
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json)
Hash identifier: NlVnRFlM/P/wWYadLQ2Fg8+kchrJHFntMPtnn9h338E=
Subject key identifier: F0:FD:C0:19:9E:D1:BA:EB:23:53:ED:FD:A1:54:79:15:EC:09:45:EB
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
Manifest number: 0763
Signing time: Tue 12 May 2026 21:45:26 +0000
Manifest this update: Tue 12 May 2026 21:45:26 +0000
Manifest next update: Tue 19 May 2026 21:45:26 +0000
Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: ZSV051YY4Wk6qMA20MkiwiRZTtHsYdXJt5I5q4gc38A=)
2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: EK917a0brIXozyOjUJuFME0or9oqwhvu136xFaoo3CE=)
3: 00619CFA3CB911F1BBDAFF7AB4833773.roa (hash: DsdENVieE2RhNlpGEqRk9at7+HY0bRNG3YOtTEhYRjw=)
4: 9B6CA5663CB711F1A53ED041B4833773.roa (hash: WVuzX5CFpIrusgLbPfWDtQsMG2ekbWED5/WtRt7osX8=)
5: FFD30A3A3CB811F1BBDAFF7AB4833773.roa (hash: SjUSWIZP5JehPI4S4JhlMJHXgjL5bWNza1x377Y4CkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Validity
Not Before: May 12 21:45:26 2026 GMT
Not After : May 19 21:45:26 2026 GMT
Subject: CN=6a039f76-3bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:33:03:17:11:86:07:0c:66:0b:72:97:8c:
5f:5c:4d:1f:0c:8b:8e:1b:63:b4:f8:13:5a:cc:79:
95:4c:25:88:72:45:90:73:31:64:d1:db:53:fc:a3:
05:37:ea:39:18:61:22:c4:c4:12:85:db:74:1f:cc:
3a:a3:a2:af:96:5c:0d:d5:07:9f:89:ba:3c:38:72:
88:7b:15:d3:fd:b1:80:2b:f5:fb:cc:dc:ec:b0:c3:
80:96:80:8e:04:94:a4:8e:32:54:6d:2c:d8:b0:c1:
59:e9:64:81:92:72:6e:6e:1d:2b:92:e2:19:16:65:
17:7a:80:ef:52:cf:a4:bc:47:de:97:c4:53:69:09:
31:3d:2b:88:a6:8d:8a:2e:83:15:62:36:ce:71:4b:
fe:3d:3f:49:1b:1c:48:db:74:01:e4:37:68:9e:fd:
17:2b:c1:79:cc:b3:b0:6d:68:9e:52:22:9c:5d:eb:
01:fb:15:ff:42:df:99:19:57:8e:97:74:91:d3:e3:
7d:0a:23:ae:d3:4b:eb:37:d1:8d:f8:0e:ad:1e:8d:
01:83:4d:48:da:cb:56:27:7d:a8:e9:af:b9:69:2d:
99:69:08:2a:52:a2:e3:e2:0e:f3:cb:8e:16:65:87:
c0:9d:54:02:9a:47:7b:13:76:a4:0c:1f:ea:95:9a:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FD:C0:19:9E:D1:BA:EB:23:53:ED:FD:A1:54:79:15:EC:09:45:EB
X509v3 Authority Key Identifier:
keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e6:5f:24:6c:dc:ce:6e:9c:de:b5:98:69:d1:79:b0:e2:f0:
e6:51:49:fb:03:78:05:8f:a5:51:63:f0:62:39:54:32:c6:14:
a0:6d:94:47:57:43:10:54:ca:5e:6b:f4:b1:ed:41:f1:b3:9f:
60:37:6a:74:c7:b7:84:5d:58:10:f1:1d:39:0c:d9:fd:ed:ce:
cd:13:43:b9:16:c6:56:d0:b7:c3:4f:39:21:26:ef:cb:f0:5c:
72:c1:d7:39:f4:71:9d:fd:c1:23:43:91:e0:07:12:59:28:0d:
05:88:88:61:a5:82:29:0b:9e:3f:1b:16:0c:26:36:57:02:85:
f8:39:1f:23:6c:74:c1:21:30:20:08:3a:be:8e:37:0a:cc:a7:
25:2b:a2:49:bf:1d:e6:dd:ce:99:e4:2f:9a:41:d2:e2:24:a6:
b3:ce:0b:15:82:33:d3:f7:0e:80:f3:7e:d9:86:91:42:3c:4b:
8b:24:af:58:18:ff:5a:84:95:60:cb:96:cf:16:dd:d8:79:37:
f5:18:2b:e3:ad:d6:84:0a:20:6c:62:b7:c7:97:65:9a:36:12:
3d:1c:c3:dc:51:78:f3:e0:f2:10:9b:33:29:92:03:03:3b:96:
a2:26:ec:dc:2d:28:c0:e5:4f:6b:7d:a8:1b:a6:93:5d:87:ba:
c2:c5:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:35 2026 by rpki-client