
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json)
Hash identifier: dMJUF6QaicWvGZzvzWShOYsV2z3Iv6TR3iIZjQUATbs=
Subject key identifier: E3:ED:E5:6E:EB:1E:57:75:D1:F0:35:7F:2B:F5:0D:D3:30:81:5D:40
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial: 0740
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
Manifest number: 073A
Signing time: Sun 01 Mar 2026 22:21:10 +0000
Manifest this update: Sun 01 Mar 2026 22:21:09 +0000
Manifest next update: Sun 08 Mar 2026 22:21:09 +0000
Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: z1GAsxh58lnz4jJHLKxaU8Q7iQ5vV/LPNUxTWdJGlFs=)
2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: r5h9zyvyocKErg8+JzpHFK2StLQF5Wzt0hRPt3Vhgus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Validity
Not Before: Mar 1 22:21:09 2026 GMT
Not After : Mar 8 22:21:09 2026 GMT
Subject: CN=69a4bbd5-59e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:f1:64:18:3d:96:50:1a:10:1d:02:37:08:
59:53:ba:9d:9d:a8:af:cd:79:b7:35:e1:8e:67:da:
2b:fe:25:b1:40:56:85:38:81:32:0d:ef:5b:40:f3:
ef:d5:af:78:94:ed:31:a7:9f:47:17:15:b5:18:91:
1f:06:b2:dd:a0:60:04:c0:c5:45:b0:31:b2:4a:dc:
00:8b:5b:42:b4:59:83:92:26:4d:06:2b:fb:96:c0:
ca:ca:b8:89:c4:44:01:a7:6a:bc:b7:a2:67:8f:57:
01:39:d5:37:04:d7:6a:11:82:f5:93:17:b1:3a:98:
d0:7f:b9:3d:25:2d:2c:cd:0b:a7:51:7a:6b:e4:df:
7f:a9:06:25:2d:8d:c5:8f:b2:24:78:89:63:32:e9:
9b:45:c4:f8:19:64:ae:a9:cf:20:02:74:7d:61:d8:
41:33:97:d2:43:8f:d3:96:2f:06:4a:3d:7f:71:a4:
05:ca:bd:75:1b:f0:8f:a0:dd:74:77:d7:cf:b6:85:
be:43:dd:b1:7b:ba:58:28:30:c5:20:3c:a7:36:32:
83:d8:f5:1a:26:5f:ab:59:c5:78:41:67:4b:69:3f:
37:e8:a3:fb:85:45:1f:52:4d:52:fc:50:59:b1:62:
c8:6b:e0:ca:f7:46:e6:cf:6f:20:c5:28:60:f8:2d:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:E5:6E:EB:1E:57:75:D1:F0:35:7F:2B:F5:0D:D3:30:81:5D:40
X509v3 Authority Key Identifier:
keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:22:bd:e9:f6:26:bd:40:b2:de:16:e5:6d:b1:a8:24:87:32:
81:79:6f:ac:3c:64:ec:1e:e0:4d:46:6c:b1:45:ca:38:93:e1:
a8:57:c5:7d:98:7b:e2:38:ad:95:d3:e3:d2:c4:2d:fc:7b:63:
bd:9f:e0:d1:3a:22:bc:8f:f2:ec:45:50:79:24:74:8c:7a:8a:
ce:52:94:dd:04:ff:92:47:23:bc:c4:e4:94:9a:80:63:e8:a6:
46:6e:5e:72:40:f5:4c:70:20:4c:50:d0:b4:c2:96:43:b2:20:
32:c1:32:04:41:30:d1:75:fb:16:dc:bf:3a:fe:3d:24:de:2e:
85:ba:48:0b:2f:a1:a0:a8:8e:5a:b8:d7:85:4b:b9:c3:0f:fa:
b2:16:d9:84:57:21:0c:d9:43:48:c5:d8:b1:15:33:75:49:26:
e2:ad:2a:8d:0f:0c:e7:76:1d:e7:14:cf:22:60:bc:19:5e:92:
53:4f:e4:66:ac:c8:1e:a5:ac:26:75:bb:08:8b:7c:48:76:29:
b2:d8:d8:b5:05:59:2c:b9:03:56:58:e2:1d:2a:f7:aa:3e:12:
23:a3:ae:18:ed:29:6e:56:40:0f:f8:14:c2:25:9a:dc:5e:0b:
b6:18:ff:45:37:3b:df:85:5c:57:60:ea:90:1b:72:34:ad:7f:
f2:35:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:09 2026 by rpki-client