
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json)
Hash identifier: mu/Ev7bFjpuT0ECg0qLv6sY1jeb7ck3PXttHFnkRvrc=
Subject key identifier: B4:80:12:2F:00:3D:53:8C:20:E5:EC:D1:88:03:2E:20:51:E0:F0:2B
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial: 085B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
Manifest number: 08E5
Signing time: Thu 16 Apr 2026 20:42:37 +0000
Manifest this update: Thu 16 Apr 2026 20:42:37 +0000
Manifest next update: Thu 23 Apr 2026 20:42:37 +0000
Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: vnKpT88sJ2DLC3oYZ1joltw9GeDz9BJzDktZfKsSVAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Validity
Not Before: Apr 16 20:42:37 2026 GMT
Not After : Apr 23 20:42:37 2026 GMT
Subject: CN=69e149bd-31da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:8c:77:a3:dc:6a:7b:4d:a9:7c:66:76:d8:
2f:c2:0e:9f:d4:8f:5c:d6:2d:c5:e4:b2:5a:54:b8:
a5:9e:68:c5:16:67:8f:31:3d:62:15:5f:d8:e3:17:
58:f1:9b:d5:35:ab:81:db:83:f0:44:69:82:c3:8f:
42:9f:3e:fc:c3:1c:26:21:c4:b4:29:46:12:70:32:
66:8f:0c:c5:df:05:e5:6a:5c:f3:5c:de:b7:df:93:
0b:b5:bd:e3:3b:54:70:67:aa:49:71:c2:36:2f:b7:
31:4c:d4:13:51:35:b5:90:32:97:d6:35:e5:30:d5:
e5:86:e5:f5:45:bb:25:87:34:d4:8a:c2:83:44:ed:
b6:59:7e:18:0d:d9:0c:0e:a3:df:85:e5:40:70:b0:
94:b3:da:5a:93:e5:4e:cd:97:06:49:ae:48:e9:8c:
a0:2f:bc:3d:3c:f4:b6:e7:de:ef:a8:ff:31:38:51:
7c:22:40:77:61:21:db:1b:44:bc:b9:e6:ec:92:da:
a4:56:d3:f6:9d:73:f5:ec:6c:22:e8:03:1b:22:ca:
6e:2b:56:44:9c:0d:d0:ae:c5:4c:8e:6d:c4:33:81:
1d:d1:c5:ef:44:b7:20:c2:f3:ed:a0:8c:b9:d5:75:
12:d3:0d:88:b7:8b:05:aa:f6:b9:87:a9:14:03:93:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:12:2F:00:3D:53:8C:20:E5:EC:D1:88:03:2E:20:51:E0:F0:2B
X509v3 Authority Key Identifier:
keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:75:b4:31:b5:f5:e9:83:f1:ec:77:25:b7:68:89:26:cb:79:
a0:c6:1c:bb:a9:d3:16:48:e1:8f:ca:7a:ec:dc:d3:a8:d5:3d:
b8:9f:83:92:5b:c9:4f:cf:5e:4b:e2:43:34:25:9d:29:99:ea:
54:ea:75:1e:73:67:6c:33:99:9d:19:c8:31:02:b9:00:bf:74:
fa:95:55:86:1f:15:20:c0:a1:1e:59:da:d0:f0:76:63:db:47:
04:57:f9:86:8a:ac:0f:62:6b:c8:a8:11:d8:7c:68:08:93:ab:
0e:2e:05:00:4a:6a:ed:4d:4d:ad:95:33:80:02:a0:07:f8:de:
a4:7e:d3:fb:3c:8a:2e:25:64:78:eb:c8:e2:cd:18:76:dd:30:
4a:50:9d:eb:04:c1:82:52:35:bf:8f:49:e6:3f:f4:4c:bb:c8:
4e:6f:56:5b:df:3d:af:4e:95:60:0c:db:5a:f5:a4:0e:17:03:
49:29:69:f7:c4:4e:0f:99:14:2f:e0:53:46:f4:51:59:54:9a:
b4:1a:57:e1:e3:a6:d3:39:5f:74:10:d7:6a:3a:bb:c6:49:eb:
64:42:fb:4f:e5:35:99:2c:fc:b4:53:08:71:cf:d4:eb:bd:c3:
0a:93:5d:47:52:ff:18:c9:cb:ab:f7:44:bf:de:44:a9:6e:c9:
e9:f5:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:15 2026 by rpki-client