
$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft
File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json)
Hash identifier: 5XP2qbNHeicTngM1rnJG5sdwPblK4EqR2OWvGdU5Mko=
Subject key identifier: 6D:9B:7B:0B:1B:5D:4E:AB:67:22:D8:86:3E:84:9A:2F:77:E3:51:CE
Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97
Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft
Manifest number: 016A
Signing time: Sun 01 Mar 2026 05:54:34 +0000
Manifest this update: Sun 01 Mar 2026 05:54:34 +0000
Manifest next update: Sun 08 Mar 2026 05:54:34 +0000
Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: LsPA0bpr3o9abTlVA3rtjLmP8zlEmFHN4FxwSiU4NRQ=)
2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: IW95bSZsBV41wSCyDVp5L0J87U9yD7MOcR2qX+Jqshk=)
3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 2lCm+k56qwvoxDHPy2MJ2gVzKL/gSEiow6ar2mDrask=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl
rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
Validity
Not Before: Mar 1 05:54:34 2026 GMT
Not After : Mar 8 05:54:34 2026 GMT
Subject: CN=69a3d49a-1620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:c0:9d:04:2d:46:2e:6d:fb:e0:82:cd:1a:
c2:0f:3a:ae:1d:bd:fa:61:e2:45:e2:ec:f1:7a:e0:
e4:41:16:ca:f2:9f:35:2f:a3:49:75:e6:fb:e8:54:
c3:f3:80:82:c5:e5:5a:36:6c:83:66:b2:91:8b:fe:
be:f0:49:3b:a9:c1:e6:7e:d2:58:bd:74:3c:4d:ca:
bb:3f:f9:6d:98:a4:c8:76:02:3d:df:c9:f4:a8:6f:
0d:ea:03:05:32:36:f7:64:82:d7:a8:df:f1:1e:fc:
da:99:96:a7:47:40:d0:14:cf:73:8e:c5:58:75:4a:
02:97:34:02:94:dd:28:3a:3d:b9:6f:08:90:c9:45:
29:c6:66:2d:74:d3:fa:ce:8a:df:4c:17:37:54:f1:
63:d1:6c:2d:8a:79:b7:a4:de:53:8c:10:b0:f0:4d:
cc:a5:6e:20:c3:62:a1:40:e6:9e:50:f0:b7:34:c5:
94:07:5f:df:2e:d9:32:c0:a2:61:60:85:76:4b:1e:
9b:58:a5:bf:54:93:d9:9f:03:e6:e4:51:a9:72:ae:
9d:53:c1:b6:09:51:fd:3f:e1:9f:f8:33:f6:8d:8e:
9d:40:0c:0e:39:fd:5c:fd:1e:ee:f9:4e:e5:a5:8d:
33:3d:5f:b9:eb:de:17:cd:8e:19:48:b3:93:1b:e7:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9B:7B:0B:1B:5D:4E:AB:67:22:D8:86:3E:84:9A:2F:77:E3:51:CE
X509v3 Authority Key Identifier:
keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:73:a6:8f:2e:84:2f:b1:bd:e5:7a:cb:35:aa:9c:c4:6c:4e:
93:32:8e:2d:0e:37:08:0d:13:07:ee:5e:21:1c:64:fb:0d:56:
46:d9:0b:f0:1a:6b:a2:21:84:d2:1c:b8:b6:5e:84:40:f0:e5:
0e:94:5f:0d:1b:02:7a:12:8f:9c:76:56:57:24:2c:f6:44:97:
c9:85:a0:4a:c1:8f:8d:0f:c0:5b:0f:16:43:27:58:31:6c:8e:
56:3c:1c:24:39:d6:f2:65:fc:8b:2d:91:d3:d9:8c:56:db:05:
12:aa:8d:bb:9e:0e:e4:69:8b:a1:5f:4b:47:df:75:7d:d7:91:
57:ce:c1:50:a6:9d:e2:7a:a1:23:ee:76:73:2a:dc:fb:63:1d:
13:b0:96:f3:6b:ec:e3:68:36:db:42:ac:4f:b0:c5:f3:b4:b7:
c1:b9:84:09:ca:00:6f:fd:39:61:03:13:ee:a1:b4:d8:5c:97:
45:5e:93:3f:3f:05:34:3b:69:bc:4f:23:36:2d:5c:58:1c:4d:
03:71:00:98:a3:4f:7e:dd:e6:34:79:59:32:16:fb:76:89:36:
0a:c4:25:36:44:83:56:1c:33:cc:ac:5f:f5:93:0d:b3:40:6e:
5c:5b:73:0e:f3:b7:ff:c5:1c:81:d1:cb:e4:fe:f5:96:3b:c0:
bb:0c:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:08 2026 by rpki-client