
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
File: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft (raw, json)
Hash identifier: PDfvIO4cR1fu3bdriUfc6Fv/DRYDEZ0uvq+EtxRGr90=
Subject key identifier: 54:18:D2:C0:C5:5E:4D:24:D9:A0:93:8E:82:FE:5C:07:5F:19:89:37
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Certificate issuer: /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
Manifest number: 0D
Signing time: Wed 13 May 2026 07:25:17 +0000
Manifest this update: Wed 13 May 2026 07:25:16 +0000
Manifest next update: Wed 20 May 2026 07:25:16 +0000
Files and hashes: 1: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl (hash: zsPfEnIsUjN6AAFf32ZxJbGnT/ZeUZijeofVd+alXeU=)
2: E3BDB79A422211F1A3DEFE36CE833773.roa (hash: 4cNB8HR7jBBzIhB59PKYMVnaRTQ1HFFB4LDOqYX8Kic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Validity
Not Before: May 13 07:25:16 2026 GMT
Not After : May 20 07:25:16 2026 GMT
Subject: CN=6a04275d-0c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:c8:52:6f:4f:18:dc:af:51:0c:41:07:2a:
f4:a2:95:fe:ee:a5:e2:28:81:41:d5:8f:74:d6:3b:
7a:0c:8d:c5:48:d6:d4:9c:c1:dd:60:ef:2b:57:b9:
e5:b3:13:a2:a6:ac:7c:01:3d:72:05:d8:18:50:7f:
52:cb:d7:b2:4c:32:35:46:b6:02:ba:48:e9:b1:d9:
3b:23:9f:63:1e:72:9e:82:e8:8b:fc:29:c8:d0:64:
2f:80:fc:53:80:a6:66:59:82:4d:23:44:dc:71:38:
98:46:8b:86:1d:7d:01:61:97:38:84:1f:87:8e:a3:
ad:2f:1d:a4:79:8b:e2:0d:77:11:8e:08:25:36:53:
98:17:21:ed:7a:52:a7:85:ba:5c:e0:34:32:e0:1c:
6f:1f:d4:9f:bd:8c:15:98:14:c5:77:67:de:fa:f2:
30:de:af:10:40:e0:cc:02:8f:c0:2c:9d:65:ca:49:
44:7d:99:c0:f4:d5:cc:7d:50:a6:be:aa:48:9e:c3:
76:de:a9:b3:d3:31:11:11:16:60:a0:7d:5c:61:3d:
ce:12:7f:ee:0a:cb:b9:e7:06:92:e4:3b:27:73:4a:
27:43:c5:9f:d4:da:31:11:8f:00:47:64:36:a2:1c:
59:60:71:8c:36:4c:62:13:37:06:3a:e0:5a:b9:20:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:18:D2:C0:C5:5E:4D:24:D9:A0:93:8E:82:FE:5C:07:5F:19:89:37
X509v3 Authority Key Identifier:
keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9a:ca:a7:4d:c2:c2:d8:b2:14:34:69:32:53:ab:52:8a:c0:
ac:e9:f4:c6:6a:34:ee:5b:99:7b:6d:66:a9:13:61:32:cd:78:
b8:af:1a:55:e8:7b:47:ff:f7:5a:b7:a5:4d:de:95:b1:9a:bb:
d3:ad:83:8c:c5:72:fc:8d:9b:33:fc:6e:5f:ab:80:1c:4b:8b:
46:7a:2b:e8:61:ea:74:a8:38:9f:57:bd:28:a1:df:ec:87:2f:
03:82:ab:72:07:9f:b1:c4:55:e2:e9:82:7e:71:1b:ef:ff:80:
5b:1d:0d:30:b9:c9:60:2c:9f:62:87:84:25:2b:fe:97:27:e2:
25:d4:d7:d6:8a:dd:c9:1a:62:22:0a:8f:0f:8a:c5:f7:e6:73:
5f:c1:da:7a:df:19:b3:fd:ce:cd:2f:60:e4:a1:00:15:43:0b:
5c:be:3a:2a:c3:69:d7:ae:5e:6b:34:04:7b:3f:eb:06:44:41:
12:bc:f1:c3:a7:0a:32:14:03:e4:e4:98:9e:90:58:0f:73:57:
3c:62:47:42:29:35:c8:de:cc:91:3f:75:82:88:3a:73:7e:7b:
3b:5f:95:cb:88:77:0e:bd:e8:7d:e8:dd:ee:e0:a2:f5:ce:1d:
ac:e1:4d:68:c2:ec:df:61:84:1d:59:ec:11:0a:8d:64:29:9c:
42:53:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:21:22 2026 by rpki-client