
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: E4ZUCYkiiZ+Kn3bT3nxPjyKelwor/mqB6RQaYxr07og=
Subject key identifier: A7:B0:21:BE:E1:01:95:05:4E:85:1D:E2:59:BC:41:A0:11:EA:F2:D4
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 043F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 0590
Signing time: Mon 02 Mar 2026 02:55:03 +0000
Manifest this update: Mon 02 Mar 2026 02:55:01 +0000
Manifest next update: Mon 09 Mar 2026 02:55:01 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: X9p/hTPMi3DBRA0ExByyHG+ohpHMTcwFabSEj4arQZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Mar 2 02:55:01 2026 GMT
Not After : Mar 9 02:55:01 2026 GMT
Subject: CN=69a4fc07-8294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:0c:14:03:7d:47:ca:33:ec:b9:9f:31:b5:
0d:7e:fb:1a:b2:57:29:54:cf:cb:b2:ab:90:8e:0f:
3d:80:9e:8e:e5:79:9d:5e:e0:44:d0:8b:97:e2:8f:
de:03:32:e5:9f:db:db:ea:76:b8:af:25:6e:a3:b6:
38:18:89:68:95:0c:a3:4f:f4:80:52:df:fd:48:d4:
cb:88:0b:06:d4:f2:f7:cc:64:13:f5:64:f0:24:c5:
dd:ac:e6:7c:f4:95:d6:f1:1e:88:53:fe:b7:fc:89:
8d:07:ba:5b:70:46:bd:b3:8b:e7:21:09:05:c2:0a:
cb:3c:1d:dd:1c:d6:61:70:2e:84:82:b0:3b:60:e2:
f6:f8:e5:20:14:c3:30:5d:93:6c:e0:23:fb:13:b7:
01:22:58:83:07:15:05:a5:ae:2e:8a:7d:54:36:9a:
c8:0e:43:64:85:3e:4b:05:3e:53:02:bd:e0:c7:23:
86:cd:bb:b3:0c:e2:0c:a3:0a:3a:dc:62:fd:b4:31:
64:07:d0:58:8c:94:4f:02:40:cb:da:28:b0:95:f5:
cd:c2:1f:d2:ae:e5:8d:32:7c:f4:df:19:08:0e:cd:
ac:4e:a5:87:40:c3:88:40:d5:2e:9a:22:67:dc:e9:
fd:85:7e:3e:18:47:fe:09:e6:ef:87:05:e6:f6:3a:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:21:BE:E1:01:95:05:4E:85:1D:E2:59:BC:41:A0:11:EA:F2:D4
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:17:a7:ce:0c:44:b9:6b:de:e0:2f:f5:78:9d:03:52:a3:36:
f0:8e:ec:b6:7f:07:8d:f5:ad:83:83:54:a4:d0:16:65:96:0d:
96:46:78:55:8e:57:ac:a9:8a:ca:9e:4f:b9:88:84:1a:9d:19:
9b:5e:bd:92:f3:d8:fe:80:b7:91:ea:24:0f:7f:b0:92:90:f8:
52:7d:5a:c5:a0:d8:65:d6:0e:44:a1:57:8b:64:53:ca:12:ec:
07:59:55:33:9c:92:78:54:f8:e1:6a:a4:29:38:76:96:27:6c:
6d:69:23:56:5c:21:90:97:9b:b9:e2:e4:97:9a:62:49:57:ef:
2a:39:02:16:a1:60:d7:fd:c0:9b:e3:57:1e:6b:5e:d3:68:5f:
17:e4:31:a1:87:81:56:c2:b9:57:50:03:0d:06:36:56:44:a2:
b0:cd:2b:ed:5c:3a:48:ad:2e:12:ad:20:2b:aa:c0:1a:0f:08:
5b:85:c2:8f:87:20:fb:21:64:da:61:be:dc:e3:6a:8d:29:46:
b8:07:5b:10:a4:a4:44:d7:a8:41:d2:6a:c6:92:dd:18:e3:0f:
c5:b9:bd:69:41:00:51:bb:16:57:06:06:89:52:fd:fe:94:80:
ca:d6:79:2e:eb:0c:70:5e:37:7a:32:a9:cc:1d:e7:d2:87:a1:
a5:25:b4:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw
NTBGRDFENDYwHhcNMjYwMzAyMDI1NTAxWhcNMjYwMzA5MDI1NTAxWjAYMRYwFAYD
VQQDEw02OWE0ZmMwNy04Mjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqE8MFAN9R8oz7LmfMbUNfvsaslcpVM/LsquQjg89gJ6O5XmdXuBE0IuX4o/e
AzLln9vb6na4ryVuo7Y4GIlolQyjT/SAUt/9SNTLiAsG1PL3zGQT9WTwJMXdrOZ8
9JXW8R6IU/63/ImNB7pbcEa9s4vnIQkFwgrLPB3dHNZhcC6EgrA7YOL2+OUgFMMw
XZNs4CP7E7cBIliDBxUFpa4uin1UNprIDkNkhT5LBT5TAr3gxyOGzbuzDOIMowo6
3GL9tDFkB9BYjJRPAkDL2iiwlfXNwh/SruWNMnz03xkIDs2sTqWHQMOIQNUumiJn
3On9hX4+GEf+CebvhwXm9jrOGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKewIb7h
AZUFToUd4lm8QaAR6vLUMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1
NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF
MGM2MTA1bWxBYllGRDlIVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbBenzgxEuWve4C/1eJ0DUqM28I7stn8HjfWtg4NUpNAWZZYNlkZ4VY5XrKmK
yp5PuYiEGp0Zm169kvPY/oC3keokD3+wkpD4Un1axaDYZdYORKFXi2RTyhLsB1lV
M5ySeFT44WqkKTh2lidsbWkjVlwhkJebueLkl5piSVfvKjkCFqFg1/3Am+NXHmte
02hfF+QxoYeBVsK5V1ADDQY2VkSisM0r7Vw6SK0uEq0gK6rAGg8IW4XCj4cg+yFk
2mG+3ONqjSlGuAdbEKSkRNeoQdJqxpLdGOMPxbm9aUEAUbsWVwYGiVL9/pSAytZ5
LusMcF43ejKpzB3n0oehpSW0FA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:51 2026 by rpki-client