
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json)
Hash identifier: x90Vr3v0rngIO6XfX6z9OFfy3IOBultz0Xg69BRr51E=
Subject key identifier: E7:BB:08:44:94:8D:E0:DF:28:4E:5B:4D:71:EA:EC:9B:60:01:BB:68
Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Certificate serial: 0813
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
Manifest number: 0DA4
Signing time: Thu 16 Apr 2026 21:02:24 +0000
Manifest this update: Thu 16 Apr 2026 21:02:24 +0000
Manifest next update: Thu 23 Apr 2026 21:02:24 +0000
Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: 1UcibXQuGzbdqRy2VDr0WnanRn/IZEpAppiKPU5gLeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Validity
Not Before: Apr 16 21:02:24 2026 GMT
Not After : Apr 23 21:02:24 2026 GMT
Subject: CN=69e14e60-1733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:5d:81:29:5f:8b:6c:0e:34:50:0f:a2:54:
6c:d9:ee:08:0c:71:a7:0e:1b:6c:2a:98:93:9c:80:
1f:74:4f:f8:e9:70:d1:27:a5:9b:d0:03:e9:73:07:
76:a3:59:a3:55:4a:db:02:b9:da:64:e3:02:bb:67:
3a:f5:2d:f0:c4:7d:29:34:db:b8:15:f6:f3:37:c1:
85:59:68:7f:86:4e:4c:c8:4d:e7:4a:05:61:fe:a7:
cd:46:18:0b:7c:f5:40:ab:a0:ec:15:64:cd:50:a8:
18:40:60:2f:0b:7f:ea:ab:86:bb:3d:1c:dc:59:ca:
ad:b1:0a:14:83:f7:08:14:70:c5:ac:1e:10:15:f4:
e3:f8:2f:60:2a:da:5e:0d:53:22:c5:7b:de:86:1b:
b5:68:a2:b6:52:b6:e6:90:c1:1f:43:44:47:23:7e:
ea:bd:db:6c:5a:4f:07:89:9a:af:e4:37:35:bf:2d:
82:f9:54:9a:6f:70:34:cd:54:60:bf:20:cb:e1:f8:
c8:dc:80:33:64:c6:c6:57:f9:ff:bb:f7:cb:df:2a:
01:71:09:36:80:3c:1f:7a:ec:71:6f:7f:1e:51:55:
fa:ec:1e:76:e9:e6:35:d4:08:97:07:17:23:96:e1:
33:8b:f5:e7:5d:b6:34:48:55:01:cf:63:57:16:0d:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BB:08:44:94:8D:E0:DF:28:4E:5B:4D:71:EA:EC:9B:60:01:BB:68
X509v3 Authority Key Identifier:
keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d1:da:ee:a7:46:98:1d:52:09:24:18:9d:9a:77:1f:2d:ab:
94:31:b8:3a:65:ae:0c:c3:a8:37:58:d9:65:c5:cc:14:6e:3a:
2c:ee:c7:a8:c3:10:1a:98:15:cb:92:8b:f7:87:36:e1:8c:f6:
f6:b4:14:cc:9e:13:7b:fe:f6:16:c7:6a:c5:fb:e7:97:25:a0:
d2:f5:5a:ed:b0:21:d7:e0:ae:1a:89:5e:cb:d7:40:38:9a:a1:
13:15:fa:0e:21:bb:fb:a3:79:09:41:42:e9:84:37:be:4b:1f:
ac:0c:50:5a:e4:7c:53:71:44:24:af:a7:32:18:ab:1b:18:5f:
c6:80:1c:fb:e5:73:52:ee:7d:41:11:b6:df:87:6e:e7:a9:38:
66:ce:e9:98:99:e6:b3:00:1f:dd:b7:a4:7f:88:73:bc:be:c3:
76:80:06:03:bd:63:f4:df:75:5b:8f:46:61:6f:cf:29:54:59:
70:c7:e8:b0:a4:71:0e:ab:8e:eb:1d:cf:32:e2:ba:9f:d3:bd:
aa:87:4c:8f:56:98:d8:cc:71:a2:60:74:51:71:a6:44:be:a5:
85:5d:91:bf:71:13:be:52:8b:32:a1:3c:3a:c0:b3:51:40:80:
26:72:9e:11:c5:e7:5e:26:6d:6f:1f:76:74:2a:19:95:6f:a1:
bb:ef:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:26 2026 by rpki-client