
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json)
Hash identifier: Sb3Af2+y3t7Jsui1BXZB/vOv6zy+1F0BJrAgL+Nkyps=
Subject key identifier: ED:D4:8F:EC:C8:F9:4B:D2:32:F6:E1:9C:63:EF:B7:02:1F:58:0B:61
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
Manifest number: BC
Signing time: Sun 01 Mar 2026 08:15:14 +0000
Manifest this update: Sun 01 Mar 2026 08:15:14 +0000
Manifest next update: Sun 08 Mar 2026 08:15:14 +0000
Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: C8ZATiNeKMKjLWkr1GzL0MjZrMbUpCZAnAM482y9pEc=)
2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: wMZyhnBV4sS1OoXti8AOYy1UKjGrlLJQob0X/T9aUpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Validity
Not Before: Mar 1 08:15:14 2026 GMT
Not After : Mar 8 08:15:14 2026 GMT
Subject: CN=69a3f592-1e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:02:89:a0:3d:33:90:9d:38:cd:cd:0c:7e:
af:26:84:2b:5d:db:23:4b:1a:91:ae:f9:ff:24:ec:
75:08:bb:89:49:c1:f0:26:e7:14:47:60:b0:25:0c:
d4:2b:e8:d7:2b:94:78:b4:33:0e:e7:d2:4f:19:87:
a0:29:71:4e:c8:0c:e4:b9:8c:6a:f1:df:09:b5:5b:
57:9a:d8:c1:02:73:ec:d4:70:fa:62:73:d8:8c:fc:
e4:fa:73:9c:9b:8b:b0:04:63:9c:3c:f4:fd:85:ef:
f5:ec:c6:7f:d0:82:50:3e:77:a7:78:90:1d:0b:df:
5a:47:2b:c6:d6:b6:37:dd:cf:4d:f4:99:e8:ca:95:
0e:aa:ab:c1:14:6e:2b:9b:49:0a:76:fc:97:74:5e:
9b:dd:f4:ce:22:bf:eb:a8:a8:1b:dc:d2:31:0f:f2:
ee:0a:26:77:e1:e4:fa:b5:fe:1a:bc:2d:7b:e4:64:
e5:b7:19:96:13:9e:74:1a:6a:a1:75:25:4a:d0:e1:
41:b8:15:e6:3d:ad:46:28:50:90:6c:35:c8:b9:8d:
c7:4c:b9:3f:12:db:74:d0:e4:4a:34:9e:ef:25:08:
a6:37:02:5c:dd:4c:a8:1a:07:84:8d:62:16:60:ae:
37:a0:09:03:2e:a5:49:02:f1:3b:2c:b7:a8:2b:50:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:8F:EC:C8:F9:4B:D2:32:F6:E1:9C:63:EF:B7:02:1F:58:0B:61
X509v3 Authority Key Identifier:
keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b8:60:75:d7:b1:16:6e:79:a3:54:11:ee:bf:9f:54:1d:64:
c9:99:f5:a0:53:d0:5c:37:c7:53:27:43:1a:ce:7a:cc:bd:f2:
e2:d5:90:32:87:f1:5a:19:66:78:cc:e1:eb:20:bf:2c:a1:c3:
fd:93:c0:c1:5a:5d:fd:77:92:0c:dd:81:2e:3d:39:58:79:3f:
b7:41:14:79:3a:c1:16:b1:99:84:a5:c4:c3:67:31:3e:4d:31:
63:79:4f:c0:27:74:c5:29:c2:c4:54:f8:b6:21:db:4d:3b:a4:
8a:ec:93:ad:8d:68:a7:1a:6c:d6:e6:c1:76:73:6d:3a:67:3c:
32:02:64:3d:89:c9:e2:d9:0f:30:d9:e1:e7:b0:d0:a3:f6:0d:
f5:a7:3f:67:a8:58:13:23:d4:2c:f2:86:b0:73:42:7e:2d:b3:
3d:9d:00:9e:be:39:13:fd:b9:c3:f1:ea:58:7e:ba:c4:21:fb:
9b:e8:62:39:8e:3a:f6:fa:eb:7a:3c:be:01:32:29:56:af:9e:
72:84:83:2a:8d:f8:ca:ef:11:03:1a:12:0e:5b:c1:a6:3c:c3:
da:21:b4:f7:4a:be:83:44:dd:4e:83:f2:d7:95:a0:c7:4a:c4:
23:9f:28:6b:6f:8d:ed:dc:ec:d3:cc:7e:6f:e0:de:0c:7c:4e:
9b:84:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:30 2026 by rpki-client