
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier: KauewjLHdQI0ZtclwXF6NdVMTY5dvwqkqm3PosFR5rI=
Subject key identifier: 94:FC:B4:9F:43:49:1A:07:6A:0D:D7:AB:70:0A:2F:14:21:C2:FF:40
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial: 14F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number: 14D0
Signing time: Mon 02 Mar 2026 00:58:36 +0000
Manifest this update: Mon 02 Mar 2026 00:58:34 +0000
Manifest next update: Mon 09 Mar 2026 00:58:34 +0000
Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: jwYh2bK2JC5qmVXLD0lzONDZdXueJzflklTdqMotO8Y=)
2: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: nHdgdCvKY1Y9twOWSJSJeHzjweCUK60NzNjzUvm1MXs=)
3: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: +whKNCKBWu/fW8ZOLuLgPSDmcXDG1KA00Y9l8DL/PP0=)
4: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: Hr7OpNKmlMWAc1DIpsosFxnOhgjPdStDv79SYsuEpFU=)
5: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: AG7+A5Yb2KDtnoNzA36Acb2KghCB+Rzmi98/tCvvjZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5367 (0x14f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Validity
Not Before: Mar 2 00:58:34 2026 GMT
Not After : Mar 9 00:58:34 2026 GMT
Subject: CN=69a4e0bb-8a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:a7:e8:a8:2f:85:af:a3:01:c0:15:95:47:
0d:39:8a:ee:9a:2f:47:de:34:00:bc:ea:17:bf:03:
93:4c:73:3d:d4:d1:89:51:ba:b5:61:07:17:d6:e0:
76:49:8f:d3:1f:56:fb:93:64:85:28:38:f4:14:5f:
f4:0b:31:55:25:24:88:45:98:7a:5b:fa:6b:92:96:
55:c9:c3:bb:35:eb:70:7b:11:1b:b3:d3:cc:19:b8:
10:9f:cd:23:2f:17:fa:63:b5:a4:79:8c:2e:82:30:
6b:b3:37:2e:08:ba:35:8c:9c:35:4f:47:2b:6a:ab:
dc:48:db:00:d2:d6:b3:b5:b6:03:93:9d:18:2c:7b:
4b:4e:44:5f:25:39:3a:c6:9e:0a:89:d0:49:95:d4:
68:b2:9a:a3:b0:a3:16:6e:5f:49:f3:75:6e:d0:7a:
65:df:cf:35:f8:0f:42:07:d0:81:16:ca:35:d1:3e:
54:ef:a4:ff:73:1b:70:0a:e4:a5:da:9c:71:d7:ac:
04:da:39:4b:d9:f6:bf:1b:0f:ff:fa:bf:34:2a:21:
6b:31:1e:39:bf:29:59:63:b7:b1:58:b0:74:7c:50:
a5:49:29:2c:6f:fd:92:e9:90:f8:33:54:fb:28:a9:
d9:7d:92:ca:ab:9c:16:d3:d0:06:ce:44:e8:48:51:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:B4:9F:43:49:1A:07:6A:0D:D7:AB:70:0A:2F:14:21:C2:FF:40
X509v3 Authority Key Identifier:
keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:93:93:48:c0:6c:cb:93:ac:3e:a0:91:7c:10:05:51:d1:
b1:6e:5e:25:04:b4:73:a4:48:70:6b:13:44:9c:29:a5:a2:3f:
60:37:97:8c:6f:5e:06:ba:8e:aa:f5:e8:4b:70:e7:46:48:a2:
b5:81:36:f4:8c:22:b8:a5:eb:7d:1a:63:8c:82:61:54:11:1c:
b8:41:77:20:f9:53:55:79:75:4d:42:d0:5d:77:19:a1:a4:5d:
4f:ad:fa:23:7f:d6:ac:f1:85:6e:5f:34:ff:eb:e1:b5:f0:d9:
64:b1:da:6d:5c:58:ab:2f:a3:ad:73:47:75:f2:0b:d5:51:7b:
11:d5:93:cc:e6:aa:ac:5a:1a:00:63:21:04:39:e7:4c:33:81:
07:9b:e7:ec:78:fa:1f:27:f4:fc:f0:73:b1:04:03:cb:40:da:
24:03:b1:d4:29:55:ee:04:e4:b9:83:76:e3:3e:c8:ed:61:a8:
cb:8d:58:e3:18:40:be:b2:40:f3:ba:76:27:26:f7:ad:36:83:
49:ec:1e:38:4e:16:d4:86:ce:e0:f0:3f:ad:11:7d:93:a4:ca:
20:9e:d1:f4:f4:b1:c0:09:98:43:e4:8c:e3:8e:a5:cf:c0:b9:
d4:d4:2b:8b:5d:d7:73:fa:c8:f0:a5:00:b0:76:c8:e9:46:31:
84:c1:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:28 2026 by rpki-client