
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json)
Hash identifier: WUudGzOB2cCMbL3T4vav7RGQn0f3B80PAIomB2g/iXs=
Subject key identifier: 09:C4:C9:AF:7C:3F:81:98:07:75:C9:A9:FE:E9:75:E3:F7:C5:44:DF
Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD
Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
Certificate serial: 0BFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
Manifest number: 0BF6
Signing time: Sat 28 Feb 2026 19:03:15 +0000
Manifest this update: Sat 28 Feb 2026 19:03:15 +0000
Manifest next update: Sat 07 Mar 2026 19:03:15 +0000
Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: Mu7z9lDqrH2dV25nGFOAqdTBC7B19eo5lmJxkFzGPkk=)
2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bGuYSNzp5mZo+7E7IQsquXftEwJF3nV1lzs2MqWhd58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl
rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3071 (0xbff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
Validity
Not Before: Feb 28 19:03:15 2026 GMT
Not After : Mar 7 19:03:15 2026 GMT
Subject: CN=69a33bf3-559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:c5:5f:97:3e:03:34:3a:ad:b0:4f:ec:4c:
2d:80:f1:39:2d:9e:35:be:cf:b9:de:a6:80:ed:fd:
ff:b6:20:b7:82:75:ad:f8:7a:e6:50:fc:66:46:76:
68:bc:15:8c:f4:a0:93:e7:fa:43:a1:cb:ab:e8:4e:
7c:36:f5:ec:89:4a:f5:d6:29:8a:48:30:68:df:2a:
60:a8:bc:ed:da:e6:3c:6c:3a:61:63:4b:e0:67:51:
b0:65:af:71:78:ec:26:01:e4:43:0a:a1:d7:01:22:
aa:c5:08:b8:c8:bc:7c:cd:a7:08:ac:6b:92:80:8f:
7a:46:b0:29:74:0f:fa:22:a4:42:c0:d9:eb:cd:f2:
fa:3e:1a:62:39:e7:86:fe:45:5a:c8:04:dc:09:97:
b9:99:db:75:4b:b6:b5:bb:5c:b6:3d:ae:e6:25:2d:
54:3e:1b:28:5f:31:d5:bd:8b:c9:4e:32:4f:6d:64:
17:d1:d3:1d:e0:54:ac:61:0c:2c:4e:07:7e:ab:71:
c7:76:b6:98:c0:cc:f7:b2:84:76:25:72:22:d9:10:
4c:40:79:8b:4a:91:3d:c2:69:83:0b:96:83:cf:2e:
cf:e6:d9:74:1e:94:50:4b:30:ea:b3:a1:d4:df:92:
96:9c:d9:02:60:3a:94:bd:b5:05:16:24:ce:d8:1c:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:C9:AF:7C:3F:81:98:07:75:C9:A9:FE:E9:75:E3:F7:C5:44:DF
X509v3 Authority Key Identifier:
keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:61:8f:f6:12:99:f5:15:18:27:65:c0:df:9f:8d:50:4d:3b:
f0:78:cd:df:45:b5:2d:38:b1:27:02:6e:99:7a:57:47:27:9b:
4a:63:81:ad:c6:54:d6:7c:be:8c:5e:71:cf:d4:4b:a9:0f:9c:
2b:42:92:1e:38:2a:6c:f4:07:97:7f:5e:99:b2:02:8c:37:f2:
e8:37:27:17:d9:22:3b:37:72:b2:a2:7c:6f:53:a2:f4:56:97:
b0:91:a3:5c:03:6e:02:32:97:d9:2d:7d:1e:01:21:21:fc:b0:
48:a4:df:36:5d:f2:a3:24:ab:cb:95:87:0d:9e:92:c6:8c:5a:
26:94:6c:2f:3f:a9:a6:7f:29:fa:35:2a:11:dd:fc:86:74:dc:
fc:7c:43:c3:6f:7f:46:fa:5d:a5:95:6f:4e:4c:3a:84:76:91:
53:6b:06:5f:71:aa:d9:1b:bb:23:e9:06:a7:b9:4d:6e:5f:46:
75:43:82:70:5e:2b:a2:2d:5d:ee:22:12:53:ab:ec:cb:66:ad:
d8:73:9f:d9:b2:d6:1a:13:71:cf:93:56:78:a3:4c:77:6b:5d:
9d:ae:5d:2e:a6:42:36:4e:90:51:8b:c8:f9:27:5b:07:62:dd:
db:97:d3:9a:9f:59:a1:0d:88:39:ae:ed:2b:2c:f7:5e:5a:e6:
05:aa:3c:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2
Njg2MjM3QUQwHhcNMjYwMjI4MTkwMzE1WhcNMjYwMzA3MTkwMzE1WjAYMRYwFAYD
VQQDDA02OWEzM2JmMy01NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyn7FX5c+AzQ6rbBP7EwtgPE5LZ41vs+53qaA7f3/tiC3gnWt+HrmUPxmRnZo
vBWM9KCT5/pDocur6E58NvXsiUr11imKSDBo3ypgqLzt2uY8bDphY0vgZ1GwZa9x
eOwmAeRDCqHXASKqxQi4yLx8zacIrGuSgI96RrApdA/6IqRCwNnrzfL6PhpiOeeG
/kVayATcCZe5mdt1S7a1u1y2Pa7mJS1UPhsoXzHVvYvJTjJPbWQX0dMd4FSsYQws
Tgd+q3HHdraYwMz3soR2JXIi2RBMQHmLSpE9wmmDC5aDzy7P5tl0HpRQSzDqs6HU
35KWnNkCYDqUvbUFFiTO2ByaewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnEya98
P4GYB3XJqf7pdeP3xUTfMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw
MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN
OV9NVGFVTUE5VGhtaGlONjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXGGP9hKZ9RUYJ2XA35+NUE078HjN30W1LTixJwJumXpXRyebSmOBrcZU1ny+
jF5xz9RLqQ+cK0KSHjgqbPQHl39embICjDfy6DcnF9kiOzdysqJ8b1Oi9FaXsJGj
XANuAjKX2S19HgEhIfywSKTfNl3yoySry5WHDZ6SxoxaJpRsLz+ppn8p+jUqEd38
hnTc/HxDw29/RvpdpZVvTkw6hHaRU2sGX3Gq2Ru7I+kGp7lNbl9GdUOCcF4roi1d
7iISU6vsy2at2HOf2bLWGhNxz5NWeKNMd2tdna5dLqZCNk6QUYvI+SdbB2Ld25fT
mp9ZoQ2IOa7tKyz3XlrmBao8hg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:34 2026 by rpki-client