
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json)
Hash identifier: IOvnJbEramBVcAiATgtZY7EzOfawsy5ZbLj4PVhLde8=
Subject key identifier: 86:2C:1D:40:0D:3B:D9:F9:ED:DE:16:D3:2E:6D:BF:84:40:7D:BE:46
Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Certificate serial: 0800
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
Manifest number: 07ED
Signing time: Tue 22 Sep 2026 21:05:38 +0000
Manifest this update: Tue 22 Sep 2026 21:05:37 +0000
Manifest next update: Tue 29 Sep 2026 21:05:37 +0000
Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: HwFUqMWAH+kOfaeVdpBsWsxgk2WEOBCFZ4DgmWKhMwI=)
2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: FbF3GSUAuBF+Lu9+Biww40q4aw4ohnbpizYlHh1W2WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Validity
Not Before: Sep 22 21:05:37 2026 GMT
Not After : Sep 29 21:05:37 2026 GMT
Subject: CN=6ab2eda1-93b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:6a:a4:87:ce:c1:f7:7d:f4:d6:ba:7d:2a:
43:e7:cf:12:98:29:10:bc:68:a9:3e:a3:0e:c7:a8:
4d:45:ef:22:b1:10:39:33:ad:bf:99:59:30:26:41:
85:ce:a4:4b:d1:d8:0b:5d:1d:f5:fe:d2:07:d9:59:
69:ee:ff:f8:f7:3f:78:5d:cd:8e:22:16:f4:54:48:
d7:3e:40:f5:c0:05:02:22:c9:f8:12:f7:80:b6:94:
ab:95:00:d7:74:a2:c4:54:e5:b9:f4:79:5b:fd:63:
dd:0d:62:48:27:ac:a0:ed:db:f6:77:27:97:4d:5b:
d3:9a:01:9d:14:9d:84:3a:86:d0:96:da:87:c9:d6:
74:77:12:b4:98:2a:32:34:ed:1a:6e:78:5e:e9:d8:
ee:a6:d1:ec:b1:6a:2c:f7:f6:53:38:15:75:53:91:
31:2f:31:4e:e6:4b:22:fa:8f:a3:dd:ab:4d:d6:cf:
ca:fc:5e:7b:40:93:fb:c3:8b:fd:27:e2:e0:c9:34:
de:e6:b8:84:61:b0:67:01:dc:c7:dc:bb:89:26:06:
9e:d3:f4:4e:c0:21:76:06:29:e5:49:02:d5:76:7e:
11:40:ff:c2:c4:81:8f:40:51:b0:dd:6c:54:4a:dc:
1c:ac:fb:57:66:fd:6a:63:c4:57:93:ec:80:b0:69:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2C:1D:40:0D:3B:D9:F9:ED:DE:16:D3:2E:6D:BF:84:40:7D:BE:46
X509v3 Authority Key Identifier:
keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:44:e2:4e:b8:09:69:44:7b:77:46:1a:a9:a2:a5:3d:fa:
5b:6d:87:6e:ac:df:41:c7:95:2f:a5:3d:ae:80:c5:8b:8a:8d:
43:0d:f8:59:74:4b:d5:68:d4:35:0f:f8:98:0e:71:7f:5d:93:
01:b2:e5:b8:a7:88:17:10:1d:b5:81:a4:7b:65:c4:45:ee:4f:
df:82:9c:be:81:3c:15:36:94:55:e3:c1:53:e7:23:5b:b4:d8:
e1:84:11:7d:9c:85:21:b9:3a:d2:e3:0a:fb:48:51:21:2d:a0:
2b:90:90:63:f9:c5:ea:50:3a:96:1f:1a:21:7d:74:c8:4d:bd:
ed:c6:e8:3e:c0:cd:4f:8f:86:da:6c:5e:cd:91:cd:1b:73:9c:
3d:59:d5:a3:bc:ad:ce:2f:52:60:f9:1e:db:ab:b7:db:80:49:
79:5d:0e:4e:5c:dd:89:6a:7b:eb:8f:96:b0:c5:c6:31:db:20:
a2:27:36:61:2f:3f:ac:f4:b4:ba:d0:b0:b0:15:95:22:b5:27:
fb:9d:1a:f3:c0:65:48:d6:74:68:d6:2d:50:d1:a6:0c:dc:43:
0d:ae:b7:96:5f:a3:12:e3:ca:13:23:58:47:6c:3e:77:68:4e:
cb:45:16:32:2c:1f:fe:b3:83:b6:dd:49:bf:fc:01:fb:e2:95:
28:28:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:33:59 2026 by rpki-client