
$ rpki-client -vvf rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
File: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft (raw, json)
Hash identifier: zNTyuJ0VVbMFetEamiUt1jAIG0FwtsWicTxRHgZpsww=
Subject key identifier: 1E:4D:19:E2:E4:DB:37:DB:14:6E:EA:7E:BF:85:60:6C:95:94:A7:16
Authority key identifier: F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
Certificate issuer: /CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
Manifest number: 0302
Signing time: Sun 19 Apr 2026 01:08:17 +0000
Manifest this update: Sun 19 Apr 2026 01:08:16 +0000
Manifest next update: Sun 26 Apr 2026 01:08:16 +0000
Files and hashes: 1: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl (hash: Jg2wjkth3qdBwZMipSAQylaEqO6i+kO6DR/jgaop3hU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 01:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243F8, serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Validity
Not Before: Apr 19 01:08:16 2026 GMT
Not After : Apr 26 01:08:16 2026 GMT
Subject: CN=69e42b01-8466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6b:ec:f9:47:5d:43:1f:a3:84:54:ba:92:ec:
ad:4a:06:cf:a2:ae:29:c4:f6:db:1b:fa:83:ad:bc:
32:70:0a:1d:0d:02:6c:46:96:ff:81:c3:b1:80:e7:
72:3b:06:ce:1e:33:c7:62:be:ed:54:8b:26:53:58:
fe:2b:ee:4f:7b:e7:b7:f5:72:22:d5:c7:b1:6b:d8:
cd:d0:c9:d2:02:d0:25:82:1c:97:5e:55:31:93:f5:
2a:16:4c:39:f6:6c:48:12:eb:d5:aa:48:8b:1a:49:
4a:29:3a:5e:ae:76:eb:24:ee:e2:92:f3:a3:2c:fb:
b2:d1:85:4d:30:45:86:e9:ef:0b:46:d9:f7:ef:c9:
6d:4b:af:0b:28:3b:de:d3:86:ac:cb:e5:bf:51:2a:
e7:8b:2a:e2:f0:e3:40:05:95:e2:7a:b3:6b:6b:82:
e4:5d:8c:cc:7c:83:b6:02:bb:fb:34:91:49:43:a1:
b6:2c:83:db:45:5c:26:c5:14:91:8d:44:bd:16:a2:
86:10:52:7f:99:08:39:7c:03:12:6a:95:98:a6:89:
a3:d7:8e:8e:77:d9:27:55:b4:ac:f1:03:21:91:87:
e1:41:48:b3:ec:df:05:17:c4:2f:6e:1d:fe:23:8b:
d5:c9:6e:dd:4e:ed:b5:ae:66:14:90:a2:4e:fa:ca:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:19:E2:E4:DB:37:DB:14:6E:EA:7E:BF:85:60:6C:95:94:A7:16
X509v3 Authority Key Identifier:
keyid:F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cf:1a:b4:f5:72:13:3f:48:00:ae:89:35:17:af:77:91:71:
3e:7f:18:54:7d:de:67:cb:ed:22:5d:3b:55:17:0d:b3:31:ba:
c6:7e:62:ef:8e:59:83:14:b6:4d:cd:21:0c:69:8a:eb:dd:2d:
55:a8:06:2f:12:ba:94:b9:d6:7c:62:14:95:52:59:db:79:6a:
7a:30:07:70:4f:ff:d9:18:12:13:fd:b7:0d:83:ab:05:87:0d:
d3:1e:d1:bf:6f:c1:ca:e9:d6:fb:a4:ce:82:f2:e4:fa:2d:9e:
a3:68:5f:09:a6:4b:cd:35:48:18:fe:0a:62:6c:d9:8b:41:73:
4b:e3:0b:55:28:de:5c:19:ab:be:7c:ff:46:62:fa:6d:5d:9d:
a1:f1:67:ac:4a:9d:b1:60:af:32:b2:34:49:ad:1f:9b:5d:3f:
69:de:e1:13:27:41:77:67:6f:38:bc:39:3d:9c:b0:9c:3d:ca:
22:1b:4d:42:2d:c6:54:1d:38:ec:b6:f5:e5:a4:ef:4e:ec:ef:
f2:3f:55:4b:e6:98:41:f4:1d:11:6e:43:a8:f9:66:38:21:e7:
83:b6:c5:f8:5c:b7:83:8d:c8:20:ab:c3:7d:36:d6:26:ca:62:
85:4e:ed:f6:e3:d7:bb:e0:10:9d:9b:b3:4b:9a:82:59:85:58:
84:47:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:19:38 2026 by rpki-client