
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier: t/yUuIOy+vshYA7VeBBa0i4pQCa5EEbqXWx+gvlDj6M=
Subject key identifier: 75:C7:2D:2E:8A:4B:FE:6A:83:23:E5:DA:89:54:F2:6F:0C:50:B3:DB
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial: 0BAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number: 0BA0
Signing time: Thu 16 Apr 2026 18:59:09 +0000
Manifest this update: Thu 16 Apr 2026 18:59:09 +0000
Manifest next update: Thu 23 Apr 2026 18:59:09 +0000
Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: g7QhsMX5Bj9SPAoKqeoDfbpK7yb4kqd5k/lCqJpA9mA=)
2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Validity
Not Before: Apr 16 18:59:09 2026 GMT
Not After : Apr 23 18:59:09 2026 GMT
Subject: CN=69e1317d-a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:b8:6c:17:5e:d2:b0:7d:f8:c6:05:81:2f:
d8:d8:c2:7e:fe:b9:64:51:6f:1f:47:b9:ad:c3:ae:
db:93:62:63:ef:fc:c6:26:c1:18:ca:73:86:7c:d0:
65:e0:40:6b:41:48:1b:3a:a8:0e:b1:63:30:6a:08:
2b:d6:84:ce:5f:c2:c0:ab:1c:14:99:f1:6c:5b:f1:
06:a1:ae:41:9c:3e:78:7e:b2:27:5a:91:9e:c4:59:
c3:49:b0:60:87:73:82:5e:92:15:ef:09:73:bc:eb:
ff:ba:b2:27:8b:17:49:f8:2d:ab:94:c1:73:86:d5:
83:2b:00:57:d9:b3:83:b7:e8:22:c7:94:98:e1:97:
6f:ea:a4:1c:4a:c3:b9:dc:8c:52:92:23:33:9f:18:
3d:1b:3d:a1:54:2a:6c:61:11:36:5b:54:7e:19:35:
13:57:24:1d:76:34:60:89:ef:c2:2d:9b:45:a5:2e:
26:6b:6b:de:9d:3e:04:a2:4b:3f:24:5b:9a:64:cb:
bf:e2:ec:f0:e1:71:aa:81:a3:13:96:11:f1:e9:c0:
00:79:7d:f5:47:29:b7:83:58:b0:aa:3e:66:e2:2f:
f1:6d:9a:8c:ab:e2:bf:c7:85:97:ed:f3:00:ab:0c:
e1:13:0d:7f:2e:0b:55:81:0f:d3:fa:fd:a8:8f:67:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C7:2D:2E:8A:4B:FE:6A:83:23:E5:DA:89:54:F2:6F:0C:50:B3:DB
X509v3 Authority Key Identifier:
keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:f3:65:7f:aa:77:1e:79:69:5f:44:eb:ad:f1:01:73:bc:74:
8d:eb:71:8c:9a:d2:d2:58:7b:f1:f5:12:0d:49:bd:62:db:d3:
1b:25:f6:1e:dc:e2:06:dc:2f:d0:55:a7:17:0d:9d:90:68:8e:
e0:08:e9:b6:84:93:22:65:1b:02:8d:7f:46:46:5a:fc:c3:1c:
e9:23:82:31:c9:ab:20:81:a9:57:9b:d8:5c:cc:44:5e:97:ab:
23:ec:18:88:30:f4:25:38:bf:1a:5c:94:d3:00:ae:21:c3:ba:
da:4a:a5:10:13:31:f0:b9:82:28:ed:02:b4:90:21:35:0f:33:
b5:3c:53:92:d8:f1:1c:d5:01:fb:ed:18:22:39:7e:3f:ac:5f:
21:76:db:15:6f:53:1c:fd:ce:53:5f:40:46:ad:76:26:19:27:
ec:76:e5:3c:10:6a:02:dd:61:ad:0d:10:38:67:4a:3f:1e:4f:
63:78:f9:d5:76:13:7e:d7:d4:63:9c:ef:ec:f6:2e:37:96:0a:
4e:9f:e0:f9:ab:40:b2:8a:90:16:2a:60:88:bd:ea:61:a9:ed:
5f:d1:b9:c6:41:c9:8f:22:4e:0a:de:03:91:78:f1:4f:8e:ad:
33:12:d9:ec:9a:7c:e7:cc:06:bd:8a:48:f7:48:f8:76:f8:50:
38:fc:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:03 2026 by rpki-client