
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier: 6Rkchv4PU8DAIfJEj+1FNpsWxx1OQfI84BJExl+xS9I=
Subject key identifier: 56:75:FA:F5:73:88:9E:FB:E9:2F:8A:C4:05:6F:C2:17:2E:FC:19:4B
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number: AB
Signing time: Wed 15 Apr 2026 06:46:13 +0000
Manifest this update: Wed 15 Apr 2026 06:46:13 +0000
Manifest next update: Wed 22 Apr 2026 06:46:13 +0000
Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: BKoHZHJIKyOyNa5RX72vyBjmlHnw00TUCbXO9n7DhF4=)
2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: THMYN1koeOfwnbK8AGxlReff3pZqD6xwEXO++zbayH8=)
3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: EWbmDsTGqQLpUfNOlcyjqkg7ey8/2rO6qBfbLaQNH74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Validity
Not Before: Apr 15 06:46:13 2026 GMT
Not After : Apr 22 06:46:13 2026 GMT
Subject: CN=69df3435-005c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:2b:b1:08:39:41:81:22:be:88:33:0f:88:
ad:55:d1:12:0b:d7:5f:ec:57:c1:08:a1:7d:c8:d9:
05:c2:a4:27:df:dc:bb:3f:4c:ac:eb:ba:5c:16:bf:
ba:6c:b1:de:ec:d1:5f:44:04:80:83:d5:a1:55:b4:
dc:70:e3:70:e4:7b:8e:c0:63:e6:48:6f:05:3d:df:
64:65:64:af:14:7c:28:70:9e:5e:10:12:80:88:59:
94:b0:f2:a0:92:9e:5c:d4:7a:e5:38:c2:0e:c3:79:
9b:4f:3b:dc:6b:ba:e5:90:ec:05:67:2c:12:d1:0a:
6b:42:e9:e0:26:52:35:13:41:df:08:bb:9f:ca:41:
7b:5a:fb:1b:24:9a:11:54:d5:ca:4d:18:d9:56:78:
cb:5e:46:3d:d0:1c:27:f8:b8:67:8f:b0:75:a3:de:
9a:82:23:e7:d6:0b:fd:cd:d9:df:05:0e:95:26:72:
15:9d:18:dc:ee:df:80:df:78:83:40:8d:fa:25:fe:
22:e5:48:13:b7:81:24:d1:c3:c4:fd:33:d8:ed:5e:
ad:b0:47:0e:72:9c:83:b7:3a:5c:20:17:12:10:ef:
a6:bc:21:ca:a8:a7:ab:07:90:92:24:b7:07:01:3c:
b1:eb:4a:46:83:5c:bc:dd:2e:c9:ab:4b:41:5b:43:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:FA:F5:73:88:9E:FB:E9:2F:8A:C4:05:6F:C2:17:2E:FC:19:4B
X509v3 Authority Key Identifier:
keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:92:75:f3:c1:06:d9:3a:e6:99:e9:a1:b5:34:b9:81:ee:
b5:c6:1b:10:ec:63:fb:73:ee:74:8b:e7:a4:a3:29:94:5b:16:
7b:cd:1c:61:62:12:16:96:a9:76:19:81:30:b8:48:b7:8c:6e:
a9:6f:da:c7:e6:a7:8c:f5:e4:b0:28:39:0d:88:13:be:18:ea:
b8:47:bc:75:5f:7c:09:bd:47:b2:f1:13:2f:dd:f9:1b:58:45:
3b:9f:60:42:31:6b:63:28:57:c8:06:b1:c2:13:9f:e6:a9:28:
00:48:b4:c7:7c:32:b3:87:51:1a:f7:cd:d1:54:0c:86:86:1e:
1d:1a:dc:28:85:62:44:81:b8:83:2d:e9:e0:10:bf:d7:85:a9:
d9:a5:2f:d1:55:d2:1c:39:32:44:ef:30:b6:bc:22:d6:24:fc:
0e:8b:9b:e8:26:1e:40:36:56:4d:e2:7a:12:d9:6f:54:90:e5:
f3:4d:30:07:1d:92:02:05:f1:d9:69:75:33:44:14:da:9d:44:
55:f9:25:66:72:2b:1e:da:47:55:11:eb:6e:b9:e6:3c:21:a7:
75:b7:5e:be:e2:7f:ff:63:f4:7e:a7:01:cf:f7:09:bf:f1:17:
00:e9:82:51:65:67:7d:e5:fc:8b:02:e1:f2:8e:35:df:9a:e3:
66:c9:d0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:46 2026 by rpki-client