:f7:32:d7:f7:
08:a1:34:af:dd:b7:5c:ca:64:bd:0d:7b:7d:f4:2c:d7:92:22:
59:c1:d8:73:06:44:0e:e8:5b:66:16:79:d8:06:c4:23:6f:40:
c4:91:bd:94:97:d8:ce:2e:8b:4d:86:c4:da:af:78:2f:bf:52:
8b:0a:29:ce:f5:5c:39:02:c2:19:c8:32:65:ce:fc:fc:94:a3:
e8:3e:11:bf:17:f4:5a:ce:32:91:54:11:5d:72:75:f8:b3:35:
85:e7:a2:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4
QzRCNTlFMTIwHhcNMjYwMzI2MjEzNzM0WhcNMjYwNDAyMjEzNzM0WjAYMRYwFAYD
VQQDEw02OWM1YTcxZi02ZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkW7F9MwrmeeaQUbO5sCbzBN8QzcBHkxWtPf5yYM0G3yJJfTEQcHZLcjBaFto
/6QzTlQRH1PBhqEYd3bbTeG4vOIvYY1kN1a5RtIaq1ptXDXQt+caxpgUgZFlqafs
ZZP2Rr0U9dGRgKVnisGWL+HnLADmQjaRI0RtV2t5R+OIOWR0C05ZBK3cuy9MCjjK
gpgsGKAEyoQGtGX+KTAFMMBqfDguyhTu11/33+4PXwR5v9uZl8uTjXG5BJMh+arj
MipxV3QSH4kXQF5L5uvJRaNqqLDTThdOZPq9OvVoJiicJlCnpg17o6S/W7Z0DxmP
aiOxm88SCZuwp+91ZhcOGXz2PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKltc/qG
O0u2t5bv/iEGDFN1j5LhMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC
OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz
eGVkLUhiajdhaldNUzFuaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO8lOZwiFQ+aL/3NV25QVFLHz9+h9zQb+zq1uowF8Oes7/JTYZU8fxjNQVM5f
0dP5kny0ulldxytt+9TzmDZDHv+f4VaVOyk6lo2u801XCHUPWpoBy4Ep4hf4C1tX
L8Wi2hMae1Gz4eRZBKTzCEN7H7UD27Ke/BL/dbxLPjXSA7Iig/7QRwEcvceP+Jh9
jlgG1E7CRRNtXXwIiZQn8oj3Mtf3CKE0r923XMpkvQ17ffQs15IiWcHYcwZEDuhb
ZhZ52AbEI29AxJG9lJfYzi6LTYbE2q94L79SiwopzvVcOQLCGcgyZc78/JSj6D4R
vxf0Ws4ykVQRXXJ1+LM1heei6w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:24 2026 by rpki-client