
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json)
Hash identifier: aD0qdOp8EjsJwzh4xNCHjThGcpe9U0p5QX1rv4mAvhk=
Subject key identifier: 82:03:E3:E8:2D:E3:79:05:49:5A:13:6E:56:54:13:3F:BE:2B:A0:41
Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B
Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B
Certificate serial: 0D20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
Manifest number: 0D07
Signing time: Tue 12 May 2026 18:14:30 +0000
Manifest this update: Tue 12 May 2026 18:14:30 +0000
Manifest next update: Tue 19 May 2026 18:14:30 +0000
Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: RJ3O92rO5f8s7dO9eFdIgi/LE4cA/fhSLzlAZW75cGU=)
2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: DvZA6XJDkyHfkolYQVEDhxnUbcvdyFYpNYGE/Rx6mkk=)
3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: zG4D1s2xrlJsIzyQLjKkrbBcFvkHI/PRTbX5mMwZqTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl
rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B
Validity
Not Before: May 12 18:14:30 2026 GMT
Not After : May 19 18:14:30 2026 GMT
Subject: CN=6a036e06-f753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:74:02:b2:93:c1:e0:a7:c0:bb:f1:40:2e:
0b:2e:57:a5:68:e0:94:c8:f7:71:d2:18:d2:e9:43:
98:5e:8f:19:13:60:7e:d7:b2:0b:ae:b3:40:8d:2c:
b4:9e:55:f8:99:1c:74:96:30:c7:18:f0:b1:29:fb:
be:2a:2f:73:55:e5:ff:c8:65:d9:da:8a:a4:c7:f8:
01:c6:0b:16:95:d6:f6:bf:6f:8b:47:16:5f:c9:fc:
d1:e7:b2:9d:21:18:58:0d:91:52:d9:81:21:26:c0:
3e:c4:09:ed:1c:7e:b2:0b:8a:cc:54:26:3c:9c:4c:
89:4e:81:72:6c:75:b8:54:02:9a:54:0f:e3:23:e4:
eb:b3:c2:d7:ae:07:5a:15:00:be:15:81:d4:e4:07:
c3:93:72:5c:0b:83:56:32:bf:a3:e8:54:d3:09:06:
59:de:50:a1:fd:f0:80:03:42:5b:78:1a:3a:65:b0:
30:02:07:11:c9:ea:ec:e5:a7:c9:3e:eb:45:1e:61:
9a:52:37:f3:5b:54:81:0c:65:6d:8b:9a:d6:9e:30:
7c:26:a1:d9:b9:a2:bf:2b:88:27:e9:31:ae:39:20:
da:2a:85:59:a3:ca:93:08:aa:68:f5:79:08:19:6b:
fb:97:29:7a:dc:cc:13:d4:7e:db:4f:6b:17:ab:e8:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:E3:E8:2D:E3:79:05:49:5A:13:6E:56:54:13:3F:BE:2B:A0:41
X509v3 Authority Key Identifier:
keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:36:2b:a9:01:8c:a4:1d:d4:ff:8a:5d:4d:98:fd:0d:29:
28:00:0c:1c:a9:08:90:b8:00:b2:4b:cc:b5:ef:79:87:c9:fd:
81:36:94:6e:be:eb:ad:d4:ba:33:3e:ce:12:f2:e1:63:a7:83:
5e:92:ed:99:2c:6b:50:7c:bc:c0:e0:ae:38:4e:9a:04:a7:e7:
19:83:4a:cd:46:7b:7d:32:a7:80:41:75:36:ce:2f:ca:41:8f:
9a:7d:2f:66:35:03:06:5a:ef:6c:78:04:20:88:f4:ae:92:60:
24:b2:81:25:31:a9:03:b2:93:a5:10:c3:38:53:84:13:9a:60:
65:10:cb:26:1a:e2:d9:c5:e8:78:62:65:0c:96:44:f8:74:97:
13:0d:4c:25:62:94:b6:4a:be:62:60:09:c6:30:a8:6c:b6:bb:
00:66:8c:69:f3:72:c2:44:77:ef:8e:ea:23:44:e5:6b:92:8f:
62:46:18:e5:af:79:5c:fd:72:b6:fc:26:28:a8:39:21:9a:c8:
f6:68:d3:9a:1d:c7:45:a3:7b:59:da:06:5d:6c:60:bc:64:9f:
72:dc:51:f2:26:b3:c1:e1:59:31:13:84:01:24:03:b9:3d:a8:
7d:6f:ee:92:b9:71:1f:8f:cb:70:00:0b:61:dc:44:c2:fe:a5:
92:5e:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:52 2026 by rpki-client