
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier: lRB7kZ+8VKjdlhgTu/fVtPOpapq0yI8JSioBJEMViBk=
Subject key identifier: 39:94:3A:F3:E3:19:F0:23:DB:DB:CA:94:41:67:89:7C:41:93:06:FA
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number: 06E1
Signing time: Sat 28 Feb 2026 22:36:14 +0000
Manifest this update: Sat 28 Feb 2026 22:36:14 +0000
Manifest next update: Sat 07 Mar 2026 22:36:14 +0000
Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: 6R63ggWtoqVvxmNXBMg1kGX44MuF1JFWWdRFch5auQI=)
2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Validity
Not Before: Feb 28 22:36:14 2026 GMT
Not After : Mar 7 22:36:14 2026 GMT
Subject: CN=69a36dde-ed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:e3:c9:27:c9:b9:ec:65:75:50:1c:53:4d:
6d:33:35:a9:90:e7:2f:32:5a:53:3a:02:4c:5f:2a:
21:45:45:9d:97:91:a5:0c:f2:12:37:2d:c8:9e:a8:
13:19:b7:be:e4:6a:ac:5e:f9:f4:3d:6e:1f:fd:54:
82:b2:6b:fa:20:46:45:e1:33:44:49:07:0c:09:68:
a8:d2:8c:34:e9:09:5d:4d:d3:3a:1f:f4:75:f5:f3:
d8:42:62:97:3c:6d:02:1d:e2:12:28:4e:fa:d3:23:
86:f8:fd:fa:3d:e1:fa:c0:cd:19:df:5f:3a:db:4a:
ac:24:5b:f8:e4:22:c3:bc:68:f1:cd:3d:65:6a:c1:
c4:a6:10:8d:07:95:ce:d1:b1:54:8b:e5:f5:26:9c:
8c:a8:b0:dc:f1:2a:b1:03:87:1f:f9:a7:27:d8:a7:
e2:15:63:4c:bb:fc:01:17:e3:33:25:11:b6:45:07:
a4:e5:5c:b4:6e:70:9c:2b:68:54:c2:5d:ce:a9:ee:
f5:17:da:66:5e:a3:9c:5e:40:99:21:23:42:17:b3:
0c:8c:24:0b:96:47:81:ea:b1:41:f2:25:51:0c:3a:
33:91:4a:58:f5:cf:2d:6b:05:05:a0:47:f3:cd:49:
85:0f:50:2a:45:24:01:7f:9a:d4:e1:52:96:a6:9b:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:94:3A:F3:E3:19:F0:23:DB:DB:CA:94:41:67:89:7C:41:93:06:FA
X509v3 Authority Key Identifier:
keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:60:c1:cb:72:78:61:04:26:bc:35:d1:da:ca:7e:55:a2:d4:
42:06:d7:4b:ec:5b:03:49:ec:b7:ec:bb:a9:85:47:66:2a:bd:
ee:02:64:f5:b9:a3:0b:b2:ad:9b:31:7d:1d:a5:cb:f3:3b:05:
59:8e:4e:01:31:0e:7c:71:09:b9:d7:24:f9:1d:01:1a:3e:c9:
88:f8:21:37:7e:da:1a:dd:cf:fe:b6:40:b3:36:0a:de:31:ca:
b1:b8:80:55:fc:86:02:0b:54:7a:ad:83:2b:75:cb:5a:d5:d1:
4b:d5:24:b4:f9:9f:67:98:9a:6b:1f:81:af:eb:27:34:96:d7:
3f:8a:d6:21:dc:a0:50:01:41:f1:72:52:61:8a:dd:30:82:44:
bf:45:f9:a6:03:f9:d5:4a:26:36:f8:2e:57:34:b6:22:1e:c8:
2f:e4:1f:1d:4a:71:5a:e3:af:0a:66:04:5e:ca:c9:9a:86:6c:
6e:39:91:5c:c2:81:ec:48:e3:c9:17:df:48:f8:2a:58:b6:78:
5e:a0:25:ce:97:72:12:65:46:c1:7e:3e:35:d8:30:3d:dd:05:
da:09:19:9d:20:9f:a8:0d:de:b9:b8:52:17:7e:90:41:84:8a:
d9:07:ec:39:2e:d3:8c:74:ba:b6:f0:2a:2e:9e:a8:17:d8:fe:
d3:8c:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:32 2026 by rpki-client