
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json)
Hash identifier: vTbVTVvkfbbOggYxBNs3OIk3+OeV66Tl1Samb6FXSH4=
Subject key identifier: 63:D2:9D:CF:AC:62:1F:0B:F3:BA:33:C2:37:62:0B:9A:93:CB:FB:D2
Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Certificate serial: 07D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
Manifest number: 07C5
Signing time: Thu 26 Mar 2026 21:16:16 +0000
Manifest this update: Thu 26 Mar 2026 21:16:16 +0000
Manifest next update: Thu 02 Apr 2026 21:16:16 +0000
Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: 3zhm2VTdipo+yZYiF0LFAR3v/SMa3XPP9thoTk96WOc=)
2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: SuS1yUPf+qwRjP/UZ+1uUuOJ9N61dBJV/b2hqurWcUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Validity
Not Before: Mar 26 21:16:16 2026 GMT
Not After : Apr 2 21:16:16 2026 GMT
Subject: CN=69c5a220-8dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:b5:ee:0e:45:cd:9d:4c:ac:cc:1d:4a:3b:
db:02:7d:0e:93:99:b8:81:4e:25:1b:76:19:35:53:
db:f4:d3:bb:30:0c:68:98:95:97:a1:26:b9:c9:a6:
9d:d0:5c:f1:c3:0c:04:f9:49:a0:9f:03:22:9b:47:
6a:61:ec:8e:a7:9f:fd:39:ba:72:72:c4:a5:7a:a1:
db:2a:25:aa:24:62:2e:aa:fa:3e:76:ed:74:a8:64:
89:2d:29:cb:4e:f3:87:8f:47:13:9b:1f:84:55:48:
fa:d1:07:c0:80:50:2c:b3:49:d1:8d:ba:c8:b4:1c:
64:d5:67:bd:d8:26:d5:e5:16:4a:1d:03:f1:80:24:
25:39:ea:e4:c0:cc:e3:9c:5b:4f:22:d3:db:bb:18:
3d:8c:25:e5:cc:f5:15:cf:34:66:d5:73:aa:a8:e0:
4c:e2:04:ee:23:e2:a4:30:e0:99:b0:ca:13:a4:d4:
91:a6:1d:b4:cd:2f:30:43:4d:a5:0d:c1:cf:28:01:
de:c6:01:1c:74:57:b2:0f:fa:0e:9c:a3:e0:24:b2:
10:4b:76:eb:bc:7a:53:88:0e:42:f8:ca:7c:fd:fb:
bd:59:79:6a:fe:25:3c:40:86:c2:9a:7a:39:83:1f:
3e:f5:11:b4:07:47:24:b2:23:7c:5c:b5:78:d2:ee:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D2:9D:CF:AC:62:1F:0B:F3:BA:33:C2:37:62:0B:9A:93:CB:FB:D2
X509v3 Authority Key Identifier:
keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e7:14:30:c5:f4:5f:ff:57:a7:29:11:66:27:b3:5c:45:91:e5:
d9:4d:78:cc:b8:e7:01:ff:14:44:77:72:c3:54:70:cf:0a:d5:
14:84:f4:61:c0:31:0f:a2:b0:93:2b:a5:ce:4e:68:92:5e:a3:
60:82:7b:5e:1f:09:03:58:db:9d:d6:76:d0:74:45:95:45:25:
3d:00:78:93:8c:67:79:cf:6b:8e:87:43:1c:83:ef:05:e1:c1:
08:cc:4b:fd:a3:ce:b3:8c:dd:fa:13:ed:4e:35:a1:14:51:4b:
95:e0:17:e4:c9:0e:22:72:1a:42:8c:8a:7a:f2:0e:28:d8:bd:
b0:92:b2:90:87:99:07:73:5c:21:23:71:72:0e:90:b9:2e:1b:
6c:b2:e3:60:a2:2b:ed:78:fb:5f:63:0c:e6:db:15:d5:79:48:
08:74:be:5c:a1:11:99:a1:52:a7:db:ed:45:5d:3a:a1:3a:78:
82:ce:5d:0a:0f:06:f6:7c:b4:61:f7:49:14:ef:dc:a7:43:51:
a3:20:92:fe:04:3a:f0:a9:00:cb:1e:e7:18:2f:4f:7b:26:a5:
4e:81:ec:be:91:9f:af:68:af:9c:6f:b3:0c:fe:24:0c:15:cb:
85:aa:e5:59:18:93:b9:38:84:62:77:a6:e9:3b:ca:d3:95:04:
18:f3:5e:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz
QjM1NDVDOTcwHhcNMjYwMzI2MjExNjE2WhcNMjYwNDAyMjExNjE2WjAYMRYwFAYD
VQQDEw02OWM1YTIyMC04ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPq17g5FzZ1MrMwdSjvbAn0Ok5m4gU4lG3YZNVPb9NO7MAxomJWXoSa5yaad
0FzxwwwE+UmgnwMim0dqYeyOp5/9ObpycsSleqHbKiWqJGIuqvo+du10qGSJLSnL
TvOHj0cTmx+EVUj60QfAgFAss0nRjbrItBxk1We92CbV5RZKHQPxgCQlOerkwMzj
nFtPItPbuxg9jCXlzPUVzzRm1XOqqOBM4gTuI+KkMOCZsMoTpNSRph20zS8wQ02l
DcHPKAHexgEcdFeyD/oOnKPgJLIQS3brvHpTiA5C+Mp8/fu9WXlq/iU8QIbCmno5
gx8+9RG0B0cksiN8XLV40u6V1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPSnc+s
Yh8L87ozwjdiC5qTy/vSMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1
RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY
SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz
a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA5xQwxfRf/1enKRFmJ7NcRZHl2U14zLjnAf8URHdyw1RwzwrVFIT0YcAxD6Kw
kyulzk5okl6jYIJ7Xh8JA1jbndZ20HRFlUUlPQB4k4xnec9rjodDHIPvBeHBCMxL
/aPOs4zd+hPtTjWhFFFLleAX5MkOInIaQoyKevIOKNi9sJKykIeZB3NcISNxcg6Q
uS4bbLLjYKIr7Xj7X2MM5tsV1XlICHS+XKERmaFSp9vtRV06oTp4gs5dCg8G9ny0
YfdJFO/cp0NRoyCS/gQ68KkAyx7nGC9PeyalToHsvpGfr2ivnG+zDP4kDBXLharl
WRiTuTiEYnem6TvK05UEGPNegw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:38 2026 by rpki-client