
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json)
Hash identifier: 3YqhNHwTFwXm0pzCY7BJka6PQVPF9Ppmmt2DT6QzVuI=
Subject key identifier: 79:27:8A:9D:37:72:61:01:52:7C:1E:74:D8:31:CD:A4:61:B5:CF:76
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial: 03B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
Manifest number: 03AF
Signing time: Fri 27 Mar 2026 00:27:38 +0000
Manifest this update: Fri 27 Mar 2026 00:27:38 +0000
Manifest next update: Fri 03 Apr 2026 00:27:38 +0000
Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: JI7IT3Nrn0UxMBdyKi8v8ExWjfjbqCmA4tMXe0fdpfs=)
2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: WbGGMYVbpJXDnL0JcrVJ6qdZ3VyHvFVqCSZIT3Dtr7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Validity
Not Before: Mar 27 00:27:38 2026 GMT
Not After : Apr 3 00:27:38 2026 GMT
Subject: CN=69c5cefa-1a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:42:18:e7:3c:bf:6f:29:92:79:54:8c:c3:
8e:f3:84:b3:00:10:48:97:3a:80:97:73:5a:ca:ce:
bb:20:6e:2e:4b:90:f8:74:ef:0a:6c:95:8d:22:3d:
95:6a:47:00:3b:c6:aa:97:af:6b:a4:7d:b2:c4:bb:
af:82:fb:da:82:ac:c3:15:78:73:35:19:cd:61:29:
c2:b2:0a:66:57:0d:2a:a2:83:a9:0f:7a:a9:9a:c8:
eb:ba:18:21:ad:ac:da:0b:fc:0d:ca:16:b4:bb:4e:
6b:c0:ee:85:79:f3:ec:1a:35:a1:10:e2:df:1c:68:
07:3b:e5:61:0c:aa:9a:9e:67:00:2e:86:ef:c9:f5:
86:e8:0d:f6:df:ee:cf:04:ab:bc:6a:b0:a7:cb:8a:
6a:ba:7e:e6:f5:93:b2:fe:88:fd:8d:5f:9c:7e:29:
17:be:7b:c2:be:ed:52:58:c0:a9:59:68:b6:65:f7:
76:d2:53:7f:df:a3:a0:20:74:11:68:d8:6b:21:a0:
0f:cf:6b:61:b0:36:34:2c:d7:70:be:4d:f0:ec:f1:
02:8e:02:a8:5a:50:94:a1:90:af:d2:90:0c:f1:d3:
41:34:fd:80:49:fb:19:1d:34:41:c4:4f:51:9c:02:
cf:22:98:d0:b4:ed:0f:e6:08:ad:c4:e8:3d:b0:c0:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:8A:9D:37:72:61:01:52:7C:1E:74:D8:31:CD:A4:61:B5:CF:76
X509v3 Authority Key Identifier:
keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:bb:f9:8d:76:ef:49:93:da:ee:e8:0d:6d:76:c8:81:e6:3c:
14:14:08:b4:c6:1b:06:ae:63:36:50:21:c0:d7:5a:bb:60:76:
06:0b:d9:48:17:0d:bc:77:2a:34:bd:3d:f4:9b:ae:87:1b:03:
6a:ea:07:b9:fb:29:c9:59:1c:b8:1d:da:8d:28:55:ca:7b:ab:
34:aa:5c:ba:e9:b1:21:41:66:0e:ab:fb:6b:b6:45:51:da:0d:
d9:7f:57:f4:3b:8f:df:33:17:92:ca:d0:6f:38:d4:8b:ab:b0:
ab:38:6f:b9:ff:2e:9c:b6:06:1d:f4:b6:e1:2d:53:d6:39:43:
d7:82:04:de:75:e6:20:c8:1d:c6:26:34:73:96:49:29:80:c3:
7d:be:8b:30:a3:d4:7c:00:21:eb:c8:ad:cd:b0:5a:89:0d:a6:
94:0b:fb:6a:dc:75:99:fe:6a:07:d4:8c:d5:30:d2:a9:52:fe:
2d:3f:7b:db:61:4e:c2:66:92:c7:00:7f:1e:90:bd:1d:e5:2a:
32:1d:0a:c0:c4:bc:9d:3e:4d:e5:35:66:f5:78:e5:1b:e5:0a:
ab:8f:0c:9c:20:65:d8:9c:0c:bd:7d:53:ab:60:e6:43:c7:40:
6e:f6:7d:47:a1:89:d0:65:01:2c:bc:df:9f:17:ac:bc:86:10:
50:2a:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:45 2026 by rpki-client