
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
File: DB8k6eYChXae9hTPqBPuUayemP4.mft (raw, json)
Hash identifier: 1CxvOWJAbp2XbgPnQB11AJqmOprLpfYgKje1YnM8tS8=
Subject key identifier: 95:4A:9B:81:99:54:7F:F1:30:DF:89:2C:EE:9D:FC:AA:00:4E:9C:EC
Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE
Certificate issuer: /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
Certificate serial: 0701
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
Manifest number: 06F8
Signing time: Thu 26 Mar 2026 21:52:58 +0000
Manifest this update: Thu 26 Mar 2026 21:52:57 +0000
Manifest next update: Thu 02 Apr 2026 21:52:57 +0000
Files and hashes: 1: DB8k6eYChXae9hTPqBPuUayemP4.crl (hash: y/3KN2sYeMP+cwLi5sx4sr7wycs3g6K3HslhbQJdKy8=)
2: 26F67E0A842011EB8A4C635AC4F9AE02.roa (hash: ioX0Rrcupy/Da/JHKeAPMLqGB0R4pScdrEz6YhjJBxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl
rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793 (0x701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E754F, serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
Validity
Not Before: Mar 26 21:52:57 2026 GMT
Not After : Apr 2 21:52:57 2026 GMT
Subject: CN=69c5aab9-3af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:32:f6:8e:99:46:50:9c:60:37:07:7b:84:
9e:23:84:78:cd:30:28:cb:32:15:9f:98:41:e0:85:
67:fc:4b:5a:bb:a1:ff:40:ff:b2:14:d4:0b:07:6b:
e5:fe:38:5f:62:2b:00:1c:42:16:80:c5:39:f1:93:
d6:eb:8d:3e:33:a0:69:1c:e5:07:db:a1:b5:9c:a9:
5e:79:f7:63:fb:e1:1b:ea:ab:f2:b4:b4:3f:ae:6e:
84:18:b5:0b:42:fb:84:f0:c9:7d:8b:6c:3e:b6:e4:
f6:a6:6e:e1:02:cd:fa:9d:f7:25:7f:ed:a4:e8:b5:
3d:bd:21:c9:80:93:8e:34:8e:b8:bf:e5:df:38:64:
bc:19:9b:1c:13:0a:f9:d5:7c:ed:11:97:5f:86:ae:
98:b4:84:3c:9d:69:b6:a6:88:98:7c:b6:1f:6d:61:
79:6d:e8:15:5a:90:4d:7b:85:4a:d1:2f:8f:ec:68:
0e:f4:64:93:38:2c:94:10:7d:40:c1:16:85:c9:5f:
32:66:e3:8e:97:46:00:33:74:da:93:ff:fa:d2:16:
90:b7:99:11:97:51:3e:35:41:fe:58:a7:f9:6a:15:
1d:ba:ad:0a:91:f5:aa:be:c5:64:cb:2c:b5:b8:2f:
a2:24:f4:ab:46:7a:e4:f7:fa:6d:d2:8f:80:81:33:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:9B:81:99:54:7F:F1:30:DF:89:2C:EE:9D:FC:AA:00:4E:9C:EC
X509v3 Authority Key Identifier:
keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:7f:0d:f3:e0:40:b9:dd:c7:4f:82:4d:e2:5a:93:b0:99:8c:
dc:88:a4:63:11:0a:b6:fc:ee:fe:66:e5:df:0e:13:ee:4f:a5:
8a:37:6c:16:4d:05:70:94:28:73:71:5d:b4:00:d6:15:a9:38:
cd:97:e4:9b:9b:89:5e:43:34:e4:51:60:b4:36:77:0d:af:2b:
fb:11:22:d9:e4:1b:a0:83:db:fa:57:ea:69:16:df:ac:8d:8f:
96:e7:55:4f:b5:10:dd:b2:b3:1c:1a:a2:20:28:73:c5:0b:b5:
69:1e:af:5f:49:96:69:89:ff:44:4e:02:67:89:fd:61:92:c4:
04:b0:5d:c3:a5:a7:79:a1:f0:6c:9e:8f:82:57:0c:ab:fb:02:
58:e2:e3:63:63:42:3c:d5:07:92:35:28:7f:28:00:9e:01:27:
c7:8f:94:39:6b:02:83:47:7d:be:12:b2:ff:96:6b:bb:8e:72:
89:3a:11:3c:00:82:6f:12:ea:c0:55:fd:6f:8f:9c:66:a6:37:
6d:20:36:59:56:3f:ab:63:0a:0a:27:06:de:01:e9:0f:d2:51:
ec:4c:a9:96:2f:7a:6e:8c:a9:b3:3b:78:59:c6:6c:fb:b0:2b:
f2:87:58:b2:fd:45:59:a6:ae:41:e1:fd:cc:c3:db:f1:a9:0d:
01:b9:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:08:00 2026 by rpki-client