
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json)
Hash identifier: POYKMaahJS3B6d4khZhVB8+71Ujj/Zd5UDs/HUGh0Hw=
Subject key identifier: 55:C6:36:5E:74:80:6C:D3:A0:38:33:E6:D7:90:F1:C2:09:61:32:A3
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
Manifest number: 0171
Signing time: Sun 01 Mar 2026 05:55:24 +0000
Manifest this update: Sun 01 Mar 2026 05:55:24 +0000
Manifest next update: Sun 08 Mar 2026 05:55:24 +0000
Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: qS6E76zfywYMKcCLNsWq/mbEgqc8npSVkiejcUhH6PA=)
2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: BRlNquymIckwtc7F3VDgyxZdFaPMsOSw16XluIdIwMo=)
3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: NVdudDaVGpMmStBicXxlspeCUjmXaARESGAPgqgBSyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Validity
Not Before: Mar 1 05:55:24 2026 GMT
Not After : Mar 8 05:55:24 2026 GMT
Subject: CN=69a3d4cc-91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:c8:23:82:3c:66:76:81:5d:d4:d9:88:26:
69:a4:0f:12:79:d7:29:e3:5e:17:f0:f2:fb:0d:4e:
b7:b9:41:d6:3e:5a:5f:56:c6:b2:47:a0:a0:43:2d:
22:9a:c6:79:0f:69:58:ce:0f:a7:49:d6:66:18:53:
e6:d2:88:3e:9f:e7:10:c0:e0:15:55:df:fd:23:ba:
f1:79:fe:e1:58:77:7c:a9:52:fb:8f:34:6a:21:84:
28:b9:2f:ae:d8:ef:36:9a:44:a1:66:53:0c:ff:d2:
e4:3c:32:38:9c:8c:b6:66:49:88:eb:47:88:b1:93:
ed:94:79:d3:f8:b7:f1:b2:6b:51:b7:39:7b:57:d7:
b6:95:f5:46:62:93:89:3b:4e:b1:94:28:45:31:14:
d1:12:a0:52:4f:10:32:54:a8:93:55:1a:08:c6:1a:
34:1c:0e:62:26:d4:47:4d:5d:27:40:6b:66:c4:47:
ac:0f:ed:22:e3:4f:83:85:5a:5c:38:5e:e3:f9:33:
41:d9:14:ec:93:b9:56:06:e2:9e:89:f7:11:5d:74:
ba:88:04:07:75:a5:94:cf:da:2e:ee:bc:c5:a0:f0:
37:b5:87:0c:85:a4:a8:62:79:8d:f3:06:5d:d0:93:
20:73:48:11:75:a8:dd:ba:f7:a1:48:52:4c:af:4d:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:36:5E:74:80:6C:D3:A0:38:33:E6:D7:90:F1:C2:09:61:32:A3
X509v3 Authority Key Identifier:
keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fc:ad:e2:c7:38:a0:a2:69:70:ed:23:19:6d:f3:31:e0:3f:
4f:38:5f:bb:e5:7a:82:e8:13:b1:4f:72:27:0b:9e:17:90:1a:
a3:bf:7a:6f:c3:5a:88:d4:14:74:c0:8f:68:49:1a:f6:70:a8:
2c:a5:8f:b6:2b:72:2d:bd:f9:91:65:c6:1d:ce:98:10:c3:d8:
85:a7:69:da:6a:e4:3a:6d:67:88:c8:d4:3c:fe:a1:5c:1d:53:
fd:ec:1d:21:36:37:d6:ff:b8:cf:72:77:50:94:d1:2c:bc:14:
b7:ed:88:77:08:0c:55:e7:ca:2b:8d:3d:1c:a5:a7:0a:04:17:
3d:19:0e:05:a5:7b:9d:ca:e1:84:fb:ab:b3:64:81:47:92:61:
f7:23:8e:a3:9c:02:88:93:8a:c7:d4:7c:17:25:30:0f:04:e3:
40:c5:59:42:5f:0c:e5:e4:bf:96:16:8e:51:59:3f:95:4b:da:
5f:b8:c2:8e:52:b1:6c:03:52:d4:2d:67:a4:a0:7c:ec:e1:6d:
1d:d8:07:5f:50:00:31:ac:4c:c4:83:59:06:a8:c2:bf:ad:3f:
e1:6d:15:08:9c:f3:56:a1:19:93:52:54:12:38:79:11:fa:11:
4b:d1:32:7a:94:c9:d4:a6:0b:f2:93:fe:00:fc:3c:a8:ed:79:
df:1f:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:51 2026 by rpki-client