
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json)
Hash identifier: LdD+r5juLpHGjaD774Ha2iertC7X2pN8C9iVMPtGHeQ=
Subject key identifier: C1:97:3E:F7:71:F6:26:19:49:15:6E:48:4D:3B:83:0D:1A:27:F8:08
Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C
Certificate serial: 0AFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
Manifest number: 14F2
Signing time: Mon 02 Mar 2026 01:11:56 +0000
Manifest this update: Mon 02 Mar 2026 01:11:55 +0000
Manifest next update: Mon 09 Mar 2026 01:11:54 +0000
Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: KuqJOE1XbZ8s0GA9jA18ahih946je2wM5B3Q9IkX0Ug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl
rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2811 (0xafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C
Validity
Not Before: Mar 2 01:11:55 2026 GMT
Not After : Mar 9 01:11:54 2026 GMT
Subject: CN=69a4e3dc-eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:fb:70:7f:ee:c3:21:91:01:0c:33:5f:7d:
37:35:a2:72:e8:52:c7:33:21:f9:ac:04:9a:49:e8:
d1:a4:34:da:77:01:64:9c:37:e8:c4:7c:2f:2b:e2:
a9:74:37:7d:de:08:9e:0c:14:90:0f:04:62:44:31:
0b:ac:cb:b5:a8:fc:00:d7:de:a8:f3:3a:c4:27:06:
48:4c:8a:94:7b:81:9a:f5:07:97:7b:be:a6:d2:ab:
5d:a0:53:e8:c7:6a:92:0b:cf:e8:c9:8c:3d:70:e6:
ea:33:cf:2c:a8:4b:1d:98:0a:46:06:35:54:56:6c:
b5:da:e5:05:9d:30:ed:08:1c:5a:f2:ce:40:d4:31:
34:d3:af:f4:59:99:e6:7a:53:f5:ed:eb:e1:7d:91:
de:41:de:df:d2:6d:b0:50:d2:d6:0c:ff:74:7d:16:
f2:c1:5d:80:dc:6b:b1:c5:e0:a7:2b:e5:79:f0:95:
07:59:fc:08:cf:20:9e:9f:80:a6:62:4a:67:5b:2a:
38:a7:d8:b2:a4:08:00:fa:ac:a7:c0:3a:84:08:cb:
86:31:97:a4:2e:fb:9f:37:1a:9f:c9:ff:4f:2b:3d:
45:6b:27:a3:c1:dd:89:1f:4a:9e:67:09:f0:94:b3:
d7:d7:6a:b0:11:0f:cf:42:7c:35:7b:fc:c7:e0:49:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:3E:F7:71:F6:26:19:49:15:6E:48:4D:3B:83:0D:1A:27:F8:08
X509v3 Authority Key Identifier:
keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:59:15:a2:96:21:98:fe:e3:72:9a:e5:95:19:75:f4:bc:05:
2e:68:42:8c:ad:81:07:33:e1:56:8d:03:d5:3c:08:65:b3:3d:
a8:0b:b1:79:04:7f:a3:87:9e:d0:49:20:4a:e3:f1:0a:a9:32:
ec:d3:78:b8:9e:56:d4:d2:79:fd:11:48:56:b0:94:ba:87:6f:
da:06:07:4f:b8:af:37:b7:fb:9e:b7:30:87:33:2e:6f:d3:b0:
b3:eb:91:1c:63:66:2a:62:ed:0a:68:c9:52:aa:a5:e0:83:0f:
0a:f8:c5:8c:24:fc:3f:28:6e:5c:51:dd:d0:af:ce:a0:5c:0f:
7d:98:6d:00:bd:00:1c:28:99:b6:22:f4:8c:3b:9a:05:e9:f3:
ab:d5:bf:f9:74:04:82:9f:6e:b6:9b:0e:3f:a5:d3:9d:2b:1a:
77:b2:f1:ab:7f:0f:77:51:cc:bf:73:68:f4:71:81:3c:e1:7c:
18:1a:a1:09:e6:fe:dd:e6:4d:e5:47:25:b8:d8:69:82:39:1e:
0c:81:b8:fb:db:0a:f8:c8:1d:c8:ff:28:04:80:c2:f8:b1:42:
6c:ea:7e:23:81:b9:00:a9:4d:6a:18:33:5c:98:60:bd:70:3b:
f1:bb:c3:40:f3:32:ab:1d:60:df:af:b4:d0:d3:b8:8e:e0:be:
91:f7:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:23 2026 by rpki-client