
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier: /6ldKcl3FMzKb7ISL45bds05FaJHRsd0yhNR8/u0R0s=
Subject key identifier: 57:FB:04:A3:7F:F4:6C:A4:39:E6:80:2C:8D:8F:F8:A8:A2:40:44:1F
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial: 32A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number: 32A1
Signing time: Tue 12 May 2026 15:25:43 +0000
Manifest this update: Tue 12 May 2026 15:25:42 +0000
Manifest next update: Tue 19 May 2026 15:25:42 +0000
Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: QhbWbG5vEtdvOU1AHBKg/HiRpupwL+GNZ73PATFQ/vU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12961 (0x32a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
Validity
Not Before: May 12 15:25:42 2026 GMT
Not After : May 19 15:25:42 2026 GMT
Subject: CN=6a034677-28af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:77:ec:8c:85:a0:8a:82:16:d7:c4:d1:c1:
27:16:b4:d8:01:70:13:e8:9e:2b:f7:a0:bf:6d:3f:
4b:09:fa:c4:ab:eb:65:e7:cb:bd:f6:d1:5d:b8:03:
0c:f0:3c:84:59:40:07:15:95:b7:fd:00:fa:e1:3e:
d6:a0:84:df:13:13:3a:7c:8a:93:29:26:09:9e:67:
ed:8e:b4:98:f1:72:71:28:fd:77:52:72:25:5c:f1:
23:d5:0d:ba:bd:f3:9a:f8:ad:c1:d4:f2:c7:42:6f:
69:d1:08:65:ee:fa:01:ef:53:6e:9e:88:a6:be:29:
96:b6:47:f0:f6:c0:21:6f:cd:00:9f:8d:40:55:b1:
d6:63:9f:26:80:68:ec:ac:9f:03:63:d0:55:d4:09:
2e:1d:71:84:e5:45:8d:e6:d0:bb:61:18:c6:4f:81:
de:be:22:1e:e8:e0:3e:1e:9d:f3:e2:65:86:94:e8:
57:ec:77:ca:60:af:cb:16:f0:79:3c:fe:6c:10:63:
0f:de:fa:fa:e2:23:9c:4e:ea:3f:29:76:9e:81:79:
3b:3f:19:37:71:50:aa:d9:49:07:1f:b5:6d:ce:0b:
9f:13:b6:97:90:1f:c2:59:4e:26:bd:40:61:2d:0e:
78:b2:6a:63:51:41:49:d7:c6:1b:83:8f:18:44:d2:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:04:A3:7F:F4:6C:A4:39:E6:80:2C:8D:8F:F8:A8:A2:40:44:1F
X509v3 Authority Key Identifier:
keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a6:02:f6:1b:ec:9a:9d:a7:f8:0a:93:45:68:6f:1f:13:85:
95:35:0a:a7:56:05:fb:ce:8c:45:ab:61:f5:d1:9c:c1:2f:d8:
50:9e:55:e3:93:e5:7c:a7:cf:bc:43:35:1d:f7:d2:68:23:5d:
26:cd:d5:7b:51:37:7f:af:fc:e2:72:b9:7a:89:35:a8:df:55:
1a:56:35:c4:ce:b4:ad:02:75:90:9b:68:4a:71:35:b1:41:ff:
36:53:52:28:4a:7e:10:55:1f:e1:40:0b:28:04:53:8c:33:50:
51:37:4c:22:bc:6a:1f:ed:be:3b:7e:a7:eb:b7:9a:d7:b8:50:
45:7a:d5:7d:2f:ff:7c:bb:af:ff:3b:3f:75:33:de:2e:d7:16:
2d:38:f4:b6:51:4f:dc:59:c4:5b:d6:ca:55:ad:0b:0b:16:2d:
db:4d:2c:0a:f9:a5:e7:db:02:d1:f2:a4:29:c5:f0:cb:3a:de:
c3:7a:b3:5d:28:2b:c6:1a:a3:a4:39:86:6b:62:fd:c7:cb:91:
ea:fa:46:91:5f:f9:57:0c:9b:a0:a5:7b:56:01:b0:f3:b5:f7:
d8:a4:b5:8a:bf:1c:f4:ff:1f:21:ad:66:80:84:45:55:48:5c:
3e:75:43:86:bc:cd:4d:bf:5d:b8:25:83:3c:84:a5:33:98:be:
c3:4a:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:17 2026 by rpki-client