
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
File: 80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json)
Hash identifier: ZAaBr/IvzxML4YzHE4eNdsa8jUSgq9jp4gAtMX4wJUk=
Subject key identifier: 33:C4:C5:7F:B2:B7:6A:B5:8A:80:38:C7:5C:FD:D3:58:E9:23:68:1D
Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Certificate issuer: /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
Manifest number: 82
Signing time: Fri 17 Apr 2026 07:22:59 +0000
Manifest this update: Fri 17 Apr 2026 07:22:59 +0000
Manifest next update: Fri 24 Apr 2026 07:22:59 +0000
Files and hashes: 1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: gVgOf6He2iVj8ndhukG+i12wJMnYH1xit8FkBAix/bg=)
2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: y9XglzGcT/yANEywLEKFOF3/z+vv31d43TaG6CEceQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Validity
Not Before: Apr 17 07:22:59 2026 GMT
Not After : Apr 24 07:22:59 2026 GMT
Subject: CN=69e1dfd3-5c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:d9:4d:5f:77:7d:1b:53:19:01:50:42:68:
ed:e5:de:42:2f:f7:df:5b:d1:92:d2:d4:f8:46:08:
ca:40:4e:54:50:3f:7d:78:f6:cd:5c:a4:7f:40:be:
b3:0c:5f:69:8b:f9:54:20:bb:a5:93:eb:ae:40:c6:
55:1e:a4:bf:cf:19:43:a9:6c:50:a1:87:80:f9:49:
ec:e4:2a:a1:7e:99:40:b1:d3:06:3c:33:4d:98:e7:
f3:da:60:82:c1:ad:ea:a6:31:e2:74:7e:73:7d:dc:
65:d3:c0:8b:fd:94:fc:1b:a5:ce:dd:d6:66:c6:d5:
84:bc:cb:07:09:32:a1:18:8c:01:1c:3f:f5:19:bd:
fd:b8:7f:d9:6a:96:bc:82:24:93:af:a8:83:d3:2e:
37:ce:46:2b:ff:7d:2d:0a:a9:f1:36:93:54:f1:eb:
cf:29:82:8f:c3:86:0f:d5:01:7b:dc:ce:37:38:32:
11:b5:6f:81:29:6d:07:91:fa:da:93:d9:03:85:dc:
ba:62:8b:91:6a:bc:ce:c2:29:f9:2d:49:1c:5b:b1:
61:4a:4f:00:0c:db:a2:92:2e:cc:eb:4e:f8:1a:4c:
f3:73:61:54:03:96:eb:b7:d8:8a:4d:8e:e8:73:ae:
7b:45:b3:78:e0:b7:cc:63:00:2e:35:7c:6d:66:e3:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:C5:7F:B2:B7:6A:B5:8A:80:38:C7:5C:FD:D3:58:E9:23:68:1D
X509v3 Authority Key Identifier:
keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6e:17:d3:ca:59:01:30:e3:1c:cc:8c:c5:6b:24:c5:9d:1b:
d1:02:a3:2a:e7:03:63:3a:7e:3d:ff:f5:d4:78:22:72:84:ca:
a8:46:58:fb:a2:b8:c1:81:7e:dd:92:8b:bd:ce:d3:86:ff:75:
14:63:dd:0a:f2:1e:b4:12:6b:38:02:92:50:38:80:4c:82:c2:
9d:9c:a2:fb:ce:bd:55:b6:1e:26:a8:09:67:4d:4b:75:db:f7:
98:8a:54:bf:3c:8e:9d:cf:54:3e:7c:9b:0c:35:cc:b1:a6:ed:
81:76:c3:19:f7:cd:4a:de:5a:00:d9:5d:ac:1b:06:e0:61:e7:
d8:67:71:85:8a:c5:dd:4d:e2:3c:af:37:a0:45:c2:ea:04:31:
74:aa:7c:8b:7e:5c:a1:21:ee:8f:46:43:4d:30:00:a8:86:3c:
ea:98:b5:68:56:95:0a:ee:8f:45:eb:0a:c6:63:08:b9:40:f1:
62:67:58:1d:10:b3:e3:0b:66:e4:ed:2c:df:e9:2e:00:04:5c:
32:9c:db:bf:2e:e0:ae:e7:bd:27:27:84:30:6a:f0:f5:5b:74:
bc:37:d9:a3:50:82:d2:2d:9e:35:b0:97:33:3c:7c:67:1e:b6:
e6:91:d0:f5:bf:6c:51:44:54:f0:29:b0:a1:f5:ca:b3:9b:46:
bc:22:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:17 2026 by rpki-client