
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier: wwTZPxYoHcNwNVgaZtGPwU9Q5eLRGahtnVQTspHEUyY=
Subject key identifier: B5:1F:A4:42:9F:B6:37:D9:70:5D:DA:1B:1A:85:B4:39:80:44:B0:89
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial: 124A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number: 1232
Signing time: Thu 26 Mar 2026 17:04:54 +0000
Manifest this update: Thu 26 Mar 2026 17:04:54 +0000
Manifest next update: Thu 02 Apr 2026 17:04:54 +0000
Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: uWQiPkzSgwogrX5Fbi3k/51q0kx1KFOB+tJDFIleTTY=)
2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: yX06bXibRyqYQ53QWArbh3lavUZOOzpp/mZPOnVc/hA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4682 (0x124a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Validity
Not Before: Mar 26 17:04:54 2026 GMT
Not After : Apr 2 17:04:54 2026 GMT
Subject: CN=69c56736-64e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:a5:03:16:4f:06:51:b4:75:3c:a8:44:31:
4a:65:85:de:b9:47:ee:f0:9e:ed:87:e5:e5:c3:05:
b6:c7:57:d7:a3:ba:0b:58:96:53:a7:84:07:e2:c1:
e3:6d:94:53:c7:72:88:4f:fd:94:8e:14:3c:d8:82:
8e:e0:59:f0:a3:5d:be:d7:5c:00:ca:32:14:ff:5c:
47:93:df:0f:6f:fa:85:24:5a:83:7c:fd:71:da:92:
a6:aa:55:f9:f3:a9:7a:27:b9:3f:89:91:dd:05:ae:
05:ca:db:3d:7b:ef:89:4f:b5:36:c2:8e:2a:97:c8:
2a:b3:61:de:91:d1:39:fe:b5:64:c2:b5:e5:81:f9:
6a:87:25:48:e3:5b:45:0f:d4:0f:66:2d:e2:e7:99:
8c:cc:7f:b4:ed:b3:8f:8c:04:a2:dc:5f:0a:c3:7a:
c8:42:e8:41:a0:1a:38:7a:26:69:e9:b7:f3:de:be:
d4:c5:da:5a:a4:e1:09:79:8b:f4:80:3d:2f:3b:61:
7c:91:17:94:01:86:84:72:30:2e:76:0a:f0:9d:3d:
e4:35:b0:d7:99:2b:0d:df:05:1b:48:80:d4:8d:91:
f9:e2:80:4e:71:5e:b3:71:f1:78:51:0c:dc:90:05:
0b:72:9b:ae:dc:e4:a8:79:4f:60:09:5f:c2:2f:12:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1F:A4:42:9F:B6:37:D9:70:5D:DA:1B:1A:85:B4:39:80:44:B0:89
X509v3 Authority Key Identifier:
keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:78:3f:60:42:f6:f4:28:28:b3:d1:b1:15:54:b6:17:9f:
b2:70:b8:cf:3d:4f:64:89:b2:10:a7:07:25:00:10:7d:3f:d0:
72:01:c2:b9:86:b4:d0:e8:dd:3e:bd:0d:44:b6:d8:8d:a8:94:
ea:63:93:34:2b:d8:22:7f:16:e8:4d:a3:4e:25:bf:17:46:47:
cc:75:1c:60:65:6e:9c:4a:da:88:68:19:c2:a5:d3:1c:b8:7e:
8c:11:67:d5:68:4f:7d:48:d8:b6:72:f5:00:34:c7:72:60:1e:
b0:9b:69:c9:00:a4:95:95:ca:30:5c:30:a2:36:6c:7f:f5:99:
6b:47:1e:fd:57:b9:5e:61:41:80:67:af:91:dc:77:df:61:68:
c2:1f:0e:a3:f8:7e:21:48:ff:16:d6:7c:6f:15:b5:35:fd:83:
52:20:09:af:43:a0:f8:e1:75:2b:c0:d4:95:2b:9d:6d:9d:28:
3a:d0:a3:22:5e:00:59:dc:4a:83:07:8c:5b:46:c4:f8:c4:49:
f7:a3:96:21:f6:4a:75:2e:81:a5:96:8e:24:7a:d1:49:4d:ca:
c3:ff:34:73:91:13:c8:9d:2b:34:b7:28:2c:4f:24:0a:dd:99:
0b:81:e7:92:81:8b:d9:8e:b6:e8:1c:5f:74:cf:82:e9:ee:83:
9a:dd:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:30 2026 by rpki-client