
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json)
Hash identifier: d3aJG+Q3ImsgMt3vgiDcI1M334cG8/gUydmCWZGsvMM=
Subject key identifier: 8B:EC:AA:BD:63:5F:0F:0D:A5:19:07:BD:58:CB:9E:8F:6D:F4:39:C7
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
Manifest number: E2
Signing time: Mon 11 May 2026 06:41:04 +0000
Manifest this update: Mon 11 May 2026 06:41:04 +0000
Manifest next update: Mon 18 May 2026 06:41:04 +0000
Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: L/jLnvGt4BoaNWjzONBXJwZY7oqWR42v04dfmXPI6Eo=)
2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: MMDAkBT8dwrfvYzJiNfMzsz7yHu7krdnJt0J0a8S0+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Validity
Not Before: May 11 06:41:04 2026 GMT
Not After : May 18 06:41:04 2026 GMT
Subject: CN=6a017a00-b3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:a7:ca:95:0c:c3:46:49:62:e5:c1:ab:52:
c6:f5:5c:f1:18:1e:88:ca:22:b0:5f:cb:68:62:ad:
80:d4:a7:d0:78:20:e8:c2:ba:c5:36:f1:21:e9:ca:
63:c7:35:0e:a9:bd:f5:07:a3:7c:e6:77:91:e6:3a:
2f:9b:b8:8f:2a:4a:ae:dc:fa:c6:bd:b2:75:54:6d:
de:e1:c9:ae:0b:04:89:b4:6d:1a:c3:62:56:72:96:
a4:72:09:ea:5b:b4:ab:82:31:c7:d0:fd:77:e9:09:
7c:03:d0:b4:30:9e:de:53:a6:c6:41:df:18:7a:e6:
fc:ff:05:b4:ff:c1:ae:56:cf:f2:e6:b2:5f:91:2a:
d9:39:4c:6b:e4:26:fd:95:38:02:f2:c0:ed:04:15:
b5:9c:04:94:c5:5a:5e:95:8e:17:79:a3:0a:95:20:
1b:88:d3:07:2d:f3:57:40:41:87:ef:78:45:66:3f:
b1:2c:68:29:8f:1d:c1:a4:e2:be:63:f6:fc:94:ed:
1b:c5:cf:dd:a4:b1:c1:17:cf:01:5d:33:6a:f5:00:
ab:93:4a:04:95:5c:39:2d:f9:2c:07:1f:3e:c2:70:
f1:09:89:c2:ba:51:e7:75:e4:cb:65:af:c0:db:3c:
96:ff:86:2c:b5:23:f2:83:11:c1:4d:4b:ad:e1:1a:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:AA:BD:63:5F:0F:0D:A5:19:07:BD:58:CB:9E:8F:6D:F4:39:C7
X509v3 Authority Key Identifier:
keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e0:c0:c5:d2:b3:fc:8b:7b:af:fb:c9:a6:88:2c:a3:b2:34:
40:5d:b7:48:cd:8c:e7:56:8b:ae:5e:65:1d:4c:bc:07:17:0b:
07:8a:81:1b:d3:bd:27:b3:4c:4a:b9:af:04:3f:27:5d:a4:af:
be:1c:02:78:93:53:c9:7f:8c:9b:4a:3c:5c:a1:c0:05:bc:9f:
73:ca:0c:fe:6e:58:5a:f9:e0:3c:e6:ff:88:f5:39:aa:86:c9:
82:08:f8:bb:24:64:77:c4:0b:fb:b5:a2:82:12:13:bd:c2:a4:
54:f9:33:25:b6:e1:23:02:28:1f:dc:6c:44:cb:ec:13:28:f3:
b9:de:a2:60:ce:5d:1e:b2:33:91:5f:6f:f3:24:c6:4e:f3:00:
e1:5d:ce:10:44:9a:4e:52:7b:20:cc:1f:5b:9a:1e:e5:79:aa:
69:6a:f8:c6:ac:18:72:9b:d8:c2:36:fe:33:61:c6:dd:82:1f:
ae:55:42:d2:63:b9:34:6b:07:20:34:4b:3a:1c:c2:f9:b5:6d:
e0:db:d9:0e:ae:ef:36:b8:28:c0:4b:24:9d:72:c1:63:13:43:
eb:26:a5:6a:aa:ae:07:0f:33:4f:29:79:8f:09:d3:55:e5:ff:
19:0b:b2:cf:fc:88:2f:7e:46:36:e5:18:ad:1b:ab:6a:d3:40:
a7:fd:29:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA3NjkxMTAvBgNVBAUTKDJGQ0IzQzI1NTY1Qzk0MDQxN0JFRTJBQUY4ODM4Q0U0
MzNFMkI4M0EwHhcNMjYwNTExMDY0MTA0WhcNMjYwNTE4MDY0MTA0WjAYMRYwFAYD
VQQDEw02YTAxN2EwMC1iM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmJSnypUMw0ZJYuXBq1LG9VzxGB6IyiKwX8toYq2A1KfQeCDowrrFNvEh6cpj
xzUOqb31B6N85neR5jovm7iPKkqu3PrGvbJ1VG3e4cmuCwSJtG0aw2JWcpakcgnq
W7SrgjHH0P136Ql8A9C0MJ7eU6bGQd8Yeub8/wW0/8GuVs/y5rJfkSrZOUxr5Cb9
lTgC8sDtBBW1nASUxVpelY4XeaMKlSAbiNMHLfNXQEGH73hFZj+xLGgpjx3BpOK+
Y/b8lO0bxc/dpLHBF88BXTNq9QCrk0oElVw5LfksBx8+wnDxCYnCulHndeTLZa/A
2zyW/4YstSPygxHBTUut4RqVzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvsqr1j
Xw8NpRkHvVjLno9t9DnHMB8GA1UdIwQYMBaAFC/LPCVWXJQEF77iqviDjOQz4rg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDc2OS81NDU2ODhDQUZC
MjQxMUVGQjc2QjlGNEJDNEY5QUUwMi9MOHM4SlZaY2xBUVh2dUtxLUlPTTVEUGl1
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDc2OS81NDU2ODhDQUZCMjQxMUVGQjc2QjlGNEJDNEY5QUUwMi9MOHM4SlZaY2xB
UVh2dUtxLUlPTTVEUGl1RG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB+DAxdKz/It7r/vJpogso7I0QF23SM2M51aLrl5lHUy8BxcLB4qBG9O9J7NM
SrmvBD8nXaSvvhwCeJNTyX+Mm0o8XKHABbyfc8oM/m5YWvngPOb/iPU5qobJggj4
uyRkd8QL+7WighITvcKkVPkzJbbhIwIoH9xsRMvsEyjzud6iYM5dHrIzkV9v8yTG
TvMA4V3OEESaTlJ7IMwfW5oe5XmqaWr4xqwYcpvYwjb+M2HG3YIfrlVC0mO5NGsH
IDRLOhzC+bVt4NvZDq7vNrgowEsknXLBYxND6yalaqquBw8zTyl5jwnTVeX/GQuy
z/yIL35GNuUYrRuratNAp/0pFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:04:54 2026 by rpki-client