
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: QNxdN/dw77YkbJXeBsp8WHXHnh2rwgXJa+Vosp2Mp4E=
Subject key identifier: 27:58:F8:3E:83:A1:9B:94:0E:0E:74:4F:38:D4:97:38:B6:D5:E3:B8
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 044C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 05AA
Signing time: Fri 27 Mar 2026 00:00:35 +0000
Manifest this update: Fri 27 Mar 2026 00:00:35 +0000
Manifest next update: Fri 03 Apr 2026 00:00:35 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: Bpdx/mFOEwPYRqb3KBgggRQb+NYstbaqLwBMvjKwoQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Mar 27 00:00:35 2026 GMT
Not After : Apr 3 00:00:35 2026 GMT
Subject: CN=69c5c8a3-e11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:72:b4:b5:fe:43:18:fa:41:19:e2:31:d5:
07:28:4c:93:17:73:48:61:1d:a5:f2:a7:1d:3b:1f:
7a:88:6e:fc:5d:25:78:26:fc:38:61:75:fe:0e:6b:
35:ce:a7:8a:9a:49:24:b8:81:d7:31:e5:7d:f2:4e:
62:d3:8b:02:d4:39:9b:20:18:1f:57:4a:4b:20:3d:
c0:5b:9b:bf:8d:3b:c0:ed:7f:03:05:55:52:2f:19:
cb:70:1c:ef:5d:c2:00:5b:7f:5f:5b:02:77:ae:aa:
1e:fd:99:cd:0d:c7:ff:a0:20:3b:92:70:6c:f9:4c:
b6:d9:fe:6d:f3:07:19:99:31:0a:30:d4:bc:72:d8:
d5:ea:95:1a:a8:bd:11:7f:81:b9:ec:02:65:2c:6e:
24:40:f5:af:51:7f:74:4a:d2:d9:46:e5:43:f6:fe:
f6:f6:ab:b8:e7:04:53:60:5c:98:36:67:5d:bd:45:
65:c3:f8:af:1d:89:76:e0:a7:98:7d:76:78:f0:ad:
c6:a3:f7:1b:b3:3e:e4:33:b7:1d:0b:1f:45:95:87:
69:85:05:dc:d5:8b:93:77:31:2e:e1:ed:a6:35:91:
14:ea:a1:d7:b1:22:9d:1a:19:1a:dc:d7:76:49:70:
77:c0:57:43:49:dd:a7:99:20:be:2f:34:a8:c3:77:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:F8:3E:83:A1:9B:94:0E:0E:74:4F:38:D4:97:38:B6:D5:E3:B8
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:79:e5:b4:8e:cb:55:02:90:44:34:ca:6d:52:91:79:5f:63:
b9:47:31:8f:17:0a:d0:c8:4a:4f:6c:b9:eb:24:12:e3:5b:4d:
49:fe:84:2b:6f:91:db:f5:01:c5:86:92:6a:71:90:92:96:e0:
91:0b:f4:ee:9a:31:7c:f2:3e:79:52:bd:f8:55:4d:fa:7b:e5:
2e:69:49:fc:e9:af:8c:6d:56:a5:0d:12:ab:94:22:0d:d2:f5:
67:9d:84:58:8b:4e:c0:38:75:bc:80:15:65:66:ec:f9:76:75:
cf:8a:cf:5c:6a:e0:66:65:c9:ab:5f:21:8f:80:76:91:d8:7f:
b6:dc:6b:7f:79:65:2d:b9:55:62:03:e9:bc:6f:97:15:40:51:
36:f1:1a:ed:36:88:3b:a8:d3:47:34:7a:fe:b7:a0:e2:2f:58:
30:49:1d:c1:e3:ab:e4:f8:60:dd:3a:2c:cc:e5:bb:13:6c:67:
fb:49:d6:f0:7e:75:26:ff:73:85:65:fd:90:29:53:a3:81:27:
90:66:cb:f7:e6:3a:83:53:72:7d:6a:9c:ad:d4:ee:b7:ed:74:
0e:c4:a9:61:96:77:b0:db:c4:a5:4f:97:b3:e6:6e:04:fc:13:
50:8b:96:e6:13:8c:7e:06:4c:d2:20:6f:f7:43:90:67:cb:0e:
3f:d7:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:56 2026 by rpki-client