
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File: yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier: i8OLz0FAUuiVvsgEqQA5WHn8U7+o2CNpqZyOC0sYOTU=
Subject key identifier: 07:D7:AB:D5:47:10:48:13:30:88:23:BA:36:AA:D4:B2:65:31:4A:18
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number: C8
Signing time: Sun 19 Apr 2026 06:29:50 +0000
Manifest this update: Sun 19 Apr 2026 06:29:49 +0000
Manifest next update: Sun 26 Apr 2026 06:29:49 +0000
Files and hashes: 1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: acUF8mUCzZJoooEvCP0TL7RZ1BeF9xbWN4uzQ80UpEI=)
2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Validity
Not Before: Apr 19 06:29:49 2026 GMT
Not After : Apr 26 06:29:49 2026 GMT
Subject: CN=69e4765d-a0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:3d:f6:95:37:f7:46:20:6a:47:49:a2:c6:
e3:ce:4c:8a:e1:ce:27:7a:c8:6b:22:b6:42:63:e3:
9c:48:e1:85:b5:47:23:08:77:8f:5d:15:97:66:60:
a8:64:99:44:6c:be:e4:f1:84:60:93:3e:62:b6:dc:
e0:99:a3:84:d4:53:b3:2e:95:8c:9c:fe:78:74:54:
f3:b5:20:3d:87:35:e6:4e:cc:29:c6:d8:0a:88:dc:
5f:e2:27:0e:3d:54:d7:f9:2b:2f:ac:b5:9a:88:af:
04:14:ba:ea:47:55:64:fb:70:34:d7:f3:b5:94:8e:
82:96:63:1a:27:c3:7a:b9:c6:b6:f5:69:a2:c3:2e:
59:30:bd:0a:34:87:b7:93:8b:50:fc:6f:f4:7e:48:
73:e3:5c:50:7b:00:7d:66:cd:62:a8:47:5d:2b:7e:
e2:34:45:4f:ba:91:9e:d0:ab:5c:0e:31:88:64:01:
5a:3f:d4:33:40:84:0d:08:c0:41:8a:c8:ea:2d:84:
0c:dd:aa:bd:c8:c9:c3:72:67:06:9f:ff:64:41:55:
e0:c1:bd:11:fd:19:5c:bc:be:32:8d:86:64:4c:1b:
9b:c7:c6:59:5c:ee:56:a9:72:db:0a:96:8e:70:b8:
7a:64:28:14:c2:7e:00:2b:fa:3d:4e:a5:25:b5:4c:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D7:AB:D5:47:10:48:13:30:88:23:BA:36:AA:D4:B2:65:31:4A:18
X509v3 Authority Key Identifier:
keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:20:94:95:96:55:bf:0e:c0:a5:79:3c:80:4c:4f:33:bc:
e4:e9:f6:7e:a6:83:5a:11:1f:af:88:a0:bc:78:2b:cc:cb:24:
ba:71:58:89:a5:1c:dd:58:04:6f:47:f7:01:eb:b8:ed:96:d7:
98:3b:e7:82:d3:82:9b:21:14:4c:97:cb:53:ed:30:01:56:c7:
e0:76:4a:e7:50:47:ad:16:bc:60:dc:18:d4:f5:46:56:7c:c7:
c0:e6:48:33:6d:2c:fd:5c:42:db:0f:20:69:20:79:0c:82:10:
ee:78:12:6b:66:3c:6c:73:18:04:16:f8:06:a6:a8:87:b3:68:
0f:57:d2:0b:9f:1a:15:18:ca:4b:54:9e:07:10:e4:ac:60:0f:
dd:fa:d3:8a:88:f2:24:66:8e:ed:6a:70:66:cf:28:8b:25:3e:
65:88:c3:c9:b3:bd:15:41:08:be:51:6f:0a:e5:e8:8c:05:6f:
ca:af:66:31:cd:fd:9e:a4:05:30:6a:0b:8c:61:69:49:d0:19:
99:80:4e:d4:e5:58:13:86:9b:9e:ed:18:62:d2:1a:40:4a:58:
92:a2:0c:7c:c8:44:20:d1:52:a4:77:31:b7:8f:1e:0b:58:9d:
8a:bf:ec:fe:4c:44:28:f4:2e:c6:92:17:4a:c0:da:07:82:32:
e8:93:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:17 2026 by rpki-client