
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json)
Hash identifier: LbeaoOBgsl+kTBAlwoJYrmJnmAo/vssP6OGORQkfWIc=
Subject key identifier: BA:22:41:CC:63:69:89:73:8D:A9:AD:6A:F5:DC:80:58:CF:96:6F:D2
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial: 0B0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
Manifest number: 0B05
Signing time: Tue 12 May 2026 19:24:28 +0000
Manifest this update: Tue 12 May 2026 19:24:27 +0000
Manifest next update: Tue 19 May 2026 19:24:27 +0000
Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: 5KS4J67G5UFJxrWzvqbCm4lo7thrISC5nEM11RdflHE=)
2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: yAFGrO2x35rGErp9E92zZSEZN27Ua7PNYL2jUO6uhv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2831 (0xb0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Validity
Not Before: May 12 19:24:27 2026 GMT
Not After : May 19 19:24:27 2026 GMT
Subject: CN=6a037e6c-2210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:bf:bc:63:5d:60:43:3e:57:e1:91:54:78:
1e:1e:84:d4:d8:9c:6a:07:d4:8b:ab:fd:90:f1:0d:
2b:9c:2a:2d:14:a2:66:f2:f7:b3:b6:29:8c:42:4c:
85:bc:d7:4b:79:3a:59:6c:6b:fa:d7:5e:27:83:57:
b0:c2:35:96:6c:d7:0b:94:58:b0:34:f8:de:22:37:
96:86:b5:e9:43:41:97:fa:b7:c0:00:82:0b:1b:f5:
6e:c2:90:8b:b7:f4:0f:75:c8:7f:7a:e2:92:66:df:
a7:bc:12:5e:f3:9b:f4:95:1c:d6:88:db:35:f1:8f:
ea:d7:72:d6:27:ff:13:34:0f:6e:79:79:7a:a4:ad:
0a:59:6b:ff:91:57:c3:25:51:66:b6:54:d9:dd:90:
d4:12:30:05:dc:ba:50:5b:af:99:5a:77:1f:45:8b:
6d:f9:d9:0d:af:13:de:41:54:ba:d6:8a:59:73:50:
e3:a4:f1:fb:ab:cd:53:db:20:8f:40:3b:1b:5c:58:
8f:6b:74:56:8b:c8:c6:01:22:a8:df:fd:d8:38:2f:
68:7b:2f:f1:b7:f6:93:5d:33:43:86:ca:8d:a1:3d:
8c:cb:23:b4:58:ea:cf:7f:41:2f:b1:de:7a:65:0b:
0e:fc:80:d7:64:ba:55:3c:df:ba:a7:3f:06:cd:a5:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:41:CC:63:69:89:73:8D:A9:AD:6A:F5:DC:80:58:CF:96:6F:D2
X509v3 Authority Key Identifier:
keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:90:89:32:57:f1:f8:05:10:16:1e:d5:a5:de:73:88:fb:be:
96:e3:5f:41:fe:e6:0f:8b:39:2c:3c:5a:b4:2f:ca:ba:68:56:
01:16:7c:17:c0:6e:64:1d:c7:8d:8a:26:2f:bb:9c:44:ae:c0:
ce:60:d6:a2:14:50:24:02:0d:75:a8:7d:fe:1d:c5:69:de:e8:
9a:60:af:38:38:a3:f7:4c:cc:93:8c:73:12:ab:06:99:09:4c:
63:b7:5f:70:95:03:7b:93:07:1f:88:39:96:f3:ae:2f:ee:e0:
c4:de:4b:06:d2:d1:32:51:cd:c8:0e:2e:f8:d1:ee:ac:16:54:
11:bb:1e:d9:34:43:be:5a:c3:e4:a7:ac:95:05:6e:11:66:9f:
58:da:89:7b:4f:9a:a4:fc:2b:0f:79:6c:31:54:96:07:e1:f2:
9a:b6:bc:98:d5:96:2c:73:7b:4a:0f:0a:2c:eb:d8:08:13:e4:
72:ef:16:30:04:5c:e3:d7:63:5b:7b:dc:75:76:b6:1d:72:5f:
ee:80:53:6e:34:ea:ac:93:47:eb:b6:29:55:c8:86:26:c8:24:
43:45:79:51:e8:7c:03:01:6c:c5:ac:05:97:69:f7:e0:50:a5:
03:6c:2a:e6:8f:41:e8:e1:53:cd:23:e5:62:2e:6a:03:a9:bb:
04:cb:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:20:41 2026 by rpki-client