
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json)
Hash identifier: S+Pv6OXpQ8eAT721uyXiTAjy2aaWl43gLhPvR1BjLYk=
Subject key identifier: F9:CF:BF:58:41:C1:2D:6C:C3:44:D1:97:A6:F7:07:0B:40:D4:30:B9
Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
Manifest number: 01AE
Signing time: Fri 27 Mar 2026 03:34:18 +0000
Manifest this update: Fri 27 Mar 2026 03:34:18 +0000
Manifest next update: Fri 03 Apr 2026 03:34:18 +0000
Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: HEWCw5srQJ8K7z5QGKkRTZEVH9fEIz94xejYcrwSIkw=)
2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: PdTF8JZAzZqkYsv5aYjwZSB0/7MTqhPMOhGlyT03h9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Validity
Not Before: Mar 27 03:34:18 2026 GMT
Not After : Apr 3 03:34:18 2026 GMT
Subject: CN=69c5faba-ca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:18:86:c9:a8:ff:b7:cd:0f:e6:2b:7f:da:
13:3e:b4:a1:13:18:7d:ba:17:10:51:b3:7b:2c:88:
36:5f:1c:a6:48:19:75:69:50:fd:30:e2:17:01:02:
a9:64:b6:2a:92:28:f6:3d:1b:35:2e:49:cf:b8:9c:
84:76:b1:56:35:89:2c:ad:4d:33:c2:57:27:03:5a:
b1:4e:15:b4:f4:e7:38:e8:2a:64:33:56:7e:e5:0d:
ca:6c:e9:db:08:88:59:19:5f:56:90:84:4f:ee:7f:
67:3c:ec:a0:1d:f4:f6:50:c8:c9:d2:b6:1d:73:a9:
28:6e:55:68:a2:b8:55:84:3c:82:d7:1d:9f:fd:0d:
1f:c6:5d:76:af:c3:0e:20:19:1e:f0:5c:fe:7a:16:
73:af:b4:60:18:bd:30:a9:c2:6f:3d:96:96:05:ad:
2f:40:c8:f5:ff:53:04:7a:94:2a:7a:a5:04:b2:fe:
98:1d:6c:55:37:7e:77:1f:a7:49:28:70:c7:67:fe:
20:23:89:37:ce:73:c2:08:07:92:98:8b:40:dd:a0:
06:e1:c1:2a:15:66:c5:e1:08:fb:43:2f:de:cc:5f:
b7:58:1c:2d:0c:6e:01:4b:3f:48:9c:be:7d:90:78:
b6:47:aa:a8:5a:d5:a8:f0:58:95:3b:fa:bb:42:8f:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:BF:58:41:C1:2D:6C:C3:44:D1:97:A6:F7:07:0B:40:D4:30:B9
X509v3 Authority Key Identifier:
keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:cc:64:1b:1d:c2:38:38:85:b1:86:ea:77:f9:df:b4:5d:
2a:e3:e2:e4:91:f3:cd:b1:e8:c6:c9:29:77:af:67:82:88:3c:
15:69:11:f7:19:fa:ce:9b:33:56:df:4f:6a:54:48:33:96:fc:
f6:2a:5f:74:d1:67:32:2d:9f:ce:20:ff:68:e6:07:3e:4a:6e:
71:3a:82:7f:39:ae:b0:af:79:dc:35:62:9d:2a:d9:68:63:c4:
3b:7e:47:8e:e2:1f:d0:cf:93:c1:fb:de:b8:ab:5f:eb:38:e0:
b6:f8:e4:75:94:6a:30:18:e5:96:6d:82:ce:ef:70:55:77:88:
37:59:92:5f:38:98:99:88:62:79:c4:ee:b0:dd:86:bd:4d:49:
ef:1a:15:87:8f:40:87:df:f6:72:78:ec:37:1d:ba:28:30:9a:
02:79:9f:95:55:84:aa:cd:9f:42:5d:6f:62:4a:31:e2:55:eb:
b4:56:76:e5:56:02:9c:96:92:8c:5c:ba:3c:b6:24:20:70:e7:
e2:75:5c:22:f6:00:f8:77:2e:d2:3f:3c:4e:f6:df:3c:22:65:
ae:a6:4e:e5:50:90:41:1d:5b:57:69:f3:6b:4a:62:bf:6a:95:
1e:cb:a6:e5:82:ca:a8:00:7f:c2:06:98:71:4c:b0:67:a1:8d:
3b:a9:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:00:30 2026 by rpki-client