
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json)
Hash identifier: TnprcPtofJJdR+mwCahbz1WSldUkTO6jFew7dms+/cc=
Subject key identifier: 43:64:E9:79:61:9F:74:73:B8:2B:8E:BA:0C:34:60:A1:BF:1F:9D:48
Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Certificate serial: 07FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
Manifest number: 0D74
Signing time: Sun 01 Mar 2026 23:28:11 +0000
Manifest this update: Sun 01 Mar 2026 23:28:09 +0000
Manifest next update: Sun 08 Mar 2026 23:28:09 +0000
Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: knOKIACEOKkM8/f5KsuJbxD0o+oippHsSBL3Wb7rtmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2043 (0x7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Validity
Not Before: Mar 1 23:28:09 2026 GMT
Not After : Mar 8 23:28:09 2026 GMT
Subject: CN=69a4cb8a-3892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:28:ec:15:03:08:10:7a:cf:a0:25:00:23:
a5:ef:a7:7c:fa:c8:d8:46:3c:c2:42:db:d1:d8:84:
ca:44:4a:a0:ab:3a:1d:13:07:b8:04:6b:f0:a8:9c:
d6:6f:64:0d:36:db:77:7a:20:a2:5c:81:db:21:a6:
9d:da:a8:b9:18:e4:02:7a:f4:83:59:2e:54:e5:55:
5f:b6:51:41:7f:49:f3:ef:3b:dc:48:86:2a:f1:69:
d3:a7:02:59:ab:55:36:bb:2c:98:41:4c:ea:90:48:
a7:c2:40:ec:8c:ae:1c:e7:e0:56:f0:65:e9:9b:83:
dd:6b:42:df:b5:70:a6:68:c9:2e:8d:80:5c:28:83:
e4:87:e1:09:18:dd:00:ed:75:8a:67:0a:e5:57:e7:
d3:f2:cb:0d:b8:c2:08:d5:ce:ba:22:92:5d:bb:36:
c3:1d:d3:56:15:18:b1:cc:28:5a:88:f4:44:8d:c3:
cf:62:ec:f2:12:08:4d:aa:81:08:5c:d2:d2:88:e2:
8d:74:44:a2:84:8e:59:6e:7b:3f:12:5d:5b:21:01:
af:53:66:dc:14:7d:97:b1:82:f8:50:25:5b:de:bb:
41:6a:25:75:89:01:b5:28:18:05:c1:ea:d9:a3:d9:
fc:72:ec:68:d3:7b:27:38:f6:0e:d7:84:33:90:69:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:E9:79:61:9F:74:73:B8:2B:8E:BA:0C:34:60:A1:BF:1F:9D:48
X509v3 Authority Key Identifier:
keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ba:44:f3:47:f6:ca:13:35:9c:09:70:f9:06:ea:09:d4:f1:
1c:92:13:4a:58:aa:1c:4c:53:16:c5:b4:d4:5b:f8:aa:c9:19:
36:6d:ed:7e:da:ea:98:06:8b:e2:0b:ed:25:8d:2e:df:a4:76:
6a:61:ae:27:af:8d:e8:a9:a9:40:93:3a:fc:c3:56:b3:f0:24:
bd:70:c7:40:39:ac:45:ff:37:d8:89:e0:dc:00:84:29:00:96:
a3:3d:d4:14:8f:1e:15:b3:35:d3:90:29:cf:c5:95:6d:0a:bf:
fb:a7:2f:59:51:6f:11:4e:d9:d8:6f:5c:c0:21:cc:dd:2d:c6:
b7:73:fc:5d:39:eb:15:7f:01:5f:fe:2e:e7:1f:14:ac:6f:35:
92:95:8a:53:0d:5f:31:86:ce:4b:98:f0:b4:2a:1b:b6:bc:d6:
c3:04:53:80:89:b3:07:2f:bc:c8:5e:98:9a:e1:28:da:47:3e:
14:cf:52:08:ca:60:5a:ef:43:70:93:f7:0e:d9:03:24:e6:bc:
ce:12:a8:71:6c:80:5c:d2:0e:2f:b3:4c:c2:f4:5c:e4:60:24:
42:c2:08:31:f9:ec:13:a8:3b:5e:3d:2a:a2:b4:11:2b:79:d9:
93:57:ce:53:d5:c3:a8:f3:70:3d:16:04:db:2a:71:ed:9c:70:
f3:35:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:34 2026 by rpki-client