
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json)
Hash identifier: D31JBtzW3PeDk9H59yhSv1x/crjwWikaAdhdYRovbQg=
Subject key identifier: 00:47:A7:04:4A:97:6C:51:8B:1B:C1:8B:6F:AA:CF:A2:08:02:5B:83
Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07
Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
Manifest number: 028E
Signing time: Wed 13 May 2026 01:45:18 +0000
Manifest this update: Wed 13 May 2026 01:45:18 +0000
Manifest next update: Wed 20 May 2026 01:45:18 +0000
Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: UjcVRAEAUOBkHM+8rSguFqmGvIYj05jg/NMcTNZBLyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl
rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07
Validity
Not Before: May 13 01:45:18 2026 GMT
Not After : May 20 01:45:18 2026 GMT
Subject: CN=6a03d7ae-f8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:71:f5:a7:e8:9f:18:e2:e0:7b:72:a0:39:
d7:86:96:73:40:61:16:17:4e:b9:5a:32:6b:c6:5a:
60:1e:f2:f1:a2:be:77:9f:ab:46:4b:3b:18:e3:98:
40:c9:cd:09:c3:58:e0:e0:21:0f:3b:6f:51:33:f4:
cb:f1:dd:7b:0b:c1:95:b8:19:89:79:54:3f:63:0f:
05:bd:92:00:b9:8c:96:ff:8d:d7:19:87:21:53:60:
dc:57:4f:af:d1:2d:8b:ef:91:97:3d:f8:aa:ce:f6:
af:61:0a:20:d8:9b:29:f5:60:c9:86:4e:de:2a:f8:
fd:bb:36:fb:34:64:c1:14:94:cd:56:ce:28:6f:5d:
c0:aa:a1:47:00:58:91:8b:7b:cd:3d:eb:19:c0:53:
af:29:a6:c1:d5:57:5f:20:b5:f9:23:9d:78:85:fa:
f1:af:a7:c2:49:d0:08:11:02:66:0b:fe:03:47:c8:
8a:00:00:fd:9f:93:ef:f2:42:4d:6b:f9:43:d4:70:
3c:63:2f:f8:68:32:16:b1:a5:34:18:4e:95:82:1c:
a4:0c:38:66:6b:9f:8c:16:af:f0:6e:b9:fa:72:8a:
19:96:c5:f1:c3:22:00:8a:54:b4:e2:18:c1:95:80:
54:32:76:48:30:e9:df:63:e2:e4:4f:8b:71:09:93:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:A7:04:4A:97:6C:51:8B:1B:C1:8B:6F:AA:CF:A2:08:02:5B:83
X509v3 Authority Key Identifier:
keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:8d:dd:10:05:90:dc:ea:96:89:80:ed:b8:5b:fb:9b:ff:99:
64:3b:76:46:d1:bc:fc:bb:5a:8a:5b:14:74:6a:4e:22:b3:57:
b6:ef:ea:0d:bd:f5:b9:1f:1c:9b:99:7e:c5:cf:4a:45:ca:c3:
b8:48:a9:1f:ea:f1:59:08:2b:30:98:e1:92:f3:9d:2b:63:ab:
1d:5c:83:a1:d3:df:38:0e:7f:cc:f3:86:0a:ad:59:93:e9:f1:
a0:9b:44:d9:3e:f6:50:e1:fc:a6:90:b3:fa:b0:98:b8:8b:ae:
03:1e:57:9f:af:c7:a1:c1:96:ae:4a:eb:be:71:57:c0:a0:69:
28:03:22:2a:20:6f:2a:44:4e:bb:8e:56:41:9e:b3:3d:7a:48:
59:4e:19:e4:f6:f5:99:91:ac:8c:19:ef:ed:68:fa:41:dc:77:
7b:ac:f0:d8:d7:8a:06:ab:09:a1:18:98:91:2a:f8:1d:8f:88:
ea:e1:a5:d9:73:3f:e7:82:e8:c1:53:c9:14:f7:4b:6e:20:7d:
f7:89:aa:83:76:f3:ce:1f:88:54:f3:af:ee:91:ae:52:01:55:
ae:6b:38:8f:c2:6b:d3:6d:85:c5:7c:9a:26:9b:d7:ee:d0:11:
84:5a:2e:d8:c4:11:16:4d:e7:01:0e:45:9c:0a:c4:94:26:4a:
93:b1:03:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2
RkRBNTRCMDcwHhcNMjYwNTEzMDE0NTE4WhcNMjYwNTIwMDE0NTE4WjAYMRYwFAYD
VQQDEw02YTAzZDdhZS1mOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7EZx9afonxji4HtyoDnXhpZzQGEWF065WjJrxlpgHvLxor53n6tGSzsY45hA
yc0Jw1jg4CEPO29RM/TL8d17C8GVuBmJeVQ/Yw8FvZIAuYyW/43XGYchU2DcV0+v
0S2L75GXPfiqzvavYQog2Jsp9WDJhk7eKvj9uzb7NGTBFJTNVs4ob13AqqFHAFiR
i3vNPesZwFOvKabB1VdfILX5I514hfrxr6fCSdAIEQJmC/4DR8iKAAD9n5Pv8kJN
a/lD1HA8Yy/4aDIWsaU0GE6VghykDDhma5+MFq/wbrn6cooZlsXxwyIAilS04hjB
lYBUMnZIMOnfY+LkT4txCZNIHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABHpwRK
l2xRixvBi2+qz6IIAluDMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx
OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV
Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdY3dEAWQ3OqWiYDtuFv7m/+ZZDt2RtG8/LtailsUdGpOIrNXtu/qDb31uR8c
m5l+xc9KRcrDuEipH+rxWQgrMJjhkvOdK2OrHVyDodPfOA5/zPOGCq1Zk+nxoJtE
2T72UOH8ppCz+rCYuIuuAx5Xn6/HocGWrkrrvnFXwKBpKAMiKiBvKkROu45WQZ6z
PXpIWU4Z5Pb1mZGsjBnv7Wj6Qdx3e6zw2NeKBqsJoRiYkSr4HY+I6uGl2XM/54Lo
wVPJFPdLbiB994mqg3bzzh+IVPOv7pGuUgFVrms4j8Jr022FxXyaJpvX7tARhFou
2MQRFk3nAQ5FnArElCZKk7EDdA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:27:18 2026 by rpki-client