
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json)
Hash identifier: dsrxweW76qgrBjHg9UaXZdAQjA2AgCz7kSFn3rHL7kI=
Subject key identifier: 61:44:8A:52:BF:06:7A:48:0F:15:56:A2:EA:40:91:28:60:4E:82:28
Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Certificate serial: 08C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
Manifest number: 08BF
Signing time: Tue 12 May 2026 20:30:59 +0000
Manifest this update: Tue 12 May 2026 20:30:58 +0000
Manifest next update: Tue 19 May 2026 20:30:58 +0000
Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: /aTbEXeBAhPMxHQPXvsSs3tgizlAnSJlLdWOo2YrcuA=)
2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: 2eup2m0aHXQJQWm9cIyVkI2HXtK+Dw0dwIa6EDDGEm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Validity
Not Before: May 12 20:30:58 2026 GMT
Not After : May 19 20:30:58 2026 GMT
Subject: CN=6a038e02-79aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:24:f5:4a:59:51:50:72:ae:d5:e0:ae:15:
22:aa:d7:09:3c:dc:09:93:ee:65:12:70:32:9c:10:
1b:54:3d:79:7a:8d:fe:08:ac:9e:14:a7:1f:27:ec:
77:31:ee:b4:32:bc:3f:b5:b3:78:45:67:84:77:e3:
63:4f:f7:a4:af:8b:73:b5:60:59:6a:c6:2f:90:13:
5b:10:81:2d:9d:09:db:08:7a:93:9f:60:71:42:c1:
5d:c9:db:b5:fb:ae:0a:b2:b0:24:a0:45:26:dd:87:
5a:e7:7b:36:f9:87:fd:e1:38:68:20:41:f1:af:40:
81:34:75:50:81:a5:4c:d4:00:53:de:e1:f9:83:98:
2e:48:24:d5:e2:6a:ce:3e:ff:f6:ee:95:2b:d8:23:
48:24:64:46:49:6b:71:e8:44:cd:c6:31:b0:bd:ab:
37:bb:56:c4:6f:11:a0:92:cd:70:75:33:d1:55:7e:
45:1d:82:c1:15:38:06:ba:7d:85:41:e2:84:5f:e0:
cd:8a:3f:2e:af:af:0c:54:cd:dd:e3:58:ee:e4:2f:
bb:85:21:df:ec:e7:6f:96:f8:67:6e:92:0f:4a:5f:
6f:70:1f:53:12:0b:0e:9d:2d:46:ef:85:c4:87:dd:
ed:de:96:c5:f1:b8:26:54:8b:30:7a:c2:a5:08:39:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:8A:52:BF:06:7A:48:0F:15:56:A2:EA:40:91:28:60:4E:82:28
X509v3 Authority Key Identifier:
keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:5f:78:34:3d:77:a5:cc:f3:66:13:a9:5d:8f:cf:6a:4c:9e:
80:23:cc:58:c8:ae:88:65:39:fa:6a:20:f6:4a:af:34:3b:7b:
fc:ce:6a:90:3f:6e:31:6a:78:e7:eb:6a:25:0d:ea:ea:6c:8e:
07:5f:fc:e7:4b:67:7c:dc:66:7a:27:a8:fb:8b:d7:65:c1:07:
01:ee:d3:cb:d9:45:aa:a9:4e:09:b9:7b:b6:f5:df:f6:1d:da:
62:2d:7a:84:dd:01:19:ee:a3:64:1d:3b:9a:96:40:0b:29:02:
a9:12:15:f9:12:98:0d:d8:a3:b2:8a:b1:ee:4c:de:13:cd:34:
09:e0:fa:69:35:63:4c:48:5c:77:69:f3:f7:73:fa:df:ec:5a:
e6:bf:7b:84:49:ee:02:61:95:d8:46:43:a6:45:db:fc:90:ca:
8b:9b:84:f4:e2:29:f3:60:8c:ed:f2:8e:23:47:ab:10:5f:8a:
55:4e:c7:b8:d9:80:68:ba:ce:ca:12:ce:64:97:e8:b9:f0:8b:
f4:cd:32:bc:51:26:04:90:a1:4f:14:21:fa:ed:04:a0:bb:d1:
7e:ac:05:7a:7c:33:5d:14:ad:ea:79:cc:ee:14:b3:b4:26:ab:
2d:f8:7d:1b:0c:cc:72:43:bd:39:4d:e3:fc:7e:c8:ea:fa:f5:
3e:08:80:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:01 2026 by rpki-client