
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
File: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json)
Hash identifier: dqHGUuteouD4tCYK3dD56awwD96IEw5Puezz9PhIK7Y=
Subject key identifier: D7:E0:6A:27:20:1A:A1:51:59:68:E3:FA:51:8D:B4:4F:4E:A3:87:AC
Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Certificate serial: 05DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
Manifest number: 05CC
Signing time: Mon 02 Mar 2026 00:32:36 +0000
Manifest this update: Mon 02 Mar 2026 00:32:36 +0000
Manifest next update: Mon 09 Mar 2026 00:32:36 +0000
Files and hashes: 1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: eKHwQddKisgnFTW23+cWSj8GbuDIi/bR/igXTVshcqk=)
2: F18DB130603911EF930C0567C4F9AE02.roa (hash: fyJmP2+tjH5jmHypwbkY3sx8LmyTBoCFRhQ62M+DiAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Validity
Not Before: Mar 2 00:32:36 2026 GMT
Not After : Mar 9 00:32:36 2026 GMT
Subject: CN=69a4daa4-12a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:40:4e:11:aa:27:fa:d5:d4:bc:f0:10:03:
6e:a6:6b:a4:24:0c:c4:55:32:a2:fc:c9:b8:04:3b:
61:72:4a:0c:69:f0:11:4d:ed:cd:fa:b1:a0:48:82:
04:9a:db:98:62:54:36:f3:ed:b7:48:3a:cd:6a:2c:
2a:70:99:7a:9c:1c:84:9a:9a:9e:24:e1:06:0c:8d:
8e:96:37:7e:93:4d:62:d1:84:ce:ca:ea:be:64:9d:
6b:74:86:1a:61:74:05:4a:78:e1:7b:99:a6:66:cd:
6e:91:94:d6:eb:e1:b0:90:cd:9f:68:f3:68:8c:3d:
1e:21:da:ac:ca:9e:27:7c:1b:7e:9e:d5:ef:6c:08:
5e:39:3d:6c:3d:15:8a:62:c2:ae:57:41:9a:fd:cc:
db:36:86:1f:9e:67:08:be:14:c7:5c:1f:72:be:49:
bb:58:a8:f8:3a:0a:bd:d6:a9:22:89:df:98:42:0f:
3e:11:c2:0c:5c:2f:e0:96:0f:aa:27:57:12:af:78:
8f:59:d4:36:79:68:96:77:dc:7c:91:e3:53:24:7e:
1e:1d:bf:6a:d4:72:b8:e9:2a:ff:c6:4f:f8:a0:79:
92:e5:32:2f:e4:fd:97:01:38:ff:b4:36:e0:7f:5a:
f8:f0:8c:64:09:f4:64:35:08:2f:60:c4:11:27:2b:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:6A:27:20:1A:A1:51:59:68:E3:FA:51:8D:B4:4F:4E:A3:87:AC
X509v3 Authority Key Identifier:
keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:64:39:62:76:f2:25:04:7c:c9:95:4c:b9:b0:eb:62:89:
70:2f:0d:1d:d8:9a:1c:c8:0f:e7:fd:e0:27:25:9f:b0:7c:f2:
8d:69:56:ea:14:74:34:04:b5:0f:84:b7:ae:ea:b6:7c:bf:8c:
01:7a:69:b0:65:ef:72:fc:a6:78:eb:dd:2c:89:2e:b1:1e:87:
31:aa:f4:f8:61:4c:d1:d9:fa:66:af:20:29:17:d8:2b:66:6f:
e6:36:be:c1:5d:93:7d:07:e2:29:a5:40:37:82:f3:25:d1:48:
37:fd:03:44:9c:ab:cb:24:4a:45:8f:a1:af:ea:ed:fb:f5:6e:
68:90:eb:7c:e1:6c:fc:4d:b1:6f:66:72:64:cd:ab:ce:fd:6d:
e0:14:af:ae:6f:f6:10:61:d7:d5:dd:ed:92:9c:92:a9:83:95:
c4:00:97:57:0d:a1:bf:8a:e3:62:36:e0:b3:a3:2c:76:9c:f3:
9c:0a:11:5f:20:90:2e:3d:35:9e:8e:e1:4a:ea:c7:5a:f3:8a:
7b:e9:ae:ac:78:06:75:71:ec:d2:fb:e3:90:86:2d:a2:bf:2d:
6e:ee:aa:36:5d:49:a7:1e:28:69:2f:b4:fc:1d:0a:01:95:b8:
1a:91:48:52:b2:fb:f3:8f:6b:58:eb:f6:ff:43:2c:e5:27:d1:
0e:5d:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:19 2026 by rpki-client