
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: Gl8V0OGL4hnzAbLzHG6xDnOOFItxUXz0afPqqafOn+8=
Subject key identifier: 76:22:57:2A:02:23:67:32:64:55:1B:D1:DF:9F:49:AC:09:E3:A4:58
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 0463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 05D8
Signing time: Mon 11 May 2026 00:13:21 +0000
Manifest this update: Mon 11 May 2026 00:13:20 +0000
Manifest next update: Mon 18 May 2026 00:13:20 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: dqORWRSwz/WM5VSDWZIOB9Pdxof7uaHc1ZYq+Oz3HBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: May 11 00:13:20 2026 GMT
Not After : May 18 00:13:20 2026 GMT
Subject: CN=6a011f21-2208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:97:8e:dc:35:85:12:f3:92:7f:cb:0b:2e:
8f:5b:e3:60:15:ad:be:fb:6c:87:46:26:2b:0d:9f:
2d:b0:2d:2b:37:d0:a4:ae:9d:d9:67:cc:73:e7:4e:
cf:e2:71:e4:05:d2:05:96:a9:ea:9b:bd:a2:5f:54:
db:92:5f:2b:b6:09:e8:80:47:7a:65:73:cc:f7:8c:
43:35:53:49:91:45:a7:72:c6:2f:5b:f2:d5:a9:32:
38:ef:b6:90:92:cd:92:a4:fd:5a:62:cf:25:2c:32:
8b:ca:52:3b:0f:22:e3:f8:34:61:23:f7:b6:b6:65:
f2:8d:e2:31:4f:d5:74:ea:73:32:6f:c8:3d:9b:d5:
d6:a4:31:a0:e6:63:ff:3f:25:c5:1a:69:08:fd:84:
4a:c5:59:96:e7:46:73:2e:b6:05:d9:ad:0f:be:ac:
df:67:b7:19:d8:2d:99:dd:2f:84:d6:d4:24:56:32:
9b:cb:3a:6f:24:0d:14:be:c5:d0:9a:68:60:2e:f2:
56:62:ca:ae:53:c1:d7:30:85:8d:57:7b:5c:b0:45:
5e:99:e5:9c:98:8a:f5:fe:f8:b3:8d:d6:6a:93:e2:
c5:2b:af:da:c5:ad:4c:eb:bc:b9:7e:19:94:28:cd:
ed:4b:e7:c1:4a:13:c1:1d:c5:1d:c3:69:91:ad:78:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:57:2A:02:23:67:32:64:55:1B:D1:DF:9F:49:AC:09:E3:A4:58
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a3:34:29:61:39:77:4f:4c:e9:8e:60:b6:63:48:f7:75:4e:
1c:50:0b:28:df:cf:96:0b:df:31:28:93:f4:a2:e2:f2:a7:98:
e3:e1:8b:cf:75:70:05:55:70:60:39:42:a0:f0:40:68:e0:ef:
3d:ad:a3:15:3d:ba:fa:cb:1b:ec:db:3e:f4:65:43:e7:bd:26:
14:02:b2:e6:c6:e4:0d:21:a0:dd:b3:d4:f6:d6:8b:5e:5c:c2:
81:66:c2:e5:50:13:48:81:1b:b9:3f:fe:62:6e:28:46:03:72:
9d:0e:9c:13:a6:15:e8:ff:24:20:db:22:a1:8b:c1:b6:c2:b3:
b5:62:0c:38:62:f2:30:08:33:28:73:a9:23:61:6d:86:ec:1e:
05:c2:b6:7e:9b:b0:44:a7:2a:b0:9c:a2:90:1c:6d:89:c2:0f:
d2:dc:d4:76:2e:03:96:9d:5d:09:b0:d9:45:b9:19:6a:88:1c:
1a:e7:b6:c5:ca:cf:2b:fe:e5:b3:25:99:d5:55:e9:e4:8f:af:
5e:10:8f:ad:21:7c:02:b4:c3:2a:00:8f:ee:fa:7a:37:3e:c9:
af:b2:c3:11:7e:64:35:ed:b0:a6:e2:49:ab:e7:5c:47:15:95:
e9:24:b2:fa:89:55:87:df:a1:23:ef:5d:bd:83:f2:b0:fd:0e:
aa:1a:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:46:57 2026 by rpki-client