
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier: ZYtu3Wtuk2y2GJ5PBQCAw9wAPGhGpPAIyFJZhqrlk18=
Subject key identifier: 00:C1:53:7B:0F:EF:E4:76:8D:6B:69:67:88:87:67:58:D0:B5:A4:02
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial: 085E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number: 0857
Signing time: Tue 12 May 2026 20:52:00 +0000
Manifest this update: Tue 12 May 2026 20:52:00 +0000
Manifest next update: Tue 19 May 2026 20:52:00 +0000
Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: fk3PEq6pAdZw8vs8/p4r7RlQLsk+RH84e0/itbvHVfc=)
2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: 5kk8+8xxY7wf2/VONut3pbRsEED9SU5VAXnPzakUeHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142 (0x85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Validity
Not Before: May 12 20:52:00 2026 GMT
Not After : May 19 20:52:00 2026 GMT
Subject: CN=6a0392f0-4224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:aa:3b:62:77:61:c5:a0:72:92:e2:bf:3b:
4c:d1:1c:a2:52:e3:e3:c8:40:a8:d2:60:37:e6:77:
69:28:07:2d:c4:8c:1b:a2:03:d8:08:e2:84:30:87:
c0:fe:9d:9d:a9:d7:20:c9:91:15:c7:b8:7b:0f:e8:
6a:ea:7c:23:e9:47:b0:b0:72:1e:4c:d1:69:3e:fc:
86:4c:48:35:42:69:dd:a0:6d:09:c5:57:31:90:28:
26:06:e9:1b:25:9d:8b:9b:e6:c5:a2:54:25:51:be:
05:8f:d0:ca:83:79:98:58:43:2b:1e:66:e4:75:a3:
12:46:9c:89:2c:4c:e8:b2:46:c3:e0:78:63:bf:cc:
d8:a7:18:c8:15:2b:93:8e:10:9d:94:ce:05:b9:61:
fd:55:71:3e:b0:a3:47:18:7a:46:e9:0e:e3:c8:0b:
89:c0:3f:4e:e9:bb:fa:55:eb:49:27:95:7b:98:60:
d9:a1:b8:62:33:f6:85:7f:c0:24:73:1a:f1:f7:7d:
7d:b3:53:77:8b:ef:d1:21:22:a2:b6:1f:21:8c:e2:
ab:75:52:c8:fa:f4:12:62:a8:ce:4c:cd:f9:09:2d:
93:30:7d:d8:f1:e0:48:9d:49:14:9a:84:a0:83:65:
c5:56:ac:ef:3e:c4:c6:fb:45:cb:8a:60:82:90:1a:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C1:53:7B:0F:EF:E4:76:8D:6B:69:67:88:87:67:58:D0:B5:A4:02
X509v3 Authority Key Identifier:
keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:98:4c:3a:5b:db:39:2b:4a:fe:0a:b2:f1:62:ba:c2:2d:12:
7c:02:ef:41:61:e7:95:fa:70:d5:0f:1e:7d:d2:04:e7:63:e0:
c2:f6:11:0b:1f:b2:8c:5e:dc:d3:6f:bc:dc:4e:b0:08:d1:1b:
d2:cb:07:b9:86:af:8d:fb:54:13:ec:b1:29:0a:d5:3c:1a:a7:
5a:63:57:77:e4:28:54:a1:25:58:b2:56:b3:31:2d:47:27:ef:
0f:44:d9:16:8d:53:f6:74:e1:bf:d1:e8:74:4f:53:f2:2e:7c:
9f:cc:ae:fb:c2:3e:a8:b6:f7:84:24:c5:cd:d1:db:44:74:82:
15:38:21:6b:05:47:68:33:8d:3a:14:4b:71:a2:07:11:b9:1a:
e8:be:15:d3:2c:87:9b:f1:5b:ee:d0:c2:39:12:80:69:20:36:
66:87:3d:38:d0:a4:5f:71:a5:aa:67:2d:ff:c9:7f:9e:b0:e0:
49:3e:5f:a6:a1:9f:42:ec:30:2b:1f:57:0f:3b:45:57:f1:23:
95:85:2f:ba:33:1b:cd:85:f5:88:a2:70:cc:55:52:92:13:f0:
be:08:cf:91:52:ba:70:28:73:08:36:60:32:65:f7:0e:d0:d0:
f7:c0:4d:6c:3e:6c:58:33:65:45:f7:ee:93:c9:eb:ab:52:fb:
cc:d4:5b:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB
RDU2NzhBNUEwHhcNMjYwNTEyMjA1MjAwWhcNMjYwNTE5MjA1MjAwWjAYMRYwFAYD
VQQDEw02YTAzOTJmMC00MjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnAGqO2J3YcWgcpLivztM0RyiUuPjyECo0mA35ndpKActxIwbogPYCOKEMIfA
/p2dqdcgyZEVx7h7D+hq6nwj6UewsHIeTNFpPvyGTEg1QmndoG0JxVcxkCgmBukb
JZ2Lm+bFolQlUb4Fj9DKg3mYWEMrHmbkdaMSRpyJLEzoskbD4Hhjv8zYpxjIFSuT
jhCdlM4FuWH9VXE+sKNHGHpG6Q7jyAuJwD9O6bv6VetJJ5V7mGDZobhiM/aFf8Ak
cxrx9319s1N3i+/RISKith8hjOKrdVLI+vQSYqjOTM35CS2TMH3Y8eBInUkUmoSg
g2XFVqzvPsTG+0XLimCCkBo90QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADBU3sP
7+R2jWtpZ4iHZ1jQtaQCMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz
OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV
WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ5hMOlvbOStK/gqy8WK6wi0SfALvQWHnlfpw1Q8efdIE52PgwvYRCx+yjF7c
02+83E6wCNEb0ssHuYavjftUE+yxKQrVPBqnWmNXd+QoVKElWLJWszEtRyfvD0TZ
Fo1T9nThv9HodE9T8i58n8yu+8I+qLb3hCTFzdHbRHSCFTghawVHaDONOhRLcaIH
Ebka6L4V0yyHm/Fb7tDCORKAaSA2Zoc9ONCkX3Glqmct/8l/nrDgST5fpqGfQuww
Kx9XDztFV/EjlYUvujMbzYX1iKJwzFVSkhPwvgjPkVK6cChzCDZgMmX3DtDQ98BN
bD5sWDNlRffuk8nrq1L7zNRbjg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:08:22 2026 by rpki-client