
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json)
Hash identifier: YK+b2d11YgLE0+Sl1xRaGwVcZ/zvQABZwJdjjJoIu7s=
Subject key identifier: 55:1C:97:AA:9D:1F:C0:CE:FF:40:2B:0A:DA:93:32:32:85:ED:B9:5E
Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
Manifest number: 01EF
Signing time: Sat 13 Jun 2026 03:22:37 +0000
Manifest this update: Sat 13 Jun 2026 03:22:36 +0000
Manifest next update: Sat 20 Jun 2026 03:22:36 +0000
Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: flH5HOa0csT2x+h8sfFcGeHShNjfNrFmE2EWcibU5DI=)
2: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: PHajpZxrBbwNo1rzop6t1kDAND+XuEDmiysqwaKiUK4=)
3: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: tOMkH0Ay9qb/mpun76IvTGnqwv+4Yq7qBoEQv2FSAAk=)
4: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: yLCHLkKHbHA08+tXZCtJcmyubM9Z6U4xpeyvONN3Ypg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Validity
Not Before: Jun 13 03:22:36 2026 GMT
Not After : Jun 20 03:22:36 2026 GMT
Subject: CN=6a2cccfd-ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:6f:f4:3f:ce:47:28:d5:56:ee:fb:4f:8b:
e0:14:37:6d:17:f0:06:d4:d3:79:d1:43:06:89:4c:
72:fc:bd:d6:e8:d4:fd:fd:52:ca:d7:d4:3e:99:24:
b4:3a:cf:5c:55:7c:5e:9c:ce:90:eb:c6:1a:71:26:
b9:1b:29:64:00:8f:43:e5:5f:a5:26:0e:5d:ce:16:
61:33:06:63:e8:59:73:38:d2:d4:2a:39:b2:13:c6:
fe:8d:8d:14:cc:4b:06:86:77:1b:b3:c7:3d:00:5a:
1c:a9:b0:0c:6c:49:6f:b4:d7:0a:56:27:24:fd:4c:
2d:e0:44:31:28:1c:f2:08:a4:cb:3c:93:24:b4:36:
3b:07:81:80:72:e9:7f:11:0d:af:0c:b0:00:9f:d4:
b5:06:ca:af:be:bd:f7:02:30:80:6a:af:60:8a:58:
c7:00:f2:f8:6b:98:47:74:59:35:4d:b5:5b:82:92:
d0:99:d7:aa:8a:7f:a8:07:86:dd:46:06:3c:e2:2d:
e9:81:3a:31:c8:13:69:73:3e:d8:2d:db:a1:2c:ce:
53:61:33:4a:e7:ef:eb:91:97:75:9f:ff:6d:bf:5a:
a3:40:a8:85:d8:17:e1:61:a2:12:70:94:60:9f:0d:
64:4e:d2:cc:84:8e:0f:bb:db:71:8d:47:d1:bc:bf:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1C:97:AA:9D:1F:C0:CE:FF:40:2B:0A:DA:93:32:32:85:ED:B9:5E
X509v3 Authority Key Identifier:
keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e7:3f:68:22:7b:01:85:3e:97:16:80:5b:31:7c:3d:6b:d5:
79:34:ae:d6:87:49:3c:b7:b2:b3:82:6b:b9:ca:74:02:b1:c6:
5e:a2:52:8a:3f:6a:20:b0:12:3f:6c:bd:74:fe:43:92:2c:2e:
ad:9c:1e:38:6f:71:f4:d3:a8:a3:a1:3a:1a:0a:4b:ec:8e:58:
3e:cf:fb:dd:69:81:cf:66:a3:53:30:60:27:b0:71:e8:3e:c6:
5c:b5:1e:da:ac:2a:62:a0:65:c0:08:2d:e5:6d:8c:98:ff:4a:
c2:b5:6e:b7:17:47:5c:af:10:0e:c7:07:f0:bf:52:23:e5:b1:
b3:4e:c0:45:b4:21:9a:25:40:b4:7f:07:ff:23:70:67:f9:c7:
b0:8f:3b:fe:ff:df:a3:e1:72:bc:75:e7:42:cd:58:ce:7b:c9:
f0:e1:54:5c:d4:4d:63:63:f8:7a:c3:fe:2a:bc:a1:df:a0:6e:
91:8e:65:ac:10:61:77:de:81:45:42:31:6f:69:bc:a8:8f:2c:
a3:c9:ea:f4:fd:70:6f:2c:07:2e:d6:d4:19:50:b7:6c:90:e3:
e0:d6:74:9c:bd:5b:2b:e3:03:c1:ed:f3:ca:5e:46:79:68:4d:
62:b1:e0:2c:fb:d5:38:18:1f:7c:02:a2:e6:ce:8e:4c:4f:ac:
24:d9:70:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:24 2026 by rpki-client