
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
File: 80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json)
Hash identifier: qrA7hNhe/8mia1zvi8+kJNcwKvSY9bqE8LEG9+q2n14=
Subject key identifier: B8:58:89:D6:5B:83:F0:86:E3:06:89:93:62:5F:97:8A:9A:2A:A4:32
Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Certificate issuer: /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
Manifest number: 8E
Signing time: Mon 11 May 2026 07:40:50 +0000
Manifest this update: Mon 11 May 2026 07:40:50 +0000
Manifest next update: Mon 18 May 2026 07:40:50 +0000
Files and hashes: 1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: +Gw8losB5AGQszn2Bt8gb8fOhD41WgILwwZATpzkQp4=)
2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: y9XglzGcT/yANEywLEKFOF3/z+vv31d43TaG6CEceQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Validity
Not Before: May 11 07:40:50 2026 GMT
Not After : May 18 07:40:50 2026 GMT
Subject: CN=6a018802-45c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:c9:ed:ae:71:c0:56:9a:af:35:81:24:94:
b9:13:12:b1:02:ae:d6:f9:ff:67:ac:71:15:48:37:
43:2d:08:d7:52:f4:73:d6:66:9a:11:97:88:5f:17:
95:b9:01:04:3e:c7:51:f9:52:d0:35:bb:a3:7f:5f:
de:3f:12:53:1f:b7:08:3e:57:55:28:3d:a3:64:11:
8f:76:a4:54:bf:96:49:8c:55:1c:a1:a2:2d:63:9d:
5d:da:f1:09:72:a2:ea:78:77:e5:1e:68:bb:93:e3:
fe:58:a4:93:e7:76:34:19:ed:b5:c7:3c:7a:80:28:
24:b2:ab:6c:4d:c9:56:07:89:34:e6:83:43:48:1e:
f2:05:14:a6:44:8a:73:26:29:6e:10:ae:15:b6:ff:
64:e1:cc:61:ac:0e:1b:f8:85:1f:b6:ca:62:7b:df:
79:9f:f3:04:11:d4:bb:be:4e:2d:d7:77:13:72:b0:
cf:09:a9:b7:66:c3:2c:4b:14:30:59:cd:86:f0:74:
0d:7f:04:42:6e:c8:43:1c:ca:bf:f0:7b:cc:22:17:
fc:04:bb:05:c8:6f:67:d2:6a:38:95:15:95:9e:37:
98:04:15:43:df:f7:40:be:04:1a:58:34:3b:50:f1:
0f:3e:c7:59:06:dc:8b:54:db:1c:da:60:95:ba:44:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:89:D6:5B:83:F0:86:E3:06:89:93:62:5F:97:8A:9A:2A:A4:32
X509v3 Authority Key Identifier:
keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a3:21:25:e5:e0:a4:b2:80:3f:ac:aa:05:7a:ce:20:29:f2:
e7:ca:8a:38:a9:87:01:c9:05:68:a1:20:30:1c:b8:68:67:7f:
3c:d2:95:1b:93:70:52:5b:ab:73:9d:15:87:b3:27:7c:79:75:
61:75:c0:0e:01:6d:1e:37:7a:96:33:96:30:81:5c:48:45:87:
2c:9e:2b:e5:05:69:df:86:4d:58:3d:47:cd:1f:9e:61:e2:8d:
29:51:bb:4a:3b:f9:38:ae:e6:72:9b:c3:b7:23:c8:1d:7b:6d:
cd:bd:b9:7d:c9:85:07:a9:a3:d4:25:80:b5:5c:60:50:62:79:
80:9b:e4:1f:1a:c6:4c:f4:38:c1:a6:67:98:3d:d3:2b:28:b8:
7a:09:94:2f:4f:4b:b8:f4:db:ba:48:23:db:1b:8e:07:29:19:
de:cc:4d:bc:19:b1:62:b5:88:d4:1a:09:5a:1b:a7:86:af:72:
18:27:06:d2:70:2f:38:ef:0c:ac:44:10:08:5b:82:4a:3f:f4:
1d:a2:a1:57:2c:eb:1f:6d:eb:72:07:fa:72:dd:65:6c:b7:20:
37:c0:5f:c0:a6:5f:f8:c2:63:94:4a:6f:b3:cb:69:c4:35:b2:
e4:12:27:47:7c:f6:29:f9:03:91:3d:5d:4d:a5:2d:ca:a6:cc:
58:4b:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:14 2026 by rpki-client