
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json)
Hash identifier: s9cmMwGfC4eRoClLJOa1ZzZfPoQ3QRuE2mv2j+CAb1U=
Subject key identifier: E2:F8:27:36:CA:C8:A4:26:62:A8:C0:3E:10:EC:59:87:DF:FE:8E:70
Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E
Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
Manifest number: DD
Signing time: Wed 13 May 2026 06:45:01 +0000
Manifest this update: Wed 13 May 2026 06:45:00 +0000
Manifest next update: Wed 20 May 2026 06:45:00 +0000
Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: y0bV+h/ZXJE3G0XnLLQj7JDOVPHtM3BPAXYq6TaMwzw=)
2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: duqpca6K+f3FNkiOtsfEqtlyMmxhg4ZVn8NvukwRevs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl
rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E
Validity
Not Before: May 13 06:45:00 2026 GMT
Not After : May 20 06:45:00 2026 GMT
Subject: CN=6a041ded-0f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:db:8e:15:96:05:70:c4:ea:5f:a5:b3:70:
7e:b5:aa:ad:84:60:e7:20:21:ba:c6:52:ee:e9:d2:
e4:2a:e2:66:4f:fe:5a:99:6c:b2:4e:57:1a:a4:f2:
36:c0:62:45:aa:6a:5e:e4:b9:51:fe:cb:a0:4a:1e:
71:b3:f9:99:ee:43:6f:d8:cd:41:c9:c2:5c:65:53:
ce:a7:f6:02:8d:22:04:47:18:ef:61:cc:9a:c0:21:
52:7a:a0:b2:cf:ed:a7:50:71:44:e4:33:c5:99:52:
5a:91:cf:24:56:a2:1a:84:4c:e7:4e:b1:a5:d9:ab:
56:e5:78:a4:08:b1:cb:8b:04:ee:5f:dd:f5:75:50:
2f:40:e8:01:e9:c5:4c:5a:e3:0a:47:09:22:3c:bc:
9b:55:87:1f:0b:50:67:28:9e:0f:5c:87:21:66:9f:
2d:90:97:93:a5:63:ec:fb:70:2b:d9:8c:db:17:f2:
ee:c4:24:65:bb:08:7a:ae:85:cb:91:49:bf:78:86:
7c:e6:1f:ac:6c:76:53:e5:6b:b4:52:4e:ee:bb:b2:
63:3d:d1:2d:ff:01:ac:2f:44:d6:0d:76:5d:5a:ba:
43:b0:f7:14:2b:ad:b2:b3:8f:9a:81:49:19:3b:9b:
b1:67:25:63:df:31:bc:ef:3c:62:7d:89:41:c2:54:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F8:27:36:CA:C8:A4:26:62:A8:C0:3E:10:EC:59:87:DF:FE:8E:70
X509v3 Authority Key Identifier:
keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:50:b1:67:de:c0:16:15:22:08:66:8e:f6:10:21:43:41:
33:28:8f:ff:30:aa:8d:e8:3a:5f:54:8d:79:20:ac:d1:7f:4a:
c5:5b:8b:5e:5a:42:b2:e9:00:41:11:83:aa:ec:61:56:db:bc:
55:cd:ca:eb:7f:6a:f9:ac:73:06:9b:00:f8:64:d4:f2:71:9b:
87:06:d7:21:4f:3d:c0:d4:81:bc:47:f9:62:50:6b:25:67:57:
c8:7b:34:1d:00:8d:c0:11:1d:ce:73:d5:51:ee:26:0e:e7:9e:
31:db:7b:f9:7a:d5:f7:62:7f:50:af:eb:ca:8e:df:25:0b:ec:
08:4f:53:4e:2e:b7:e2:03:67:6a:55:b8:b5:46:f1:e6:c7:84:
63:c1:b1:e5:e5:9b:8a:b9:e6:85:f9:af:f9:d8:1e:da:98:f8:
dc:8a:80:0f:37:1f:b2:1e:27:07:13:f2:98:e6:97:2e:ba:9f:
40:f6:8f:83:5c:61:f0:b6:52:27:7f:98:c9:bd:2d:d9:3c:36:
92:83:e6:c3:2b:e1:fd:ea:80:cc:c8:13:3b:25:46:98:78:0b:
9f:bb:d0:92:89:00:18:14:da:da:07:49:3b:db:48:50:30:45:
50:f6:32:1e:c3:a4:f0:e0:7d:11:69:a1:30:c5:eb:f5:9c:b4:
0e:71:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:32 2026 by rpki-client