
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json)
Hash identifier: 11jMp67ucjcnrymkEStKrK5Dh9sklYG/cm3EpW5Et1M=
Subject key identifier: 28:B2:71:73:31:ED:F2:C5:62:AB:41:35:09:17:B3:BD:10:EE:80:ED
Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Certificate serial: 0797
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
Manifest number: 0784
Signing time: Mon 02 Mar 2026 01:06:21 +0000
Manifest this update: Mon 02 Mar 2026 01:06:19 +0000
Manifest next update: Mon 09 Mar 2026 01:06:19 +0000
Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: 3GQwVQobAX+Slo21hPHTROCzO5c8ul4cCDlgBW3qBGg=)
2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: FbF3GSUAuBF+Lu9+Biww40q4aw4ohnbpizYlHh1W2WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943 (0x797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Validity
Not Before: Mar 2 01:06:19 2026 GMT
Not After : Mar 9 01:06:19 2026 GMT
Subject: CN=69a4e28c-ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:b7:1d:04:6e:0d:90:19:fb:84:54:9b:db:
1d:c5:e0:f8:be:61:9d:b3:ad:23:23:78:50:bc:84:
cd:44:8d:9a:37:f4:89:eb:41:f6:9a:fe:82:02:4e:
b4:f2:53:b6:88:32:0c:5d:db:9a:02:f7:d2:aa:8b:
a5:64:a6:60:fc:49:8d:92:37:d4:b0:4e:b7:e0:04:
58:de:1f:da:49:18:aa:72:f2:8b:dc:77:35:19:8c:
c6:5a:57:fd:7e:18:53:54:1e:75:97:b4:1f:da:44:
a3:3e:5c:47:d2:61:99:22:95:7d:b5:47:7e:a4:4e:
0a:e4:ef:6d:c0:c8:e9:5e:30:52:64:08:6f:97:d5:
8f:39:1b:2a:44:9e:73:f0:58:53:23:09:e4:f5:c7:
6e:26:f1:51:8b:6a:6b:2c:ec:f5:99:e0:be:51:5e:
df:f2:fb:e2:82:a9:7a:f9:6d:46:c4:b1:f2:7a:13:
e5:28:89:1c:c7:9c:67:bc:6e:b7:c9:5e:8d:9e:43:
05:1e:19:4d:e9:52:32:05:19:88:cb:f3:c7:d2:d7:
57:61:6d:36:96:40:76:59:cf:60:16:2b:50:c2:ab:
fb:38:9b:96:3c:ff:21:76:b3:04:94:99:74:5f:c5:
9a:5a:03:8e:04:c6:74:96:a4:3d:9e:7b:61:23:83:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:71:73:31:ED:F2:C5:62:AB:41:35:09:17:B3:BD:10:EE:80:ED
X509v3 Authority Key Identifier:
keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:96:d6:ca:df:90:06:b7:1a:a6:9f:c5:83:cd:2f:e4:bc:7d:
f1:cf:99:1e:65:e5:3c:dc:4d:8d:8d:24:b0:e6:6c:a4:f0:ee:
b6:f9:66:29:cb:40:30:b7:d7:e4:b0:cd:ed:af:c6:03:38:f1:
fd:ac:be:fb:5e:b4:0b:ae:a2:25:5c:3a:c2:ef:f0:47:97:46:
b3:f8:12:07:41:b9:54:76:ed:70:d1:9c:96:1e:8d:44:3c:a1:
97:80:e4:81:af:c3:3c:23:ba:b9:a6:70:9c:9a:c9:e7:a3:b6:
2a:35:fa:d2:d6:9d:ac:de:a0:83:de:22:63:58:7e:72:11:58:
6f:68:68:7a:c6:a2:ac:15:95:d9:cb:21:c2:c0:03:eb:ed:9d:
0f:1c:ae:bb:32:6b:2c:06:f0:92:a0:76:ce:b4:c6:2a:bd:83:
62:45:82:2b:1a:db:61:a2:a2:6b:0d:f3:11:f1:fa:c1:f7:f1:
23:43:bc:6b:a4:af:85:13:63:a8:e9:b9:04:82:d6:a0:15:6d:
62:7b:24:39:a9:b0:ca:7c:0d:a7:cb:48:6f:03:0d:74:1b:75:
01:c1:33:08:6a:35:bc:01:7e:c4:9d:de:f5:3f:c5:19:2e:d0:
74:0c:44:2c:f0:0c:3b:d4:a5:6c:c5:29:93:5e:93:2e:7d:21:
46:86:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:59 2026 by rpki-client