
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json)
Hash identifier: 6EQbmm7+25Uf9NAyQISIXanlGEeJM9uK4CQDjM29j+g=
Subject key identifier: 52:82:B5:63:AB:93:4F:65:62:9E:D3:30:D7:C1:2E:96:30:28:46:10
Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
Manifest number: 07D0
Signing time: Tue 28 Jul 2026 21:52:32 +0000
Manifest this update: Tue 28 Jul 2026 21:52:31 +0000
Manifest next update: Tue 04 Aug 2026 21:52:31 +0000
Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: mwWqDQ4yaJzIzskcNyTkOyQhb0ygkYr0/Gc7YqdQ2Nw=)
2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: FbF3GSUAuBF+Lu9+Biww40q4aw4ohnbpizYlHh1W2WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Validity
Not Before: Jul 28 21:52:31 2026 GMT
Not After : Aug 4 21:52:31 2026 GMT
Subject: CN=6a69249f-90bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:fe:20:a3:44:d0:40:9b:43:f1:1b:0b:00:
fc:ed:0f:a3:33:b8:a9:82:0f:f0:8e:e9:ad:e8:59:
89:ce:b2:fd:44:3b:bd:7a:30:28:58:a4:8e:ef:db:
5d:71:0f:9c:cc:0b:8f:19:25:fe:ed:a7:7d:47:cb:
ec:39:50:cf:a1:02:30:13:28:78:c5:6e:83:95:4c:
92:dd:41:cf:4c:07:0b:c0:d8:bf:08:27:ea:c4:90:
bd:e7:5e:9f:fc:d4:6b:7f:96:2c:de:c2:fa:40:4e:
15:d8:89:15:e8:31:90:20:eb:54:5b:21:45:00:a5:
eb:d3:f7:58:8e:9f:fd:5d:cd:53:36:6c:d2:9a:c9:
dc:a8:f7:47:8d:55:9f:ef:a5:87:48:16:a1:51:c3:
3d:e1:5f:f2:47:93:f1:fa:72:ae:0a:92:07:af:8d:
39:7b:ca:f1:1b:fa:da:5c:2d:6c:15:e8:39:03:76:
44:a1:30:ee:5e:e8:4c:6e:67:98:9e:14:70:29:cd:
3c:ad:d7:7a:ec:cf:1f:94:cf:1e:d2:ee:53:b7:21:
2e:2a:f1:62:b9:56:d9:98:b0:0d:47:c2:c7:43:e8:
a3:18:26:3a:e9:ff:49:a1:20:38:60:bc:af:63:72:
80:e8:8a:e4:c8:ee:79:be:e2:58:64:ed:c5:56:8a:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:B5:63:AB:93:4F:65:62:9E:D3:30:D7:C1:2E:96:30:28:46:10
X509v3 Authority Key Identifier:
keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:23:9a:19:1d:8c:2c:9c:00:b3:fb:5a:62:45:07:e0:43:19:
30:08:bc:a5:59:69:ff:ef:74:0b:d3:b9:23:ee:ee:e2:06:27:
57:74:17:65:0a:0d:ec:52:95:f8:8a:21:a5:bc:31:bd:61:d5:
68:76:7b:27:eb:3b:14:37:36:09:1d:1a:18:6a:f6:2d:e6:df:
f7:09:9a:1f:3c:7d:52:d0:b9:c4:a9:ae:0f:50:c6:54:cf:75:
d8:8c:36:b6:a3:d2:43:80:4d:e5:57:63:85:a6:e3:e5:f4:b3:
55:f0:fa:c3:41:03:66:5e:ce:f9:e1:8f:f5:71:3a:c7:d3:e2:
a5:e6:e5:d5:cf:ca:c9:18:e8:ef:83:25:c1:b7:6d:f9:cd:1c:
61:40:48:4c:b9:03:a6:9e:9b:8b:7a:e6:02:89:a8:69:10:05:
c6:31:fb:d7:b7:f7:19:06:57:86:85:b7:16:ba:79:5f:23:6a:
18:9e:84:a4:06:36:00:ff:84:41:54:c5:70:e6:0d:5f:58:1c:
3d:93:09:a4:5e:44:02:52:f2:09:9c:a5:e4:bb:d8:84:60:cb:
70:f2:3a:b5:3e:71:6f:80:4b:42:c1:02:5d:ec:54:64:90:9b:
d1:56:94:35:32:1c:bf:93:bf:18:64:bc:fa:8d:0e:49:1e:8f:
6d:be:23:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3
NUEwMjdDNjkwHhcNMjYwNzI4MjE1MjMxWhcNMjYwODA0MjE1MjMxWjAYMRYwFAYD
VQQDEw02YTY5MjQ5Zi05MGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6D+IKNE0ECbQ/EbCwD87Q+jM7ipgg/wjumt6FmJzrL9RDu9ejAoWKSO79td
cQ+czAuPGSX+7ad9R8vsOVDPoQIwEyh4xW6DlUyS3UHPTAcLwNi/CCfqxJC9516f
/NRrf5Ys3sL6QE4V2IkV6DGQIOtUWyFFAKXr0/dYjp/9Xc1TNmzSmsncqPdHjVWf
76WHSBahUcM94V/yR5Px+nKuCpIHr405e8rxG/raXC1sFeg5A3ZEoTDuXuhMbmeY
nhRwKc08rdd67M8flM8e0u5TtyEuKvFiuVbZmLANR8LHQ+ijGCY66f9JoSA4YLyv
Y3KA6IrkyO55vuJYZO3FVoqEbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKCtWOr
k09lYp7TMNfBLpYwKEYQMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx
MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND
TWVIdGczdkR1QVoxb0NmR2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADCOaGR2MLJwAs/taYkUH4EMZMAi8pVlp/+90C9O5I+7u4gYnV3QXZQoN7FKV
+IohpbwxvWHVaHZ7J+s7FDc2CR0aGGr2Lebf9wmaHzx9UtC5xKmuD1DGVM912Iw2
tqPSQ4BN5Vdjhabj5fSzVfD6w0EDZl7O+eGP9XE6x9Pipebl1c/KyRjo74Mlwbdt
+c0cYUBITLkDpp6bi3rmAomoaRAFxjH717f3GQZXhoW3Frp5XyNqGJ6EpAY2AP+E
QVTFcOYNX1gcPZMJpF5EAlLyCZyl5LvYhGDLcPI6tT5xb4BLQsECXexUZJCb0VaU
NTIcv5O/GGS8+o0OSR6Pbb4jxQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:06 2026 by rpki-client