
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json)
Hash identifier: Pavbh34p5EH0oKv7uUKFbmP1YlYxEPub0kgf3p2bIe0=
Subject key identifier: A6:03:F3:DA:51:19:A9:04:8E:A4:09:E9:2E:61:4E:D4:63:90:DD:AA
Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
Manifest number: 67
Signing time: Sun 19 Apr 2026 07:31:54 +0000
Manifest this update: Sun 19 Apr 2026 07:31:54 +0000
Manifest next update: Sun 26 Apr 2026 07:31:54 +0000
Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: PwMG4Plxsy5oQmHQlWTsTJ1J5sukSbStLmfPRowJjg4=)
2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: NZ2PR9JzupHRbIAvvTjexUgRAGHGGYmk/Ol3V3TWapU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Validity
Not Before: Apr 19 07:31:54 2026 GMT
Not After : Apr 26 07:31:54 2026 GMT
Subject: CN=69e484ea-9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:65:20:d2:c7:37:7b:cd:33:27:94:45:59:
3d:e8:4a:72:8f:91:b4:e7:79:33:48:fb:44:c9:b3:
66:21:03:12:73:f6:d7:6d:0f:06:0d:5e:16:aa:69:
a7:08:d2:cc:77:ac:c5:40:31:32:65:3a:f6:c2:6c:
1f:ad:37:b2:56:8e:5c:14:f6:fa:2f:db:1b:43:26:
f2:25:33:96:60:34:2e:74:df:ab:d6:68:d4:8e:e5:
91:d5:df:d1:0b:ab:02:54:8c:31:09:6e:15:29:c0:
e3:49:67:11:49:52:e4:69:1f:4c:43:ab:78:51:0f:
d3:b4:29:f0:13:cc:09:e3:e9:0c:33:24:7e:44:e3:
d1:9a:5b:35:9c:d6:60:d6:2f:55:2b:bb:31:4e:ec:
bb:8f:f5:68:e4:38:54:1f:18:a0:85:81:7b:9e:a8:
05:31:48:51:15:3a:4c:82:b1:91:11:23:3e:a1:41:
ad:f9:e1:0d:e5:68:e9:11:12:e9:03:9f:38:13:6d:
da:0a:81:5b:20:93:f1:28:d2:20:78:42:41:a2:45:
65:86:6c:d7:85:8e:82:b1:be:b3:fe:01:75:55:d0:
09:1c:1e:fc:91:01:d0:9f:16:b4:d7:26:7e:74:37:
a7:50:79:fc:ed:0d:a7:f1:28:a4:9d:7f:e1:b7:b2:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:03:F3:DA:51:19:A9:04:8E:A4:09:E9:2E:61:4E:D4:63:90:DD:AA
X509v3 Authority Key Identifier:
keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:7c:41:ae:ac:18:3c:b3:af:ce:bf:34:6b:5a:ec:2b:31:69:
fc:e9:52:c1:d8:e2:a4:13:39:44:70:85:97:e1:de:05:e6:81:
22:36:a6:68:42:cd:3a:ff:2c:e8:80:39:78:ef:f6:b3:40:63:
da:30:03:bc:fb:20:91:c4:9b:b4:fe:ba:89:c7:bd:65:cd:05:
6c:4d:0f:8c:0f:e4:12:67:6b:05:bc:cb:67:7e:4b:57:33:ac:
45:75:16:b6:2c:3b:b5:a0:ad:2c:34:f5:8f:1f:b2:59:94:3a:
20:3c:99:b3:0f:a1:94:c2:f6:da:a4:05:54:da:86:c7:48:42:
b8:7e:7a:5c:f5:1f:fd:cd:73:14:ed:e7:db:97:08:84:c5:25:
44:99:42:a7:68:79:68:ac:98:c8:6f:50:b4:ed:0f:d9:24:d1:
58:58:de:77:96:c4:71:6b:d8:14:67:01:67:0b:47:06:69:8e:
3f:9a:5a:74:75:3a:2b:99:7a:61:a4:52:08:71:ac:e6:62:42:
73:df:3b:69:04:26:37:ca:f9:6c:bb:ef:04:cd:12:4b:32:c6:
32:f2:07:cc:f0:6c:a1:12:d2:76:d6:20:22:e7:58:86:b6:d5:
8b:bf:28:e9:37:48:a5:b0:d0:c3:42:6e:11:6e:70:6e:5b:20:
2e:3a:e8:8c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE
RERFNzhGODAeFw0yNjA0MTkwNzMxNTRaFw0yNjA0MjYwNzMxNTRaMBgxFjAUBgNV
BAMTDTY5ZTQ4NGVhLTk4NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbT2Ug0sc3e80zJ5RFWT3oSnKPkbTneTNI+0TJs2YhAxJz9tdtDwYNXhaqaacI
0sx3rMVAMTJlOvbCbB+tN7JWjlwU9vov2xtDJvIlM5ZgNC5036vWaNSO5ZHV39EL
qwJUjDEJbhUpwONJZxFJUuRpH0xDq3hRD9O0KfATzAnj6QwzJH5E49GaWzWc1mDW
L1UruzFO7LuP9WjkOFQfGKCFgXueqAUxSFEVOkyCsZERIz6hQa354Q3laOkREukD
nzgTbdoKgVsgk/Eo0iB4QkGiRWWGbNeFjoKxvrP+AXVV0AkcHvyRAdCfFrTXJn50
N6dQefztDafxKKSdf+G3st53AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpgPz2lEZ
qQSOpAnpLmFO1GOQ3aowHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3
QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr
Z25qbjktMVBWRnQzZWVQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCTfEGurBg8s6/OvzRrWuwrMWn86VLB2OKkEzlEcIWX4d4F5oEiNqZoQs06/yzo
gDl47/azQGPaMAO8+yCRxJu0/rqJx71lzQVsTQ+MD+QSZ2sFvMtnfktXM6xFdRa2
LDu1oK0sNPWPH7JZlDogPJmzD6GUwvbapAVU2obHSEK4fnpc9R/9zXMU7efblwiE
xSVEmUKnaHlorJjIb1C07Q/ZJNFYWN53lsRxa9gUZwFnC0cGaY4/mlp0dTormXph
pFIIcazmYkJz3ztpBCY3yvlsu+8EzRJLMsYy8gfM8GyhEtJ21iAi51iGttWLvyjp
N0ilsNDDQm4RbnBuWyAuOuiM
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:36 2026 by rpki-client