
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json)
Hash identifier: 3CnOncEDP5THr9Q7Rg+U4rB872ZEw6jiG/Iypr242WA=
Subject key identifier: A4:53:E2:4F:30:4E:DD:5F:18:34:F2:04:C1:2D:73:F8:50:3C:05:6A
Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Certificate serial: 07A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
Manifest number: 0791
Signing time: Thu 26 Mar 2026 21:26:01 +0000
Manifest this update: Thu 26 Mar 2026 21:26:01 +0000
Manifest next update: Thu 02 Apr 2026 21:26:01 +0000
Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: RBHl+GetjuFc96r8LGn4u5aEJvGbTTXQdig6T/bpsKY=)
2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: FbF3GSUAuBF+Lu9+Biww40q4aw4ohnbpizYlHh1W2WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Validity
Not Before: Mar 26 21:26:01 2026 GMT
Not After : Apr 2 21:26:01 2026 GMT
Subject: CN=69c5a469-e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:d3:69:27:01:79:c4:3f:df:02:3a:05:56:
05:56:b2:78:f4:10:cc:72:f0:56:68:fc:9a:55:89:
5e:02:c4:f4:e8:ee:74:e9:1d:7f:06:a1:37:1f:ac:
02:c7:d1:77:ec:b3:9c:c7:db:22:99:33:9c:2f:a9:
05:5f:e6:a6:ff:40:3f:4c:98:0c:a6:e4:c1:05:a9:
08:ba:f8:3a:04:c4:f2:be:a4:a9:02:04:9e:82:ad:
d5:d0:e9:30:35:a2:6b:c2:31:24:90:3d:90:d2:c6:
05:77:a9:51:36:2d:66:52:74:e1:1b:37:ba:c1:27:
bf:4f:a1:65:6e:19:05:44:ad:bf:59:c9:81:f9:5d:
1b:0b:20:0f:91:7d:83:1c:65:82:c1:cd:7e:da:df:
c5:eb:9f:77:85:2e:bb:ba:e4:bc:eb:80:67:32:49:
80:b2:69:13:27:14:ad:59:e7:36:cc:7d:95:1b:82:
21:f3:7c:6b:32:b7:58:c4:90:0b:b3:f0:f3:40:c6:
b8:bb:60:a4:83:d1:34:0f:00:f2:dc:34:b8:e5:05:
e3:21:98:0b:ad:26:f8:f7:c4:da:df:ea:ce:4f:86:
d8:e7:9d:25:ec:a9:5f:b7:46:81:44:40:c5:a9:ea:
aa:60:68:fe:be:02:0f:da:3e:2b:f2:1d:37:f8:3c:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:E2:4F:30:4E:DD:5F:18:34:F2:04:C1:2D:73:F8:50:3C:05:6A
X509v3 Authority Key Identifier:
keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:81:cd:ad:14:fa:6b:2a:1a:14:52:20:52:d1:37:75:ab:81:
59:f4:49:90:67:d4:0f:b8:f9:3b:bc:a8:4d:4e:61:fc:de:0e:
c1:61:d3:12:aa:1f:32:29:34:3f:e2:02:95:c4:33:1b:fd:ac:
44:ea:73:55:43:9b:73:6e:14:b7:e8:60:47:1b:9d:15:77:dd:
ee:d7:79:27:c6:ed:e7:56:2f:b6:24:c3:9f:db:b8:56:f1:3e:
90:31:73:3f:d2:57:a0:e4:f4:85:75:73:7d:34:a6:32:38:13:
5e:ba:eb:ac:16:bc:4d:25:19:18:53:16:b3:12:7e:fa:13:57:
5a:9f:e5:1c:55:b5:3e:77:38:50:b4:04:01:8b:77:ae:a4:4f:
73:af:17:8f:2c:b4:5c:4d:a1:53:6d:d1:cf:40:c2:0d:b0:42:
2d:5c:cc:2b:58:d4:f4:9b:01:38:c2:4b:5c:b4:54:c3:9d:80:
2f:f1:97:2a:35:13:96:88:b3:5e:35:b7:90:ed:53:19:00:a6:
2c:68:d3:d6:54:88:ee:6b:4c:18:53:67:02:a0:b7:3d:b4:f7:
b7:76:ad:6d:dc:ae:c8:24:1b:a6:2e:66:cf:66:f2:7e:04:29:
e8:78:5c:be:a0:11:93:9e:48:1d:20:a6:1b:39:13:b3:72:76:
11:2a:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:28 2026 by rpki-client