
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json)
Hash identifier: BNqeb+XiGXjnARNUfWnwpmkiSxaFC6FviHSQ9/NaRmM=
Subject key identifier: 75:B0:39:FD:A5:AD:E4:D7:C8:4A:FE:13:92:51:DA:F9:04:6C:DB:C7
Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Certificate serial: 1126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
Manifest number: 1A65
Signing time: Sat 28 Feb 2026 17:22:08 +0000
Manifest this update: Sat 28 Feb 2026 17:22:08 +0000
Manifest next update: Sat 07 Mar 2026 17:22:08 +0000
Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: E/Wr6NJbBacg2D3z++GuxEkhRkxx5R30VFZ4JY8jEYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4390 (0x1126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Validity
Not Before: Feb 28 17:22:08 2026 GMT
Not After : Mar 7 17:22:08 2026 GMT
Subject: CN=69a32440-f840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b4:c2:13:d7:5d:0d:0f:7b:2a:50:98:11:a9:
6e:fe:01:af:fc:2b:0b:48:d2:3c:a4:07:19:bb:9c:
e8:a4:a0:11:44:93:e1:ad:5c:93:00:86:76:0f:58:
ba:ef:ec:22:7b:a6:e0:f8:89:b9:9c:b4:f0:6e:39:
0d:55:c8:46:30:d2:32:a5:48:c2:f9:da:01:b7:7c:
e6:f6:4b:e4:6b:63:a0:17:64:a0:3c:05:3d:b4:66:
31:3d:d0:dc:66:77:2d:30:25:52:e3:7e:55:82:45:
2b:7e:8e:26:bb:74:45:63:c7:5c:6c:2e:79:56:fa:
05:d7:7b:a5:cf:b2:2d:10:e4:4f:73:3b:5e:6f:29:
3c:7b:81:72:29:a4:74:c4:59:f6:83:e5:81:bf:4f:
72:70:20:56:7f:a4:a1:62:53:fc:bd:56:cd:44:42:
cd:1d:b3:81:d6:76:69:87:55:c7:9c:7c:76:30:3a:
f7:ad:a1:cb:bf:b6:6b:91:06:d8:d3:1c:f9:38:52:
89:12:1f:e4:2e:b5:2b:e0:00:da:05:2a:30:ba:bb:
78:1c:cd:b0:64:96:15:80:e7:ff:a3:75:64:3d:fe:
89:1c:3f:36:41:3f:32:b8:40:7c:54:2c:1d:3b:18:
d5:90:d1:68:bb:67:fe:ff:7a:3b:f7:d6:17:50:a7:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:39:FD:A5:AD:E4:D7:C8:4A:FE:13:92:51:DA:F9:04:6C:DB:C7
X509v3 Authority Key Identifier:
keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:0d:e7:3d:45:db:8b:a3:7f:f9:b6:42:51:1c:f0:81:fa:
8a:26:7f:cb:de:91:e0:df:ad:de:57:56:8c:40:7d:45:82:e4:
0c:72:3f:5b:5b:a5:7b:18:92:60:11:b4:a5:76:2a:d7:c6:d7:
89:89:58:5c:42:04:1b:0e:1d:61:ff:ed:94:03:94:7b:45:34:
00:91:39:ef:a4:6d:c9:d9:b8:c1:92:41:dc:cf:83:02:34:4e:
ff:04:d0:71:ad:f9:20:13:24:88:ac:32:5f:45:a8:3a:46:4f:
80:18:71:dc:5d:8c:42:d7:d5:69:68:bb:16:24:72:9e:59:36:
70:5e:7f:cf:e9:71:4d:6a:04:fa:cf:09:57:a5:5f:7d:5b:7d:
5f:a8:76:6b:60:26:92:79:52:14:9a:26:5f:fb:a8:b5:8f:2e:
47:cd:ea:94:66:ab:31:f0:72:85:18:ed:d4:49:6f:e4:9b:07:
73:57:a3:69:9d:50:69:f1:94:33:ad:c4:ed:27:78:0f:5d:0f:
b3:98:c5:23:38:30:f5:30:c5:3c:89:8b:2e:0a:0e:0d:c5:4f:
22:d2:2b:8a:62:21:59:12:e1:29:12:af:80:d7:98:bd:d4:12:
de:54:da:47:95:4e:f0:89:53:da:d6:10:48:c3:56:dc:d3:12:
e2:36:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:52 2026 by rpki-client