
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json)
Hash identifier: ZqfnuB+05qH9FJcDZHvJlnPEECOvQDI5LkkpumZLqS0=
Subject key identifier: B5:83:C5:73:AC:0B:BD:CE:B6:E0:20:AF:33:38:8B:DC:34:F8:05:A3
Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Certificate serial: 1133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
Manifest number: 1A80
Signing time: Tue 24 Mar 2026 17:08:53 +0000
Manifest this update: Tue 24 Mar 2026 17:08:53 +0000
Manifest next update: Tue 31 Mar 2026 17:08:53 +0000
Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: JnXOdc/Lriasp7r7/I1Wc1gZ0UNiZuR/mSXBqgrOt1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4403 (0x1133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Validity
Not Before: Mar 24 17:08:53 2026 GMT
Not After : Mar 31 17:08:53 2026 GMT
Subject: CN=69c2c525-6672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:a0:3c:86:03:f6:ec:70:bf:a5:16:98:bf:
9b:3e:8e:08:a1:10:de:b1:ce:24:fe:c0:42:59:17:
5a:2e:1a:aa:af:16:e8:cb:fa:2f:9e:05:dd:de:4f:
5a:da:e8:f0:d2:cf:f3:70:5d:20:a3:88:9a:a4:5f:
12:70:65:92:be:e5:a4:fe:24:42:0a:9f:b0:af:3b:
24:d7:5f:1b:15:0f:9a:d8:d2:61:4d:27:29:fd:f0:
7d:7e:f8:eb:63:80:7d:3f:a2:37:5e:bc:41:e9:23:
2c:c8:01:13:92:8d:62:4b:4c:43:ed:0e:1f:56:4e:
fc:4d:58:61:eb:b8:bc:f6:0e:72:d0:4b:bb:a2:42:
1e:07:15:80:1a:7b:cf:fa:0f:ea:01:d8:05:9b:f5:
84:cf:b3:17:c7:da:ce:dc:26:da:dd:8f:e8:e9:b8:
c0:6f:ec:ec:bd:aa:3d:85:63:a1:60:dd:8a:99:29:
6f:8c:c3:4a:57:af:35:15:00:1b:c0:4f:a2:ec:b0:
cf:e9:3b:3a:2f:df:3f:f1:bc:a4:09:d1:c4:1c:ec:
60:01:15:be:b7:97:d2:84:a5:8f:b0:5c:49:ad:a2:
46:0d:b0:cb:59:2c:f6:65:87:ff:b4:fb:a9:a7:3f:
02:54:c5:65:a6:b9:b8:db:3f:bb:ab:04:56:71:51:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:C5:73:AC:0B:BD:CE:B6:E0:20:AF:33:38:8B:DC:34:F8:05:A3
X509v3 Authority Key Identifier:
keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1d:51:bb:b1:db:9f:a9:2b:19:8d:ff:5d:6c:89:55:47:22:
60:4c:b2:b0:91:21:a2:7d:3d:76:29:46:e8:e5:99:4a:e4:4f:
0b:d7:31:a2:1a:58:1f:6f:9c:e9:ca:25:06:e8:36:b3:51:88:
87:94:bc:eb:df:38:52:9b:a4:6a:c1:43:56:e2:32:c9:12:3c:
86:4d:ce:36:5b:f0:94:70:c8:d6:2a:66:39:c5:d4:da:0d:13:
cd:f2:56:99:eb:e4:b1:a5:58:56:b4:48:78:b8:75:98:7b:31:
0c:96:81:db:ee:59:b1:93:23:6d:5e:07:ad:ac:d0:d3:29:cb:
84:05:c8:99:7f:1f:c2:00:20:8c:ca:55:2b:bb:ae:be:d9:e8:
a1:e3:37:12:64:c1:46:f5:da:31:9f:6f:b3:cc:6b:98:d6:0d:
8d:80:ce:47:5e:8e:24:47:49:78:5a:9f:c6:76:41:46:af:e9:
18:d4:32:bd:0a:2c:8b:34:c5:4f:ce:3a:d5:9b:3f:c0:3c:4c:
9a:93:e5:10:d6:00:75:1c:61:4d:8a:3e:4e:36:ed:78:99:74:
f6:6d:93:60:35:5e:cd:d1:c4:1b:35:e1:e2:7f:cb:9e:a1:32:
70:27:d7:e0:d8:bf:61:e4:61:56:bc:ae:21:35:99:cd:96:56:
77:61:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:40 2026 by rpki-client