
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
File: s8j34GTam1qm6nlgF-xg0okDeCo.mft (raw, json)
Hash identifier: y8H/TI5kDZS7bHq/BoAYbdmCYhb/x7Y8XM9l9dxXbRw=
Subject key identifier: DE:7E:C3:2E:D5:83:12:B8:71:38:47:39:00:3B:E4:6F:B7:C2:99:83
Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A
Certificate issuer: /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A
Certificate serial: 16B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
Manifest number: 169C
Signing time: Sun 01 Mar 2026 23:12:17 +0000
Manifest this update: Sun 01 Mar 2026 23:12:17 +0000
Manifest next update: Sun 08 Mar 2026 23:12:17 +0000
Files and hashes: 1: s8j34GTam1qm6nlgF-xg0okDeCo.crl (hash: uks/v4kMccU4jicCda6tNawIufiE+HQ9/emjhcacrq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl
rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5809 (0x16b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D671F, serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A
Validity
Not Before: Mar 1 23:12:17 2026 GMT
Not After : Mar 8 23:12:17 2026 GMT
Subject: CN=69a4c7d1-8ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:51:e0:08:fc:72:b0:b2:72:e1:df:73:c6:
65:ed:ce:1b:88:e4:22:27:de:32:77:6c:39:12:6f:
89:9e:e7:ff:f3:84:8c:b8:43:0e:30:64:a3:1c:c6:
d0:68:ca:79:35:fb:b1:bd:52:aa:6e:95:25:df:61:
72:98:3e:24:33:ca:8b:c4:56:56:d6:4a:94:8b:1f:
1c:d8:bb:c1:34:24:09:d5:6b:e1:04:bb:c2:a2:42:
fc:dd:ff:74:ee:5b:33:f1:4d:3d:78:65:af:a6:fd:
f5:b8:c9:81:f7:e2:5b:d9:67:4e:dd:c3:33:c8:f1:
54:ae:34:21:28:97:cd:44:b4:10:ee:24:f0:4e:43:
25:e3:33:3d:1a:e3:4e:fb:18:6a:99:cc:2d:30:14:
bd:c8:b6:ea:fd:bb:03:20:84:0e:32:68:26:7b:b3:
6f:f9:d8:f9:b7:70:25:47:dc:39:b2:78:1c:5f:fe:
58:c8:fc:ae:3b:60:e7:af:e2:80:c8:38:c2:fb:f3:
7e:2a:22:20:52:34:22:b6:6c:9c:12:5d:a6:ab:73:
f7:f2:1a:bf:62:6d:cc:19:f4:e4:3b:6a:38:ff:b0:
4b:6a:8d:3b:ca:4d:97:ce:32:4c:59:65:60:6b:09:
ac:12:80:b5:72:f2:a8:84:b9:80:f4:84:8d:88:13:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:C3:2E:D5:83:12:B8:71:38:47:39:00:3B:E4:6F:B7:C2:99:83
X509v3 Authority Key Identifier:
keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:28:38:f1:43:5e:94:b5:5c:41:0a:95:c1:0c:79:83:bc:a6:
6f:7e:78:0d:82:44:2c:7b:a6:58:3d:c0:0e:80:64:cd:8a:f0:
f0:3c:15:22:f2:e5:46:4a:c5:11:bf:d4:2c:43:02:82:02:35:
24:cc:cd:8f:a5:7f:f3:af:12:d1:e8:c9:b5:21:37:02:e7:0d:
9c:e1:0a:52:17:f8:01:87:27:9b:f4:72:a1:6c:1a:85:df:a9:
0b:e3:35:30:39:f3:62:89:ea:4d:3f:73:4d:d2:34:e9:9a:ec:
10:6b:80:b3:d8:91:6e:36:49:0d:d5:91:83:54:56:ba:c5:95:
64:f7:d2:cc:3d:b3:07:98:5e:bb:52:7b:87:92:35:7b:4d:c8:
7c:14:16:67:6d:bd:b1:2a:2c:57:1d:df:63:0b:84:6d:93:04:
bb:af:e0:f7:ed:71:89:40:66:45:d1:57:41:70:72:f8:0f:75:
2a:18:a9:c1:b6:20:2c:3f:46:5a:6e:1d:df:01:b8:c6:f3:44:
f6:b5:5b:cc:9b:c8:b8:96:4b:78:bb:7e:3f:4b:05:c5:b8:43:
18:68:19:80:d5:80:3a:92:a5:f6:ca:a4:70:20:6a:69:7c:ae:
da:49:83:3e:ed:4b:17:60:49:a8:a1:e1:75:4d:d2:5f:b0:f2:
31:cc:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:13 2026 by rpki-client