
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier: PnDq6HZpuTooREmczyK3eC1lyg+9W+DjJJBNFNfUyT4=
Subject key identifier: A4:30:50:14:76:59:B5:00:40:93:FE:08:57:AF:EB:22:10:66:2A:15
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial: 1255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number: 123D
Signing time: Thu 16 Apr 2026 17:02:58 +0000
Manifest this update: Thu 16 Apr 2026 17:02:58 +0000
Manifest next update: Thu 23 Apr 2026 17:02:58 +0000
Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: U8aUXXMQWytqcFk4F31Je+sFVutsKkJ9d4BTJMpNdkM=)
2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: yX06bXibRyqYQ53QWArbh3lavUZOOzpp/mZPOnVc/hA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4693 (0x1255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Validity
Not Before: Apr 16 17:02:58 2026 GMT
Not After : Apr 23 17:02:58 2026 GMT
Subject: CN=69e11642-3f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:f8:1d:2a:2f:35:3c:6c:18:76:4e:32:78:
9c:5e:4d:37:aa:08:90:3b:b4:c8:0b:bc:24:1d:bf:
d0:3d:90:5f:16:0a:73:5d:c4:36:8a:38:e6:17:19:
99:e3:0b:af:3f:1e:cd:94:00:55:83:f0:04:0d:c7:
37:f0:3d:5a:90:15:a7:96:26:f7:3c:62:9c:ec:74:
69:56:47:72:5d:70:66:1e:e9:4e:65:9f:58:8f:6d:
68:6a:76:79:ac:56:d4:9e:1b:bd:fa:a4:1f:9e:30:
35:26:97:9c:3b:52:2a:4d:ab:c5:2f:0f:ee:74:43:
09:c8:70:e0:73:55:23:a3:01:4a:94:66:05:d8:43:
4d:4f:22:15:da:03:22:ba:46:fb:3a:38:5c:ec:d7:
81:37:10:a9:ed:30:77:87:90:b2:83:56:02:79:09:
94:af:07:82:5c:1c:45:11:13:77:b5:68:52:a5:25:
ba:4d:f4:5f:1e:57:99:d4:b9:71:3f:79:f3:5b:ce:
84:f1:2e:e1:2a:98:7b:c0:6c:08:d3:90:19:1a:4e:
ce:50:c9:43:e3:ac:2a:fd:3e:a4:da:d6:23:6a:63:
e9:50:a2:ce:4d:9e:02:73:92:dd:cb:93:40:76:80:
bf:27:cd:e4:73:25:5f:bd:ca:20:ef:17:2d:2c:cb:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:50:14:76:59:B5:00:40:93:FE:08:57:AF:EB:22:10:66:2A:15
X509v3 Authority Key Identifier:
keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:d2:71:5b:eb:28:e6:73:11:df:9c:74:29:96:bf:bd:df:e9:
89:bc:08:67:e6:28:86:bb:1f:51:5c:a6:6e:52:9e:7f:8c:b5:
f8:37:be:f2:75:ef:90:cf:ed:11:1f:71:10:ce:ee:ad:71:2f:
49:0d:b9:d1:86:3d:ac:9a:c2:e5:c6:38:b2:04:13:93:68:3b:
22:72:b4:d4:56:69:4e:a0:e5:0c:83:e9:94:99:b5:83:1d:01:
38:07:f7:53:83:ad:14:b7:48:53:e6:e2:6e:73:e5:e5:87:5f:
dc:bb:2b:da:95:e0:8d:f8:b1:0d:66:db:b0:c3:e1:cc:fc:88:
50:d3:f7:ad:d9:c2:82:eb:72:c8:a7:08:8a:c8:8c:89:ce:97:
c7:09:8c:76:26:a5:4c:37:ff:8f:3a:3c:59:93:a8:f5:f7:af:
6a:34:cc:64:39:4d:5e:f6:9e:10:67:9a:c4:2a:3e:0d:97:5d:
8b:0e:c4:56:d4:8b:a1:c4:2e:bb:8a:09:31:07:67:55:6c:97:
45:3c:59:53:76:af:a1:a5:9a:16:36:6d:5f:bb:61:d2:9a:e8:
9a:4c:c2:d2:8c:24:76:5d:2b:2a:fd:4d:d0:9b:01:8a:56:41:
c0:df:6b:92:e1:1f:89:a2:6f:78:c8:0f:03:b3:e7:4b:2e:b6:
a5:09:43:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICElUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz
QkNFNDc2MDkwHhcNMjYwNDE2MTcwMjU4WhcNMjYwNDIzMTcwMjU4WjAYMRYwFAYD
VQQDEw02OWUxMTY0Mi0zZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtF/4HSovNTxsGHZOMnicXk03qgiQO7TIC7wkHb/QPZBfFgpzXcQ2ijjmFxmZ
4wuvPx7NlABVg/AEDcc38D1akBWnlib3PGKc7HRpVkdyXXBmHulOZZ9Yj21oanZ5
rFbUnhu9+qQfnjA1JpecO1IqTavFLw/udEMJyHDgc1UjowFKlGYF2ENNTyIV2gMi
ukb7Ojhc7NeBNxCp7TB3h5Cyg1YCeQmUrweCXBxFERN3tWhSpSW6TfRfHleZ1Llx
P3nzW86E8S7hKph7wGwI05AZGk7OUMlD46wq/T6k2tYjamPpUKLOTZ4Cc5Ldy5NA
doC/J83kcyVfvcog7xctLMt/0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQwUBR2
WbUAQJP+CFev6yIQZioVMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5
NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6
ZkFBODFEV2l1RlE3emtkZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIdJxW+so5nMR35x0KZa/vd/pibwIZ+YohrsfUVymblKef4y1+De+8nXvkM/t
ER9xEM7urXEvSQ250YY9rJrC5cY4sgQTk2g7InK01FZpTqDlDIPplJm1gx0BOAf3
U4OtFLdIU+bibnPl5Ydf3Lsr2pXgjfixDWbbsMPhzPyIUNP3rdnCgutyyKcIisiM
ic6XxwmMdialTDf/jzo8WZOo9fevajTMZDlNXvaeEGeaxCo+DZddiw7EVtSLocQu
u4oJMQdnVWyXRTxZU3avoaWaFjZtX7th0promkzC0owkdl0rKv1N0JsBilZBwN9r
kuEfiaJveMgPA7PnSy62pQlDcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:30 2026 by rpki-client