
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier: DXi99ETnXhJXW+RVC5DhD1jtY2JV7GrxL/MUlB99Ff8=
Subject key identifier: 2C:09:4C:4C:A6:47:30:96:F5:DD:B3:69:61:46:FF:13:B6:2A:E1:A6
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial: 1504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number: 14DD
Signing time: Thu 26 Mar 2026 16:49:26 +0000
Manifest this update: Thu 26 Mar 2026 16:49:25 +0000
Manifest next update: Thu 02 Apr 2026 16:49:25 +0000
Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: la/RfXSmGll1J2pFy5KMVEUxX8aiv3n0BZeZ1yLGFCU=)
2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: +whKNCKBWu/fW8ZOLuLgPSDmcXDG1KA00Y9l8DL/PP0=)
3: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: AG7+A5Yb2KDtnoNzA36Acb2KghCB+Rzmi98/tCvvjZ4=)
4: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: Hr7OpNKmlMWAc1DIpsosFxnOhgjPdStDv79SYsuEpFU=)
5: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: nHdgdCvKY1Y9twOWSJSJeHzjweCUK60NzNjzUvm1MXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5380 (0x1504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Validity
Not Before: Mar 26 16:49:25 2026 GMT
Not After : Apr 2 16:49:25 2026 GMT
Subject: CN=69c56396-3743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:4e:3a:eb:06:d6:c0:00:41:c1:cc:34:bf:
bd:d4:79:02:ae:f9:f0:be:99:c5:2c:49:2d:99:39:
4d:77:ad:43:cb:05:aa:6f:14:57:f7:dd:d0:b0:f1:
44:c5:17:8d:e9:2d:a0:66:ca:52:06:21:1b:ee:48:
d1:10:ee:4d:e3:62:2d:41:33:ee:37:3b:cb:78:66:
9a:df:3b:e3:de:6d:48:b9:0a:53:be:22:a0:2d:61:
e0:1a:ce:a4:d1:a5:b3:6b:ec:b8:14:c5:08:eb:6c:
64:4e:7b:c5:cb:af:60:f7:44:c0:29:c3:59:cb:8e:
94:e6:80:1b:89:38:c2:3d:b5:86:23:ef:76:06:1d:
8c:57:98:0d:99:1b:cb:82:df:12:2c:3a:37:bd:93:
26:ce:b3:2f:9f:db:a3:05:6b:9c:55:3a:01:6b:7f:
12:1d:13:6c:f1:7f:0f:36:f9:a0:22:5b:de:26:54:
7f:2f:1b:15:90:fb:60:d2:55:bb:93:11:62:2a:66:
b3:1a:52:b5:da:2c:b5:c2:61:5f:00:5f:64:3e:50:
f2:0f:c7:fe:87:b3:e0:d7:f7:c9:7e:f5:28:d4:2b:
e8:43:17:b9:46:0e:ee:10:a6:a9:25:7c:ab:3a:8d:
50:98:2c:01:c6:01:a1:81:16:8f:9c:21:e6:18:5d:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:4C:4C:A6:47:30:96:F5:DD:B3:69:61:46:FF:13:B6:2A:E1:A6
X509v3 Authority Key Identifier:
keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:31:a7:f3:de:41:f3:49:5d:19:10:18:3f:9d:06:f6:b6:
7b:28:5a:e2:36:39:93:6b:36:e8:4f:af:bf:e8:09:90:f3:8d:
c4:48:1e:97:13:e1:04:df:91:d4:d8:72:26:47:95:a4:4a:8d:
de:2b:55:6b:a9:57:87:07:1d:aa:9c:cc:6a:43:2d:57:11:6f:
65:80:cc:11:b7:cb:8b:b8:bc:cc:bd:bb:39:cc:0a:76:99:d7:
89:ea:c3:19:e8:bb:d9:7b:49:33:d3:bf:6f:59:9d:4e:57:4a:
9b:90:04:fd:15:30:ee:9e:8b:d4:56:dc:cf:eb:27:9d:5b:a8:
34:d5:24:06:48:d5:c4:6d:f7:ce:ce:24:08:09:8e:d9:41:d8:
3d:07:92:65:b4:76:e8:7a:93:7b:a1:6f:95:f5:6d:41:2e:e7:
e5:af:3c:48:29:9d:b7:64:4d:13:ef:68:e3:41:ec:88:e3:32:
98:18:37:31:42:6b:a5:42:e7:7c:ea:2e:df:a7:39:56:40:58:
13:e9:dc:10:0f:47:e7:49:cf:7c:03:5a:2b:a4:d9:05:60:93:
c2:41:49:14:52:49:8d:47:d3:03:b2:76:91:77:43:30:a2:de:
0b:14:38:f2:3d:92:c8:0a:35:cb:ba:66:c6:a3:5b:1d:a9:00:
85:f8:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:11 2026 by rpki-client