
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
File: V8WBYb3sTcee9I4gXyuNEgKPCuo.mft (raw, json)
Hash identifier: VcJFHPhqd0YZIi8V7PAWmwM5YwsHCjY6bwwzTHt9bTw=
Subject key identifier: 20:2E:52:A7:91:D4:D7:94:B2:2A:83:5E:70:E5:8C:80:55:4D:0C:64
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
Manifest number: D2
Signing time: Sun 01 Mar 2026 07:59:44 +0000
Manifest this update: Sun 01 Mar 2026 07:59:43 +0000
Manifest next update: Sun 08 Mar 2026 07:59:43 +0000
Files and hashes: 1: V8WBYb3sTcee9I4gXyuNEgKPCuo.crl (hash: mwntT6R6Bwq4a14bNrIKb80YKlJxjBQWiNAJBfAENOA=)
2: 12316BAEE42C11EF9066AE3AC4F9AE02.roa (hash: g8F4xe8L27/RyFCYKNOUQvT8dPfl1tJvFLgJu9GBbm0=)
3: F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (hash: pI9kw7ajYV9MhSMNM79iHf8cuxXwcsHAf0RU2KLckPA=)
4: FFE0419EB92511F0BA672039C4F9AE02.roa (hash: HKSSiCbriVOE5msicpQkDxihQin6Oho5dT21VSm3Q04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Validity
Not Before: Mar 1 07:59:43 2026 GMT
Not After : Mar 8 07:59:43 2026 GMT
Subject: CN=69a3f1ef-a5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:65:ad:6f:77:4a:e8:a8:93:27:8d:bf:04:
98:70:12:2a:91:00:85:6f:b8:16:72:fb:dc:29:8e:
52:11:b9:13:1e:7d:6a:32:d2:60:03:55:fe:d8:80:
88:fa:3c:71:06:87:e0:ca:e6:2b:f0:fc:d3:fc:bc:
88:e4:ed:be:6c:76:c0:d6:6e:b3:f4:af:7d:6f:6d:
53:22:57:d5:62:eb:fa:3d:3c:0b:76:66:2f:25:98:
b5:d5:50:15:50:f5:9e:fc:81:a9:fc:90:43:2f:c5:
6e:cd:c2:35:03:71:b6:76:ca:c3:bb:ef:20:9d:43:
37:9e:e9:a0:3b:88:9a:34:d0:fe:5f:21:a7:79:89:
31:a4:72:e1:e3:95:81:14:ba:05:9e:75:e0:46:11:
24:30:38:58:71:43:a1:d0:29:54:6f:a5:9c:77:91:
48:6e:4d:09:b2:4a:02:ec:33:2f:63:77:f6:25:a1:
40:c3:59:31:00:1c:25:db:75:09:49:72:0e:9a:c7:
30:d3:8b:f2:92:2f:19:3a:c7:27:7c:f3:35:16:87:
81:32:eb:b3:08:a4:00:92:f4:74:98:45:ff:9e:f5:
46:c5:a6:4e:2a:b0:10:97:5b:50:70:ff:d6:c0:96:
94:9f:1f:8e:fa:0a:fd:f8:6f:fa:47:90:eb:f0:d7:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:52:A7:91:D4:D7:94:B2:2A:83:5E:70:E5:8C:80:55:4D:0C:64
X509v3 Authority Key Identifier:
keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:b4:97:09:98:80:85:b2:39:ed:4a:a8:0e:49:8a:dd:8f:25:
44:ad:2d:9a:d6:c7:db:89:4a:99:41:b6:5e:27:56:9a:32:e2:
62:2c:8a:b3:70:59:a8:b4:ef:ed:a3:9a:bd:0c:92:39:8f:2f:
43:ce:d7:0d:d6:ab:ea:74:0f:c9:f5:9d:73:bc:d6:37:6a:99:
16:bd:b0:7a:58:9e:4e:55:45:7c:34:fa:d7:40:4d:87:ff:00:
65:e8:14:d9:f7:4f:45:37:a3:c3:6c:a5:4f:11:15:0c:67:1f:
31:38:00:41:d0:9b:88:d8:6b:fa:cd:ce:da:c6:8d:68:bd:38:
16:d8:e2:8c:08:bc:79:99:6e:2a:75:75:dd:bc:0e:0f:10:1c:
9e:c1:9c:46:1c:fb:fd:c2:4e:86:29:4a:ff:5d:5f:01:43:bf:
b4:24:8d:19:d2:52:24:74:cc:66:47:f0:8a:1a:12:58:33:5d:
5d:64:79:a6:19:85:7c:69:31:39:06:f0:85:4c:ac:9d:6e:d2:
a3:5b:0d:22:c1:f2:7f:c9:bd:a3:26:03:0a:4e:23:57:85:b0:
0d:6e:84:a7:99:6f:c1:42:db:14:42:0c:a3:91:9f:2f:36:97:
8a:8a:44:a5:19:95:ed:62:07:47:20:28:30:fe:c8:30:6c:3e:
e0:24:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:59 2026 by rpki-client