
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json)
Hash identifier: 4O60lF0byJzwy+T8NyasWufVdHDs8HxLjk/mpiCwuMw=
Subject key identifier: 4D:C0:84:A9:07:6B:F5:E5:41:E1:66:DA:BA:50:6A:09:B1:46:39:A4
Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Certificate serial: 053D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
Manifest number: 0534
Signing time: Tue 24 Mar 2026 23:12:52 +0000
Manifest this update: Tue 24 Mar 2026 23:12:52 +0000
Manifest next update: Tue 31 Mar 2026 23:12:52 +0000
Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: 13f7Jz6L1BAeWuxAlOSZJ/oWAclfjbkzKyR7sUGWX0U=)
2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: IciT28SUjRQ0I2gdini8FnT61/04yJg06IILVj5+2rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Validity
Not Before: Mar 24 23:12:52 2026 GMT
Not After : Mar 31 23:12:52 2026 GMT
Subject: CN=69c31a74-e2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:9d:6e:a3:30:5b:b3:aa:65:0a:43:37:7e:
fb:b2:d3:32:20:92:03:a7:42:b8:1a:37:d3:72:7e:
b7:b8:32:c2:86:d5:e9:2e:34:74:ac:d4:99:c6:fc:
33:8d:55:dd:37:c0:c0:b9:c7:a8:57:36:f4:33:0b:
2a:d2:a6:54:de:5d:9b:47:b4:71:57:04:02:46:65:
0f:11:2e:79:54:73:f5:74:cc:26:54:c6:57:0a:e4:
a8:61:d0:08:cf:86:82:0d:63:a5:55:fb:7a:bb:ab:
aa:b8:f7:f3:d7:3f:18:c9:60:54:41:16:eb:8a:ea:
33:fc:a5:b6:ba:d2:ca:d2:79:22:b5:ce:27:ed:0e:
8c:f6:92:8a:20:19:68:52:29:44:7b:f7:d4:45:c6:
69:07:92:d7:6c:5e:99:38:71:f5:ee:33:08:3b:f7:
68:39:48:72:5d:bf:02:be:95:fa:be:c3:23:11:b3:
f7:33:4e:be:83:5f:6a:c1:30:57:63:95:38:42:f7:
f7:8b:0d:ec:0f:bf:92:5d:87:0b:5b:49:91:54:f9:
55:f6:16:af:51:68:3a:cf:c3:47:b6:47:b9:f6:2a:
10:84:04:56:6d:de:6e:6a:fa:3b:69:0d:c9:ed:27:
7c:b9:92:8f:1f:a8:2a:f4:5c:36:cc:94:23:b8:77:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C0:84:A9:07:6B:F5:E5:41:E1:66:DA:BA:50:6A:09:B1:46:39:A4
X509v3 Authority Key Identifier:
keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:99:9f:1b:1b:75:de:29:b9:86:32:0d:11:45:6b:3d:c5:43:
b7:dc:f5:cd:2a:73:8d:21:f7:90:57:de:a8:49:af:3d:15:af:
ff:ad:1a:a4:1c:02:75:49:94:9a:54:31:b9:25:04:27:fa:4b:
84:f2:5a:ea:06:12:1b:ca:7c:f9:b8:d2:ff:d0:ce:33:01:20:
b7:93:05:48:0f:9b:f4:dd:1f:42:e0:31:7e:cf:aa:07:1f:da:
2e:3f:e9:4f:bc:3c:82:8c:58:25:98:9b:e5:23:9b:fd:cf:8f:
a8:32:13:bd:c1:d1:38:6a:de:f2:92:d9:d0:d4:a8:be:ec:42:
d7:10:a8:24:4d:37:13:9f:79:de:e3:f4:ff:14:79:f4:84:4f:
4d:e5:55:25:8d:fc:5b:54:83:7b:bd:2a:34:cc:32:25:75:bb:
e4:42:e4:bd:35:ba:24:a4:cd:74:7a:5c:b2:fa:1c:d8:7a:f2:
aa:ee:dc:b3:12:23:cb:ab:ea:ec:2d:f6:98:f5:ac:b7:59:69:
27:40:b1:a1:f7:ed:cb:27:38:b9:5c:b4:f4:a5:99:e3:24:5d:
c2:70:e3:b6:98:ae:48:e7:ac:82:e7:6d:3a:4a:98:18:82:9b:
00:5a:90:55:07:04:0a:db:8a:f1:dc:8c:8f:0b:38:59:76:b3:
f5:06:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:44 2026 by rpki-client