
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier: hXS5T60vCXv0AiQ/1sfzOO1aURyHuQVfbUETyE1oRDg=
Subject key identifier: AC:94:A2:52:67:FD:4F:7A:B0:25:78:EB:28:21:FB:01:EA:EC:A1:25
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial: 0771
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number: 0769
Signing time: Sat 14 Nov 2026 21:35:16 +0000
Manifest this update: Sat 14 Nov 2026 21:35:15 +0000
Manifest next update: Sat 21 Nov 2026 21:35:15 +0000
Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: brFXsEMB5THCJpEOptiwFVLbw/KBfbIQJRZhg3kssyM=)
2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: ette4LAwg26M5pj2ePPXPSItzIGGrF3PbLrnLGwJk9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Validity
Not Before: Nov 14 21:35:15 2026 GMT
Not After : Nov 21 21:35:15 2026 GMT
Subject: CN=6af8d413-9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:5c:27:61:a2:95:5c:30:29:08:78:20:67:
6c:fc:7c:c9:50:a6:5a:cc:30:58:fb:da:1d:a7:c2:
27:34:41:14:96:58:1a:f2:41:96:ee:1f:62:38:5e:
9d:19:ab:2e:65:ce:f8:03:f6:79:4b:52:1f:6c:09:
7c:ed:b4:29:7f:e4:25:71:8c:ea:98:80:b3:a7:bb:
b2:b6:cd:1d:ff:ff:de:aa:a7:45:b4:e8:9c:3f:40:
7b:02:1f:6b:bb:63:fc:a5:00:56:44:c5:41:ec:1d:
47:2c:d7:37:1d:06:d9:e2:fa:89:a0:1a:c0:5e:c4:
b4:40:0c:96:3e:77:4d:f8:f7:10:97:71:54:e6:da:
7b:cb:1a:41:b5:f1:db:90:53:cf:e2:73:3b:9e:38:
1f:6a:b6:4c:42:0c:c1:24:4a:16:fd:87:51:65:eb:
dd:aa:8d:6c:b4:ec:96:b0:8a:77:6f:ee:4c:d6:ff:
99:01:e3:da:e7:75:cd:50:25:8f:0d:80:e0:d6:71:
42:46:0b:ce:94:0b:b7:81:db:34:22:87:87:2c:94:
24:7f:1e:6e:06:5b:4c:51:af:20:01:f6:c6:d3:0d:
3a:3c:eb:2a:52:4e:c5:86:61:05:4e:96:de:0d:43:
6f:be:e6:f2:4f:88:f7:dc:88:0d:02:32:99:a3:18:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:A2:52:67:FD:4F:7A:B0:25:78:EB:28:21:FB:01:EA:EC:A1:25
X509v3 Authority Key Identifier:
keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:ce:68:30:84:3a:2e:7c:d1:4e:d7:e5:99:c5:f2:26:b7:
da:c7:c9:08:3a:8c:35:61:a7:40:7b:10:ee:81:24:17:4d:47:
cd:34:9b:b3:90:a8:a8:a8:ce:ea:78:61:ec:3e:9f:82:28:c0:
f2:db:92:41:be:cd:80:3e:fc:14:ab:b4:26:d9:fc:87:0c:04:
e3:08:fd:3c:3e:49:05:1f:24:1d:ec:df:55:cf:6a:b7:54:08:
b9:e2:bb:fb:f3:fd:73:87:bb:ee:9e:c2:de:0e:b9:e7:e0:50:
91:00:63:2f:ae:82:fc:f5:46:9d:b9:60:a0:02:e1:b8:6c:5d:
fb:14:0d:85:9e:22:3f:f2:f8:3a:4f:8f:1f:30:0d:31:7f:c8:
e5:b6:78:59:97:e4:84:68:8e:95:f6:3f:9e:ef:f2:12:9a:de:
cd:65:d1:f4:fb:ee:c6:e8:ac:2f:b5:d4:ca:95:d8:5c:5b:39:
7f:49:cf:c9:66:ba:21:55:15:09:d9:2f:c9:4e:80:06:74:cc:
a1:21:98:0e:8b:79:4d:7d:29:40:bf:ea:3a:54:a6:87:98:de:
25:c5:83:ca:38:16:45:7e:f4:ea:50:6b:b8:3f:2b:96:19:67:
f2:42:20:27:e0:23:e0:3a:ae:17:8f:71:58:99:7e:76:f5:ed:
07:b5:b3:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE0RUYxMTAvBgNVBAUTKEYxQjY1Qjc5NzYxNjM5NzM1MkVDQkQ0QTJDNzc0RkNG
N0VDNkQ0NzAwHhcNMjYxMTE0MjEzNTE1WhcNMjYxMTIxMjEzNTE1WjAYMRYwFAYD
VQQDEw02YWY4ZDQxMy05YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoStcJ2GilVwwKQh4IGds/HzJUKZazDBY+9odp8InNEEUllga8kGW7h9iOF6d
GasuZc74A/Z5S1IfbAl87bQpf+QlcYzqmICzp7uyts0d///eqqdFtOicP0B7Ah9r
u2P8pQBWRMVB7B1HLNc3HQbZ4vqJoBrAXsS0QAyWPndN+PcQl3FU5tp7yxpBtfHb
kFPP4nM7njgfarZMQgzBJEoW/YdRZevdqo1stOyWsIp3b+5M1v+ZAePa53XNUCWP
DYDg1nFCRgvOlAu3gds0IoeHLJQkfx5uBltMUa8gAfbG0w06POsqUk7FhmEFTpbe
DUNvvubyT4j33IgNAjKZoxhmRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyUolJn
/U96sCV46ygh+wHq7KElMB8GA1UdIwQYMBaAFPG2W3l2FjlzUuy9Six3T89+xtRw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTRFRi8yNjQwMTAwNjg2
MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09YTlM3TDFLTEhkUHozN0cx
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhiWmJlWFlXT1hOUzdMMUtMSGRQejM3RzFIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTRFRi8yNjQwMTAwNjg2MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09Y
TlM3TDFLTEhkUHozN0cxSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZZnOaDCEOi580U7X5ZnF8ia32sfJCDqMNWGnQHsQ7oEkF01HzTSbs5CoqKjO
6nhh7D6fgijA8tuSQb7NgD78FKu0Jtn8hwwE4wj9PD5JBR8kHezfVc9qt1QIueK7
+/P9c4e77p7C3g655+BQkQBjL66C/PVGnblgoALhuGxd+xQNhZ4iP/L4Ok+PHzAN
MX/I5bZ4WZfkhGiOlfY/nu/yEprezWXR9PvuxuisL7XUypXYXFs5f0nPyWa6IVUV
CdkvyU6ABnTMoSGYDot5TX0pQL/qOlSmh5jeJcWDyjgWRX706lBruD8rlhln8kIg
J+Aj4DquF49xWJl+dvXtB7WzlQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:45 2026 by rpki-client