
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json)
Hash identifier: ts5Jup/cE3pOZdHm2+v2NXcBaHutzpEXYqpStkw84HM=
Subject key identifier: C2:C4:EC:C4:3C:A8:DB:57:0E:D6:15:CC:10:E7:2A:B2:8B:AC:BB:4A
Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Certificate serial: 08BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
Manifest number: 08B2
Signing time: Thu 16 Apr 2026 20:23:05 +0000
Manifest this update: Thu 16 Apr 2026 20:23:05 +0000
Manifest next update: Thu 23 Apr 2026 20:23:05 +0000
Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: 8TsfEMLoKDqQ6oothqTnMTwooF3T27b0RyOxtRqtiKY=)
2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: 2eup2m0aHXQJQWm9cIyVkI2HXtK+Dw0dwIa6EDDGEm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Validity
Not Before: Apr 16 20:23:05 2026 GMT
Not After : Apr 23 20:23:05 2026 GMT
Subject: CN=69e14529-1058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:fc:65:15:31:bc:99:13:bb:56:26:e0:63:
bf:9c:4e:e2:a2:50:51:fd:61:6c:5f:fc:de:e3:66:
99:bf:e4:8e:0c:93:75:b2:d9:59:2e:e4:cd:ff:a7:
9f:34:93:bc:03:19:19:b7:88:26:65:27:98:5a:37:
91:73:e8:a9:44:9e:7a:5b:89:93:23:04:88:50:7b:
4c:8c:cb:cc:47:e7:b9:2d:df:18:57:1f:93:b3:bb:
14:7e:ed:66:20:83:2c:5d:c5:42:5f:ba:6e:eb:b7:
b6:59:e0:48:b1:97:e9:30:ef:95:6e:91:18:33:1b:
90:7d:2e:a9:55:42:b5:76:cf:46:38:70:cd:b0:6c:
d4:68:37:b7:04:a6:3e:15:0c:13:79:1f:d8:cd:00:
79:c4:fc:b5:4c:9f:f5:26:7b:15:24:44:40:c3:83:
1c:a9:65:ef:08:07:34:49:6e:df:9a:74:59:49:69:
9b:17:86:b0:92:d2:0e:ca:22:e6:2f:f9:35:e3:55:
43:60:fb:57:70:56:46:f7:ed:5a:82:d3:ab:dc:79:
b7:4f:2c:d3:21:58:bc:8b:84:e8:4f:f3:c8:fe:d3:
29:c5:eb:30:08:44:62:82:72:27:bf:1e:bf:45:46:
b1:09:12:1c:f1:5e:0a:d9:3e:89:16:b1:c4:cd:76:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C4:EC:C4:3C:A8:DB:57:0E:D6:15:CC:10:E7:2A:B2:8B:AC:BB:4A
X509v3 Authority Key Identifier:
keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:93:5b:6e:ba:5b:a8:47:a1:66:8c:3d:9b:d2:fb:8e:45:
96:4a:9e:31:21:1d:f3:09:66:9e:ca:02:e2:8d:bb:ee:f2:ef:
4b:bb:95:8a:79:18:11:31:05:24:0f:2c:d0:55:6e:f3:4b:ed:
d8:61:18:fe:a8:0f:e6:8e:d8:e7:01:6c:ae:fe:03:99:f2:de:
3d:da:be:85:04:d4:18:f3:56:b4:c5:ec:a0:86:69:c0:c5:2b:
96:9c:52:10:0d:21:2a:6b:2d:cc:a7:20:01:74:72:bc:f5:c5:
2f:cd:be:7b:ae:fc:af:9b:a2:a3:b6:5b:38:e8:ba:30:51:c6:
51:50:74:6f:7a:cb:38:43:f4:ae:a9:fd:02:f3:e8:9a:fe:45:
26:88:ff:09:2a:bc:36:bb:1a:04:a8:2a:d6:9c:f8:ce:f4:1c:
29:db:df:9c:0e:aa:3d:7a:d1:28:1b:01:43:79:c0:21:27:7b:
0c:12:80:e0:6a:52:e0:2f:5e:74:59:a5:66:4d:64:5f:d9:c7:
5c:4a:80:cc:c5:76:d9:c6:4d:70:24:f8:f1:93:f8:94:93:c2:
76:fb:ce:27:bf:43:24:a8:a7:25:0d:31:79:87:69:15:d4:6f:
f5:4f:39:3f:42:aa:a8:31:e5:1e:c3:9a:27:bd:03:23:1a:1e:
57:ee:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:49 2026 by rpki-client