
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json)
Hash identifier: Mug7vvk7ZKDSfKf59oFhihBmyXcTFywY3ZtXbATCsvA=
Subject key identifier: 8A:50:A6:56:71:DB:3B:9B:74:A6:DA:F0:33:FF:8B:5C:4D:E6:83:DC
Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Certificate serial: 0807
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
Manifest number: 0D8C
Signing time: Tue 24 Mar 2026 20:54:20 +0000
Manifest this update: Tue 24 Mar 2026 20:54:20 +0000
Manifest next update: Tue 31 Mar 2026 20:54:19 +0000
Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: W96drQquwJ9Lt2ZT0EtFhQCokTDlBhbhKIE490PVU1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2055 (0x807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Validity
Not Before: Mar 24 20:54:20 2026 GMT
Not After : Mar 31 20:54:19 2026 GMT
Subject: CN=69c2f9fc-3e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:54:46:c2:13:18:a4:53:1f:1f:fd:7a:f1:
1e:5a:4e:20:2c:b3:93:c2:e8:d8:15:b6:c5:c5:81:
be:d4:38:21:49:63:c6:d8:4e:87:53:fb:65:20:73:
db:62:67:7e:c2:86:a3:b2:cf:65:68:70:f5:64:b6:
ae:ca:70:9b:99:38:94:ae:d9:ad:b7:a4:e4:22:fe:
c5:c7:06:52:75:8c:41:a3:1c:54:2a:7b:d5:9c:b7:
c8:41:25:72:68:af:9c:e1:4d:cf:c6:e2:f8:7a:88:
c3:66:18:86:9c:a4:89:a9:17:ed:66:5d:f3:62:a9:
c5:00:33:a5:f5:01:2c:98:ad:6d:8b:98:b3:cb:dc:
f4:7a:ac:de:56:16:f4:91:ab:30:bb:7d:d2:d3:98:
64:ea:ca:dd:2b:0c:ef:21:99:37:7c:fc:ad:64:1a:
ad:f7:4e:f7:83:96:68:7c:45:a4:cf:09:ab:e6:29:
c7:21:c6:cc:ad:b0:2b:56:a6:b4:e4:5c:76:b0:16:
5f:ee:2b:1e:fa:38:72:e6:da:99:db:ef:db:4c:ab:
da:b1:20:ef:e9:e4:66:71:f9:c9:4b:c7:a0:60:c9:
fa:b9:4a:93:c6:19:a1:ac:30:25:b8:8f:c8:43:70:
50:3f:73:dd:b1:d1:ab:f4:c4:cc:ed:ac:da:7a:20:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:A6:56:71:DB:3B:9B:74:A6:DA:F0:33:FF:8B:5C:4D:E6:83:DC
X509v3 Authority Key Identifier:
keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:9b:70:7f:be:60:80:1a:3e:75:e8:bd:69:f2:5a:3b:da:e2:
2f:a4:cc:0e:e6:64:f6:be:be:9c:6f:98:57:fc:10:91:0c:67:
25:c4:40:ad:1c:cb:ce:a6:7d:06:00:f4:9f:b0:6f:9d:85:78:
d4:b3:9d:13:a9:a1:c3:66:a4:20:56:48:66:f8:97:2e:56:0d:
bc:9a:71:e1:b2:03:97:ef:07:dd:80:f3:e0:4a:7d:0a:59:95:
64:57:13:a1:08:1c:1c:80:50:ef:d1:41:a4:b7:35:20:a2:9e:
4d:c6:30:28:8a:40:00:63:7b:36:c1:e5:76:3c:bd:6e:17:06:
5a:ce:be:47:a9:77:df:5b:f8:9b:44:a4:30:dd:61:01:f5:fc:
52:45:58:19:b8:9e:ae:16:0b:8e:36:f6:45:8b:1e:c8:27:e2:
b5:d3:46:a9:48:17:ab:c8:c9:68:20:3e:0e:ab:1c:97:22:0d:
01:8c:cd:f1:a2:48:0c:4e:6a:48:8f:07:3c:94:18:20:66:0c:
be:60:75:49:4d:b3:a6:a0:06:40:66:f8:4c:46:1c:f5:f8:28:
c4:0c:6a:78:f1:a9:df:5c:08:66:0f:79:17:42:1d:4a:bb:d0:
9d:18:4d:b1:00:d5:a5:9d:ca:cc:77:b7:c3:74:90:45:b7:52:
6a:19:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:09 2026 by rpki-client