
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
File: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json)
Hash identifier: tIBKqdzQKKsy5PlxO/beRECjdmaWDuSNa5l0AXnO+ZU=
Subject key identifier: 0A:7C:D9:D5:25:B0:30:D1:A0:37:85:D3:65:75:12:E3:39:ED:33:FC
Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Certificate serial: 05E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
Manifest number: 05D8
Signing time: Tue 24 Mar 2026 22:44:26 +0000
Manifest this update: Tue 24 Mar 2026 22:44:25 +0000
Manifest next update: Tue 31 Mar 2026 22:44:25 +0000
Files and hashes: 1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: nSJo+awoiXKH91JtiGRNv6fq9oZshbgqW1k4Ru5o5kY=)
2: F18DB130603911EF930C0567C4F9AE02.roa (hash: fyJmP2+tjH5jmHypwbkY3sx8LmyTBoCFRhQ62M+DiAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1511 (0x5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Validity
Not Before: Mar 24 22:44:25 2026 GMT
Not After : Mar 31 22:44:25 2026 GMT
Subject: CN=69c313ca-696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:b5:ac:8e:0e:6d:ab:2c:e8:ff:da:94:1f:
37:91:26:0b:8c:da:e5:43:8e:01:ba:40:ba:67:ea:
cd:e8:49:65:74:4b:ff:ce:51:a9:3b:10:e7:81:0e:
f5:d8:40:88:39:3f:3a:11:f4:db:1f:02:6c:00:ff:
5c:ea:e3:9c:53:ea:04:c5:5a:58:2c:16:e3:5b:52:
c2:a6:ad:78:f2:b0:e2:81:94:f4:84:86:b9:d9:fe:
18:32:db:74:70:08:c3:24:17:98:53:d9:5f:1c:dc:
4f:4a:13:6d:fa:d2:cd:8a:f2:d0:97:e1:2d:07:83:
3a:52:a9:80:d5:a8:f8:cd:56:56:e6:ac:78:1a:c2:
6e:4c:04:05:f8:13:b5:c2:ec:da:a6:57:4b:08:f9:
ab:33:1d:4a:55:e3:f6:63:1f:91:b6:74:d9:1c:51:
ed:63:cf:0a:f6:53:66:76:37:f0:ee:2c:2d:27:b2:
08:3e:ff:51:dc:7f:f3:c0:15:0c:d5:4f:11:c5:a7:
a5:b5:f4:68:98:14:80:60:38:2c:d8:b5:d9:e3:2e:
9a:de:ca:ff:ed:85:ab:f7:4f:f2:93:08:5e:dc:c1:
b3:eb:56:52:b6:fe:0d:04:b6:b7:cc:8a:11:06:68:
a4:84:e2:08:c0:78:e1:bf:ea:88:24:1c:84:2c:fb:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:D9:D5:25:B0:30:D1:A0:37:85:D3:65:75:12:E3:39:ED:33:FC
X509v3 Authority Key Identifier:
keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:db:a7:9e:e2:6b:04:7b:9c:c7:aa:cc:bd:ff:f3:a8:16:14:
1f:26:1e:44:55:73:13:82:4f:c2:7a:b6:0b:66:57:0a:0b:99:
2d:26:93:68:00:0a:89:1f:8e:3b:c4:b2:63:53:61:d1:ed:46:
f8:c8:30:c1:59:56:75:df:5e:27:75:7c:0b:05:48:70:29:c2:
39:78:68:16:69:7a:63:2b:d0:c6:4d:8b:63:97:da:e7:30:47:
11:69:77:9a:79:9a:42:8c:6f:60:b1:47:22:40:26:bd:fc:22:
c8:47:64:cb:55:c3:e3:99:6f:93:64:4e:92:63:db:1c:12:49:
19:11:31:c7:fa:ab:7c:af:52:79:e3:de:1e:a6:c3:16:34:37:
73:3e:8c:d9:c0:5e:e0:8d:2e:63:f5:b5:05:9d:fb:8b:06:13:
2e:20:f1:7e:3b:a1:e4:33:6f:41:04:ec:13:38:42:70:90:e4:
fb:cf:0d:ab:cd:fb:02:91:cd:8c:fe:24:78:49:af:42:c5:2e:
ef:11:eb:62:99:21:16:42:1e:e9:7e:80:12:ee:2f:5d:c4:ca:
50:8b:b9:f8:57:38:0d:7e:79:f4:02:74:dc:14:82:96:28:37:
2b:d1:76:f0:7b:3d:94:b3:68:0f:01:e6:45:d1:f1:5c:96:0a:
48:46:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:56 2026 by rpki-client