
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json)
Hash identifier: OuUnnAu6gYBEFUUtrPcq8WlUyUsPX7qZfRN6l98mVDE=
Subject key identifier: FD:E8:86:A6:78:23:3D:6F:A3:E2:39:C8:64:06:C7:F8:26:D0:93:77
Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
Manifest number: 01DD
Signing time: Mon 11 May 2026 03:33:52 +0000
Manifest this update: Mon 11 May 2026 03:33:52 +0000
Manifest next update: Mon 18 May 2026 03:33:52 +0000
Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: VQ0yPSQSeVJsxCUL+vV3e6FkEjEJWZoVYiMSx+hzcVw=)
2: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: cqj/q7H7QDiXe6/7jCe/lSMVIy9mfeqMpQ15gsKTszI=)
3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: vnVgvIfqJI2mgZD/IhMpky2IouHtF6u2DvFf6UoUXp8=)
4: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: Dy/O9oy6clN/Qg+QCiirOL6pAskWHr8uHyrk6yzQtfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Validity
Not Before: May 11 03:33:52 2026 GMT
Not After : May 18 03:33:52 2026 GMT
Subject: CN=6a014e20-24c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:fa:75:be:2e:13:d4:8c:51:e8:e8:c7:5c:
77:35:a2:27:ea:90:d7:bd:6e:89:e3:92:6c:82:8f:
db:3a:79:fb:c3:4a:19:4c:6f:3b:7e:7a:48:97:99:
e8:73:32:29:d8:c7:06:d5:0d:d4:bc:e9:49:f7:14:
99:07:e9:0f:e7:3a:1a:39:ff:c6:90:51:c1:1c:b4:
da:d2:d1:79:4e:6d:b1:5b:29:ca:b9:9f:6e:e6:b6:
4e:63:1b:2a:f1:5c:75:1c:e2:c2:ff:70:b7:10:f3:
92:d7:84:30:ca:64:df:6c:71:43:77:fa:d5:51:a5:
be:60:28:51:fc:28:f0:7a:ed:32:c9:ef:f4:f1:ae:
9d:1f:81:85:82:33:28:1b:34:e6:9a:7b:c4:e7:0f:
82:70:8d:dd:d7:84:74:48:aa:d0:35:cc:b7:12:e9:
a5:ad:cc:57:fe:f2:0e:1e:82:76:f9:29:a8:a0:7a:
64:31:7f:a1:3a:50:e6:bc:bc:92:75:50:f3:84:c1:
a4:8b:a3:3d:95:db:da:e3:f4:11:34:44:4b:2d:00:
75:42:53:88:3a:aa:78:73:06:e0:7b:b4:b4:6b:4c:
ac:4d:8f:d4:44:74:64:84:f1:7f:7a:9a:46:73:10:
9f:62:ee:3e:5f:44:aa:76:21:8f:4a:b9:01:e3:17:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E8:86:A6:78:23:3D:6F:A3:E2:39:C8:64:06:C7:F8:26:D0:93:77
X509v3 Authority Key Identifier:
keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:c3:63:4d:09:c3:b8:76:c5:93:f1:4e:83:bc:18:fc:10:
32:a5:b1:6e:12:0c:b7:ce:52:22:65:96:74:88:39:0d:24:a5:
5b:3d:4b:ac:e6:8a:da:ed:02:db:0d:c4:fa:aa:ad:d8:89:90:
5a:01:a2:4d:48:08:ad:ba:00:84:96:f4:5c:dc:97:b0:60:66:
2b:93:7f:12:7c:63:14:7f:e5:01:d1:e4:24:e6:13:db:81:4a:
06:6c:2d:d4:68:f7:35:0d:5f:5d:9e:53:00:2f:78:3e:40:a2:
40:8f:33:cc:79:73:de:b4:be:12:a3:73:8a:5f:6d:96:72:f5:
ac:ef:0b:6a:fc:15:5c:3c:8a:93:3f:88:d9:37:1b:34:47:08:
7e:d6:01:0f:ee:4b:a4:21:8b:fb:56:13:89:a8:19:8c:d4:0d:
93:29:27:02:ed:f9:25:5d:4c:55:a7:a7:30:eb:8f:87:bb:23:
14:54:58:a3:d8:67:42:f3:d6:68:8b:48:51:fa:b4:ff:a3:a0:
5d:7a:18:a7:4a:22:93:7d:4c:41:96:70:66:40:b7:da:c3:15:
7a:0d:93:da:54:ee:b4:56:1a:0a:f7:7a:9f:52:1b:85:e5:74:
b8:2f:d6:fa:b9:de:88:c1:95:12:de:09:42:e9:2f:42:29:79:
cb:40:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:16:12 2026 by rpki-client