
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: zkW8EhH0mXEmne+P+X2fLHaxwE0GAZNArahCoPQWuVE=
Subject key identifier: B9:EC:4C:28:80:25:27:EA:9D:64:8D:90:63:DA:59:DF:20:FF:EB:2E
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 2505
Signing time: Tue 12 May 2026 15:46:27 +0000
Manifest this update: Tue 12 May 2026 15:46:26 +0000
Manifest next update: Tue 19 May 2026 15:46:26 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: TOusNpQBX5hy/p80hXj8GGSas6W9JFrXsQm5V89syWo=)
2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: PfTF6IXqi6hNaj695aj5hjmooNnHrg5/s0sD8is22ZQ=)
3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: 2IWuioS/nodqvph5IdFPsL2bu4c6VdvpfkdYbMecCC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9512 (0x2528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: May 12 15:46:26 2026 GMT
Not After : May 19 15:46:26 2026 GMT
Subject: CN=6a034b53-7f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:29:39:a0:e2:a5:43:35:8c:8c:52:53:c0:
ae:2c:e0:c7:1e:db:01:2b:7c:41:8b:2c:f6:bc:8a:
fa:82:82:c4:d3:00:ad:61:f3:c7:1d:a1:d1:7d:39:
32:5f:36:44:4a:19:70:ac:1a:21:b3:3d:a4:b0:3f:
8f:82:ea:03:ca:b1:a3:5f:12:cc:d6:be:21:53:9f:
b8:59:f6:65:4e:18:7a:b9:3d:1f:18:d8:f2:fb:a2:
08:f8:e9:1f:63:ba:16:2f:a8:01:44:63:64:1c:fe:
1b:85:e4:79:c5:43:ff:ba:6a:56:33:8e:ec:73:ef:
80:2a:12:47:4d:53:17:5b:62:27:a4:fc:59:e8:8c:
31:35:ca:fc:32:e2:91:2b:91:1b:c0:d9:3f:95:c9:
c5:29:2b:7b:25:cc:3b:d8:27:09:7d:35:2b:81:6d:
66:b0:8e:87:bb:1f:38:14:88:d8:d4:40:32:46:e3:
9a:b5:6e:7e:bb:72:34:df:36:72:53:33:92:b8:b9:
20:fb:1d:a4:f5:8d:45:d4:55:b4:ae:08:c0:30:d6:
12:9b:e4:eb:ca:7b:9a:b4:fc:b5:09:ea:7d:83:12:
3b:a5:85:7b:98:d1:e4:17:bc:92:d9:9c:b3:86:46:
18:30:c3:33:c1:29:32:39:fd:79:0c:20:29:16:7d:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:4C:28:80:25:27:EA:9D:64:8D:90:63:DA:59:DF:20:FF:EB:2E
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:c0:bf:e3:01:9d:61:b0:f6:ae:39:01:e5:f7:c7:cf:75:
b7:e1:4e:8e:86:89:16:85:61:86:4a:b0:d0:07:01:10:6c:23:
64:d3:33:f1:16:b4:34:3b:dd:61:92:e0:a0:5c:01:d1:44:73:
cd:8f:56:d2:51:5f:16:1b:6a:b9:72:fd:6b:ff:91:50:bc:e1:
97:97:89:a6:f5:eb:8f:16:2f:d2:f4:2d:99:99:e6:6b:f2:52:
6f:ee:35:f2:71:76:83:83:62:6e:f8:91:c9:96:1b:82:30:68:
55:37:7d:d1:bd:16:50:5d:6e:c2:a1:ca:8f:0b:1a:8e:69:e9:
0d:1d:e3:ed:16:fd:f2:60:be:ae:ff:11:7e:c8:26:e1:b4:ee:
1c:f0:4f:13:e4:f0:26:c8:b8:23:ba:cd:14:54:2d:bb:94:a3:
e2:51:9f:a4:2c:2b:f8:36:c5:05:23:86:0b:6e:47:45:9b:1f:
d3:60:cd:13:1f:9b:05:40:94:e4:39:5d:78:1e:f3:6c:dd:76:
c6:3d:e0:b5:f1:7c:7c:b4:3d:54:6b:88:89:f5:80:ab:30:d3:
10:72:36:64:e3:e9:17:ea:f8:27:ce:46:be:e0:2e:59:1a:36:
ea:c2:80:aa:e2:d0:20:4c:f2:d1:04:fb:3f:45:66:66:77:86:
da:c8:55:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy
ODM1MkFFMjgwHhcNMjYwNTEyMTU0NjI2WhcNMjYwNTE5MTU0NjI2WjAYMRYwFAYD
VQQDEw02YTAzNGI1My03ZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpQpOaDipUM1jIxSU8CuLODHHtsBK3xBiyz2vIr6goLE0wCtYfPHHaHRfTky
XzZEShlwrBohsz2ksD+PguoDyrGjXxLM1r4hU5+4WfZlThh6uT0fGNjy+6II+Okf
Y7oWL6gBRGNkHP4bheR5xUP/umpWM47sc++AKhJHTVMXW2InpPxZ6IwxNcr8MuKR
K5EbwNk/lcnFKSt7Jcw72CcJfTUrgW1msI6Hux84FIjY1EAyRuOatW5+u3I03zZy
UzOSuLkg+x2k9Y1F1FW0rgjAMNYSm+TrynuatPy1Cep9gxI7pYV7mNHkF7yS2Zyz
hkYYMMMzwSkyOf15DCApFn1awQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnsTCiA
JSfqnWSNkGPaWd8g/+suMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0
OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1
NEN6STJSa3B0dFVvTlNyaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXrLAv+MBnWGw9q45AeX3x891t+FOjoaJFoVhhkqw0AcBEGwjZNMz8Ra0NDvd
YZLgoFwB0URzzY9W0lFfFhtquXL9a/+RULzhl5eJpvXrjxYv0vQtmZnma/JSb+41
8nF2g4NibviRyZYbgjBoVTd90b0WUF1uwqHKjwsajmnpDR3j7Rb98mC+rv8Rfsgm
4bTuHPBPE+TwJsi4I7rNFFQtu5Sj4lGfpCwr+DbFBSOGC25HRZsf02DNEx+bBUCU
5DldeB7zbN12xj3gtfF8fLQ9VGuIifWAqzDTEHI2ZOPpF+r4J85GvuAuWRo26sKA
quLQIEzy0QT7P0VmZneG2shV9w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:26:48 2026 by rpki-client