
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json)
Hash identifier: anhpGempMtLw8jqyau/4WpELHEDB2joTgtIwjAEjepY=
Subject key identifier: FC:74:FF:DE:44:D0:01:1A:C9:36:47:22:6D:05:46:A5:CF:B7:EE:C8
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
Manifest number: 02A2
Signing time: Fri 17 Apr 2026 01:26:34 +0000
Manifest this update: Fri 17 Apr 2026 01:26:33 +0000
Manifest next update: Fri 24 Apr 2026 01:26:33 +0000
Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: ky1Jf3YksI2vjSxoOBj5aMLI5AjcvSnk0ACVELPCm2M=)
2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: GzxKXa3buEq11SyhBYB0QOC/CAu38GX6nYU4rsrNTsE=)
3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: CYGWWz/nixHL5zlXfnZLMHoHJguF5UwXiTUzH6J+3lQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Validity
Not Before: Apr 17 01:26:33 2026 GMT
Not After : Apr 24 01:26:33 2026 GMT
Subject: CN=69e18c4a-81f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e8:4e:43:ca:50:6b:41:af:6a:7c:5c:30:e3:
a2:6c:5d:99:96:9c:23:fe:47:90:96:01:01:3f:d1:
29:a8:fe:e7:6a:de:9c:47:7e:5a:1a:3e:c4:fe:f9:
d2:53:10:d5:12:ba:1c:32:e1:ab:a3:35:d6:f5:54:
c1:7c:c5:a9:59:63:2e:b4:50:af:a6:fc:c6:91:86:
e4:e0:f1:e7:64:73:a1:c6:5f:a0:7a:cb:67:be:1d:
7e:dd:e9:a1:56:37:47:f8:2f:ea:4a:e4:53:95:f9:
63:21:67:90:7e:60:66:e7:b6:fd:09:7a:39:e9:10:
5e:a2:eb:75:83:24:14:55:7b:0f:2e:a8:15:29:46:
24:59:47:a8:ea:9d:4a:fc:4e:32:4c:9e:17:e5:e7:
a2:fb:27:00:ce:81:78:42:3d:fd:1d:95:77:6c:ae:
cb:70:6f:36:fc:65:76:8f:ac:0d:75:08:e9:61:19:
6c:2c:aa:70:49:0f:d0:c8:d4:78:7b:96:4c:e0:3e:
fd:f0:ca:5c:81:20:26:f9:27:d8:7e:14:22:a5:45:
ae:29:0d:db:81:76:0f:c7:b0:36:8c:bb:71:84:09:
4c:62:60:ee:37:cf:79:08:89:0e:54:2f:9c:c0:49:
35:bb:e6:c9:5c:a3:d6:67:94:5c:8b:fb:bd:55:79:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:74:FF:DE:44:D0:01:1A:C9:36:47:22:6D:05:46:A5:CF:B7:EE:C8
X509v3 Authority Key Identifier:
keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:eb:a7:12:e3:a4:33:b7:ee:1a:ad:76:2a:37:b0:79:b3:3b:
a6:0a:21:4e:5f:43:f7:86:0e:9c:bc:9c:e1:1c:25:5b:4a:e0:
48:8a:81:5d:b8:0b:2f:be:45:de:b2:33:ab:62:28:dc:0b:e9:
3d:0e:80:0c:81:16:a4:65:f4:33:d9:69:16:90:45:80:f9:93:
24:25:92:1f:a6:a0:83:d7:33:11:dc:d6:93:25:37:72:33:d0:
ea:c8:00:54:83:a3:8d:a2:46:f5:b8:c6:48:db:c8:9e:d1:a0:
d5:89:c6:37:4c:bf:04:b3:49:2b:a1:64:19:5a:8c:54:c9:0e:
ca:88:fa:70:41:2d:8a:f5:93:46:0e:38:9c:b0:5f:b6:b6:7d:
3d:2d:6b:58:76:07:d1:79:dc:4b:f9:01:31:2b:ec:78:ab:a1:
43:af:a5:59:a5:a0:0d:1c:c8:b2:fd:ff:57:1b:73:ec:a0:c9:
d4:19:5f:2e:b7:fd:95:58:7b:eb:ee:84:bf:1a:c6:5d:bf:aa:
0c:26:fd:ea:24:91:7e:d8:c2:9a:16:96:14:9d:2b:13:4a:84:
bd:ad:df:bf:64:37:0c:c8:83:36:7c:f9:22:85:6a:a0:9c:bb:
a4:6f:5c:10:99:5c:cc:d4:dd:9d:e4:54:c0:fd:ea:d3:ef:3a:
77:1c:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:05 2026 by rpki-client