
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier: CCPTEZ6ns/JPzHbGC2Qsj6SUN/Ghll2Uvs2lRtwqiVs=
Subject key identifier: AA:1A:DF:0D:08:9E:9C:97:3F:39:26:3E:4F:DD:63:D6:FD:0F:89:45
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial: 122B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number: 1221
Signing time: Sat 28 Feb 2026 17:12:22 +0000
Manifest this update: Sat 28 Feb 2026 17:12:21 +0000
Manifest next update: Sat 07 Mar 2026 17:12:21 +0000
Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: YSbKJc1M9RJp2gW/WN1cG0D/LGlBYMoxvULcodGnj48=)
2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4651 (0x122b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Validity
Not Before: Feb 28 17:12:21 2026 GMT
Not After : Mar 7 17:12:21 2026 GMT
Subject: CN=69a321f5-d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:71:5c:f9:ce:74:a1:a7:28:89:bd:de:7d:
d5:35:65:a6:69:7e:1c:31:80:83:2a:ad:6e:1f:c6:
be:a2:95:ef:6a:a0:15:61:c7:ea:11:37:5c:40:27:
d8:8a:36:95:a6:3e:40:d1:d8:f2:38:92:bf:cf:5c:
88:04:a9:58:cf:24:07:9d:c3:2f:60:73:e3:17:b6:
14:a4:44:f7:33:9f:59:5e:16:55:2b:8a:f1:0d:77:
2f:ee:a1:b4:9d:0a:09:3c:38:f0:9d:f8:8f:dd:04:
d8:0b:b9:f6:bc:89:92:5a:da:e0:f3:a7:cd:ab:e0:
eb:70:70:70:8c:a0:64:12:c1:d3:2c:59:04:46:c5:
ab:37:87:b5:ba:52:a1:ea:f1:11:9b:cf:84:47:ba:
18:a3:f7:5f:04:a2:e2:73:e1:06:45:d1:11:85:e8:
03:8f:2b:59:66:70:09:ec:e3:2c:0c:29:ae:ad:ad:
ad:c4:03:67:e9:4a:f9:2e:1b:06:7f:e1:4e:8e:3f:
f4:c5:15:93:28:e6:9e:65:2f:d0:51:f2:b3:03:11:
2f:b3:b1:06:a8:71:2c:39:20:96:b2:ee:47:f5:84:
3e:11:74:8a:b3:44:0e:d4:4a:0b:52:be:94:b5:e6:
06:19:0f:5b:8c:bb:d7:df:60:b2:64:de:bb:df:bb:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:DF:0D:08:9E:9C:97:3F:39:26:3E:4F:DD:63:D6:FD:0F:89:45
X509v3 Authority Key Identifier:
keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:dc:b1:c2:cc:9f:f3:10:4a:c2:65:cb:a5:42:2d:83:d5:
df:db:f1:a9:88:49:71:70:21:94:ae:9b:8d:92:71:ed:ef:ce:
4e:85:61:a5:2f:96:1c:35:db:aa:c0:80:c2:86:18:64:64:08:
1f:fc:b8:13:42:22:be:29:d8:a4:9d:20:fc:9d:39:34:0f:8a:
fe:2b:5b:0d:ff:14:81:ed:83:c6:98:9e:85:57:61:cd:a0:25:
a8:a4:66:30:0e:49:9e:84:86:cd:ed:e2:60:71:ea:fa:21:d0:
62:1b:6b:81:41:fa:fb:6f:c3:ff:e1:b4:5c:07:a5:6e:44:d0:
4f:d7:5b:d1:b7:e7:85:c2:24:9b:c3:e7:04:b4:59:43:2a:69:
2d:61:d6:c3:f3:47:11:16:78:03:68:b1:74:8a:42:17:3e:07:
b9:ef:33:24:9a:f5:80:4e:47:25:a6:2e:9f:c3:f4:dc:f0:72:
9b:ee:d5:06:d9:54:36:32:d1:6f:40:4b:e4:59:c9:d4:a3:96:
b4:06:ec:0c:74:81:dc:91:a2:17:52:2e:37:92:32:89:df:ce:
1c:c3:d5:6d:98:5c:66:d3:26:ae:90:56:30:7c:e4:58:37:03:
26:cf:d5:32:93:c1:59:75:0a:65:4b:ef:16:16:e2:97:44:b8:
c8:08:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:09 2026 by rpki-client