
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json)
Hash identifier: t/N1zEmR0loxYlHNKbaK/4epWFrt1I75BOQIySQ3dAc=
Subject key identifier: 4D:F0:99:00:7E:DE:40:8E:D5:21:CC:C2:58:E5:20:E0:9C:BB:D5:A6
Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Certificate serial: 07E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
Manifest number: 07DD
Signing time: Tue 12 May 2026 21:25:18 +0000
Manifest this update: Tue 12 May 2026 21:25:17 +0000
Manifest next update: Tue 19 May 2026 21:25:17 +0000
Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: /+U7T8BkEXho5avYkEjIsATfmgZA5Ac1IAHELJvQmQM=)
2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: SuS1yUPf+qwRjP/UZ+1uUuOJ9N61dBJV/b2hqurWcUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024 (0x7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Validity
Not Before: May 12 21:25:17 2026 GMT
Not After : May 19 21:25:17 2026 GMT
Subject: CN=6a039abe-2453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:52:e3:a1:74:1b:b7:cb:b6:b7:33:65:c3:
a7:86:75:74:23:1c:08:3f:5f:4e:7d:4a:56:3e:96:
25:c9:31:4c:7f:49:fb:2c:5f:da:79:52:b9:c4:cc:
54:f9:b5:43:32:07:e4:6a:ba:af:07:9a:b2:6d:aa:
72:06:94:3e:7c:e5:89:7c:17:53:17:bb:ab:e0:b0:
1b:3e:f2:a7:4b:ca:a4:73:68:29:92:3e:a0:09:bd:
3f:2d:b7:86:fd:d2:6c:1c:dd:52:5d:37:da:f4:a5:
63:bc:ad:f6:fa:f6:8e:28:8b:9b:af:d0:c7:6f:49:
b1:bd:67:4c:41:db:f4:d7:07:78:2e:10:43:fb:ff:
e7:19:bc:dd:b8:6a:e0:30:8b:d4:03:cf:9d:fc:ae:
59:56:5a:43:b7:45:fe:6d:8f:a7:f7:88:cb:41:9d:
a1:a2:e3:bf:5a:19:3f:11:85:e5:b7:38:89:e3:24:
77:04:dd:a5:48:e5:3a:64:6f:a3:7a:15:d0:c4:be:
70:52:d2:f2:a5:5a:39:cc:19:b5:e3:b6:93:70:c3:
8a:43:f0:e1:67:6c:f0:73:30:08:7a:b9:24:97:ed:
94:2f:a4:08:d8:2e:aa:a3:b8:1c:f1:c5:70:eb:87:
2d:3f:e9:eb:77:df:12:76:1c:81:a1:0a:40:49:b0:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:99:00:7E:DE:40:8E:D5:21:CC:C2:58:E5:20:E0:9C:BB:D5:A6
X509v3 Authority Key Identifier:
keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:16:e9:2a:06:7f:91:9c:26:d3:20:a3:ab:18:25:f0:d1:
8e:9a:f3:15:e7:26:8e:5a:dd:c8:a5:a6:b6:6d:9d:cc:9e:c3:
ed:5d:d0:de:9d:be:21:4c:b7:37:35:cb:c3:2f:f6:81:ac:85:
fb:8b:d6:c9:d3:8f:90:70:44:9a:34:65:48:f7:7d:e0:3b:fd:
08:05:2e:fa:1d:ee:d0:5e:f8:9a:09:c8:d6:7b:fe:34:aa:15:
b2:ee:b9:18:34:e8:36:c7:ce:17:f5:b1:84:cb:6c:9e:5d:4b:
53:c3:79:7c:88:e4:f5:fd:0d:6b:15:71:a3:3c:98:48:6f:63:
69:15:59:4a:5a:25:84:f8:bc:06:c5:26:a1:c3:f1:1a:04:89:
80:1c:3a:30:90:35:24:9a:ba:e5:bd:b3:30:f8:ac:0e:9a:e3:
97:7d:57:df:9c:1b:e1:ea:f3:de:3a:f5:57:f6:f9:8d:d9:be:
6f:40:ee:ef:de:64:45:16:56:34:20:5e:59:da:d8:c5:de:93:
11:fc:ef:84:78:be:f9:3f:9f:5c:80:cd:2c:28:25:34:cf:f4:
8f:70:7c:f9:71:94:9c:39:40:a5:33:1d:2c:7e:d2:3a:2a:58:
51:f0:f5:df:51:cc:c3:13:6c:56:3d:29:ef:29:79:61:e1:0b:
2e:37:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:07 2026 by rpki-client