
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json)
Hash identifier: Am2ub57QZOae30/e9vFZipprU+PbS2y+17LugXbE5sE=
Subject key identifier: EA:EE:4F:A6:9F:BA:C8:A3:C1:1F:A7:5F:EE:1B:0F:B2:4D:D3:97:F5
Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
Manifest number: 01A1
Signing time: Mon 02 Mar 2026 01:25:15 +0000
Manifest this update: Mon 02 Mar 2026 01:25:14 +0000
Manifest next update: Mon 09 Mar 2026 01:25:14 +0000
Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: 4g8Ecqt6eEx7Ubnq7KBhVMjdvn2NbefTp4Ic1frOYyI=)
2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: PdTF8JZAzZqkYsv5aYjwZSB0/7MTqhPMOhGlyT03h9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Validity
Not Before: Mar 2 01:25:14 2026 GMT
Not After : Mar 9 01:25:14 2026 GMT
Subject: CN=69a4e6fb-92e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:aa:28:dc:94:9e:97:73:cd:b4:fe:22:eb:
77:1d:da:3b:74:fe:66:2c:f9:b2:04:e2:e2:df:9f:
98:2f:6a:e9:92:b7:90:b1:65:4b:67:26:b8:b0:53:
f5:e2:8b:a8:30:8c:41:be:1a:72:2d:05:9e:ff:03:
81:5c:c0:fa:19:67:ff:9d:68:b3:f1:12:a9:1f:49:
fb:b4:0a:d0:80:52:0d:f4:0c:3e:ca:96:91:c9:8b:
36:fb:86:87:99:39:56:ec:69:ba:5e:0b:c5:43:a2:
3a:63:88:b0:f6:2c:dc:67:dc:71:4e:d6:d5:45:25:
8d:34:70:f5:28:e5:b8:d1:e1:f7:6b:85:7d:8c:a6:
2f:22:b2:62:bb:42:74:e7:2a:42:8f:f6:e7:7f:45:
65:dc:7c:a4:42:1c:14:07:5e:e2:c6:ec:e3:d1:40:
bf:e4:f5:bb:05:e4:29:dd:07:6a:1e:08:41:b9:22:
26:fe:52:90:d0:24:93:2e:51:b5:5b:d1:39:b4:41:
39:83:12:3d:a3:0a:4e:f7:44:0b:fb:3b:9f:ff:42:
63:57:ae:53:34:e2:cd:fa:d2:c9:40:11:e6:6f:7e:
6c:5e:4a:ee:fb:68:7f:27:93:64:27:d1:5f:cb:d0:
03:0a:51:6a:5a:64:ed:87:a5:ec:7c:55:e6:61:6f:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:4F:A6:9F:BA:C8:A3:C1:1F:A7:5F:EE:1B:0F:B2:4D:D3:97:F5
X509v3 Authority Key Identifier:
keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:da:17:23:97:a8:19:a3:41:ff:89:af:c1:ee:41:c5:09:77:
a1:9f:9d:e4:70:41:e9:5b:8b:81:17:98:22:1c:3b:3d:dc:15:
cc:1b:f8:1a:e7:1a:7a:a1:f2:38:55:2c:9c:fc:ff:83:fe:20:
cd:9f:23:64:00:45:9a:05:d1:39:b9:c5:5d:50:f7:5c:6c:d9:
ba:d1:a9:3d:95:5a:96:08:52:c0:e8:3e:66:54:5f:48:94:58:
a3:4c:10:10:e3:ea:74:53:b9:99:f3:c1:e7:fd:a4:ad:80:c7:
e5:36:07:84:53:c8:4c:3b:2d:3b:c4:6c:ed:9a:88:51:9c:56:
91:5f:5c:67:39:3d:ea:c1:66:a2:92:de:5c:20:ac:f7:8a:47:
49:39:4a:73:bb:58:ff:0d:8e:de:7f:3c:a3:d8:ab:5b:e5:9c:
84:45:8b:2f:c0:b4:67:6c:d6:61:9c:d6:c2:33:e2:49:92:97:
fb:cc:7b:b7:19:35:65:b4:23:da:89:76:aa:a2:19:9d:46:6c:
2c:7b:01:d2:96:70:e6:b8:f7:22:e9:a0:ac:3e:02:f8:84:87:
c8:b5:eb:c4:23:2c:b5:72:b6:ac:3a:c5:8d:c6:2e:53:74:b9:
fe:ee:a0:7b:b0:8d:4d:ad:58:2d:74:2a:f6:d7:13:c0:30:cd:
78:bc:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:56 2026 by rpki-client