
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json)
Hash identifier: eZ965sLutt7wSWSyRYmqJp+aNF4zfl4qR4zbmNtkVgw=
Subject key identifier: A6:A3:CB:AB:69:1C:83:A5:4F:2A:5A:2A:91:36:A7:B2:BD:9F:FF:D1
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
Manifest number: 0AEA
Signing time: Tue 24 Mar 2026 19:11:53 +0000
Manifest this update: Tue 24 Mar 2026 19:11:52 +0000
Manifest next update: Tue 31 Mar 2026 19:11:52 +0000
Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: KHD8msPyipxgNrmQILfoxZzuMphD7VLFkAP1XlD0V6Y=)
2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: ohQ7dmr4wlhGIPSZo4SYR6kjahOfosEHSoyiv0ooBGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Validity
Not Before: Mar 24 19:11:52 2026 GMT
Not After : Mar 31 19:11:52 2026 GMT
Subject: CN=69c2e1f8-5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:c2:be:a1:2c:f6:ee:77:f9:76:cf:e4:ed:
d4:7b:ed:5f:e5:13:02:58:eb:a3:a4:55:3b:2d:bd:
70:88:5f:df:14:49:8f:c0:c8:51:b1:31:a7:f9:28:
c0:15:b2:e4:02:e1:6b:5f:1d:f1:c0:00:54:8c:01:
15:1e:b4:7c:8c:86:b7:c0:3f:4d:6c:de:22:96:43:
46:9f:81:56:53:be:ca:e2:df:48:db:dd:b6:08:a0:
f3:96:ce:0c:45:79:55:1c:ba:2b:f9:df:4c:a0:cc:
6b:70:3e:62:ca:f8:18:db:c7:59:2d:c4:dd:ff:04:
ba:d6:24:d7:7f:d4:6d:9d:e7:3b:cf:cb:34:68:85:
8d:83:d2:ab:81:b2:a1:83:c6:4a:3e:a0:10:85:3b:
26:bc:96:d7:30:39:7e:31:2d:ff:fa:13:73:6f:f0:
fb:0e:88:b6:3a:70:55:55:b2:93:af:86:34:77:72:
7d:ed:04:69:ec:ae:6b:9d:57:76:fd:8e:cc:07:86:
fe:c7:30:ef:c4:4d:be:1d:93:bd:0f:b2:d7:b6:d0:
1a:d6:3b:2c:a2:9c:aa:3d:dd:bd:d6:45:29:88:23:
b7:04:17:10:59:8b:3c:eb:9c:24:13:43:d5:b4:bb:
fb:e1:d7:51:7c:a9:21:a5:0a:7c:d5:61:fd:0c:bc:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:CB:AB:69:1C:83:A5:4F:2A:5A:2A:91:36:A7:B2:BD:9F:FF:D1
X509v3 Authority Key Identifier:
keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:60:5d:9a:22:f8:dd:3c:a5:0d:26:2f:1b:32:24:e7:15:
a6:84:9c:07:f2:e3:4d:d5:9f:d2:5b:1e:b3:ea:b3:16:6c:a9:
4e:4a:0a:dd:bf:b2:93:37:03:7c:05:9d:8f:e2:9b:c6:80:0f:
16:68:dd:3d:a5:f0:2a:02:e5:eb:41:32:68:30:cf:18:aa:c1:
23:31:eb:43:14:ef:c5:fb:2d:1e:f3:a6:b5:a9:12:d7:0d:92:
eb:63:bc:0d:0b:e8:da:b9:18:78:64:bc:63:26:4c:ac:42:68:
23:c7:c8:bc:df:d6:59:8f:9b:33:2f:c2:9d:c2:0e:46:99:46:
01:cb:07:74:22:44:2b:37:36:3b:df:b1:cc:f9:89:1d:cc:2d:
be:89:02:c3:58:36:7a:17:ee:e6:70:b3:f0:6e:39:14:ac:40:
e4:17:33:ff:85:e0:e7:c1:c1:3f:f5:0c:81:d0:f8:28:e4:f3:
d7:9f:7a:68:a3:c2:e8:6b:7b:6c:24:30:3c:a1:eb:7e:c1:73:
33:53:b6:b2:0f:7b:72:f9:1a:87:1a:e7:38:45:48:89:e8:8f:
d4:4f:a9:6e:5d:5e:02:f6:95:a5:b3:04:bc:b1:83:94:e7:a4:
47:29:a0:8b:84:60:0c:6b:f6:c1:a8:88:a5:d0:5e:50:07:11:
27:33:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:52 2026 by rpki-client