
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
File: 8fFj2FT-czviVA83o0T_alpayfY.mft (raw, json)
Hash identifier: LvwkeLmdHSlpHtVIuli/89nHsMemXCOGroqRCtu+eag=
Subject key identifier: 50:05:11:6D:5B:25:5D:00:34:B2:5E:8F:55:CE:20:DB:B1:1E:65:F0
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Certificate issuer: /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
Manifest number: 01C0
Signing time: Wed 25 Mar 2026 03:38:08 +0000
Manifest this update: Wed 25 Mar 2026 03:38:08 +0000
Manifest next update: Wed 01 Apr 2026 03:38:08 +0000
Files and hashes: 1: 8fFj2FT-czviVA83o0T_alpayfY.crl (hash: VOKVycp/ulmJJXzmR+I8ISdZ8XIdWcB5m3+PO1uZcbM=)
2: E84C2B9083D711EE871C4048C4F9AE02.roa (hash: ulWmZR//Cp/5ZRhCUJXQuusn5PcfSj8MZAxi2Z3a2FQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Validity
Not Before: Mar 25 03:38:08 2026 GMT
Not After : Apr 1 03:38:08 2026 GMT
Subject: CN=69c358a0-c9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:80:5c:99:ea:da:41:66:23:70:3e:c8:9c:
53:b4:86:27:27:19:75:47:69:78:0f:8a:11:6f:d5:
8a:ae:e6:59:d6:2a:9e:8d:24:c4:38:26:6c:1a:01:
e3:1b:a8:53:6f:89:cc:c1:f3:3a:2c:fc:62:07:25:
13:c7:9c:f0:14:7e:be:f7:42:11:89:0c:3c:4f:95:
23:34:9f:7e:81:6c:b1:c7:24:2d:1a:eb:0b:e0:14:
84:a0:ad:1c:ee:e2:f3:f6:a5:e0:53:91:17:26:1f:
95:f4:17:9b:29:6a:cb:65:37:b1:88:5c:4a:4a:a4:
db:e6:59:27:ba:15:4b:20:f8:4d:99:96:c2:07:36:
54:a6:5a:53:b8:71:cc:db:16:4b:c9:fc:e9:2e:dc:
36:d8:46:88:ea:76:f5:9b:53:3a:bd:f7:01:19:0f:
2f:79:f8:d6:7c:af:e0:c3:26:a9:3d:fc:62:3b:57:
a9:47:a6:cd:15:52:57:53:0f:86:ab:83:56:51:3c:
87:25:51:47:22:d7:2f:07:90:cc:b5:ef:52:4d:f2:
c4:b9:64:0a:7e:91:70:12:db:06:b1:c7:3e:3c:b7:
62:5b:f3:f7:78:cf:18:01:14:26:a2:95:da:f7:1e:
ac:b4:db:9b:a4:11:6c:b7:8d:a1:40:63:52:a3:20:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:05:11:6D:5B:25:5D:00:34:B2:5E:8F:55:CE:20:DB:B1:1E:65:F0
X509v3 Authority Key Identifier:
keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bd:6b:a0:9b:3e:17:25:a9:01:8b:4c:1e:e3:1a:29:d3:8e:
1f:70:2b:f8:83:cd:ba:9f:ce:c8:69:85:98:aa:ca:35:fd:50:
6d:13:c1:5f:5b:28:42:7b:28:1a:36:e9:69:d6:11:0a:a9:5d:
4d:1f:ea:0e:97:31:13:cf:6d:03:76:34:bf:79:2b:27:a6:5b:
08:97:4c:1e:c1:17:e9:ca:3d:97:bb:97:9e:1b:09:53:72:0d:
04:6d:f7:90:12:d3:6c:a9:df:79:d1:7d:2f:56:2b:da:05:f3:
3b:0b:f7:93:21:00:56:cb:64:4c:07:24:74:71:ac:a4:f7:e5:
61:d8:21:08:2d:8d:04:f1:6e:75:0c:a7:25:d1:91:2b:9b:e4:
72:14:f9:d5:60:02:ef:58:17:cb:ce:42:27:a4:f0:a4:90:42:
59:45:1a:09:1a:2d:24:c2:50:1d:53:e0:25:76:56:1f:c1:ec:
15:62:1d:12:aa:11:19:9d:5e:c9:08:b5:c9:af:74:7d:42:15:
1e:ea:7a:97:43:f7:2b:8b:06:bd:29:50:e7:80:02:c0:f0:5f:
77:8f:60:cd:af:c9:bb:84:cd:b5:0d:21:88:a5:11:cf:70:76:
88:41:a5:c5:b5:01:03:b1:04:88:4c:85:65:05:38:e3:1e:2b:
8e:e5:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:58:24 2026 by rpki-client