
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json)
Hash identifier: nC8ZJ4IvGFYSkAQnG8PNWKcHrzpEvT9w7nQEMrrDVH4=
Subject key identifier: 26:01:88:5E:6C:5A:83:0B:11:1A:43:34:3F:FC:80:DA:0A:4B:0B:9D
Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Certificate serial: 04F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
Manifest number: 04F0
Signing time: Sun 01 Mar 2026 00:20:02 +0000
Manifest this update: Sun 01 Mar 2026 00:20:01 +0000
Manifest next update: Sun 08 Mar 2026 00:20:01 +0000
Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: lDvC/lDO5lA5VkkTA2YN0Ojdfd0rrz73Plq05e9fHSc=)
2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: h/s9RyXLHAI1sqd9uwegBKrHWXm8UIc8RPznkO0q/SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Validity
Not Before: Mar 1 00:20:01 2026 GMT
Not After : Mar 8 00:20:01 2026 GMT
Subject: CN=69a38632-2537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:ae:41:a9:1e:49:51:03:5f:20:10:ad:c4:
af:67:63:89:0d:7a:44:30:e0:e8:a0:c0:07:c3:b8:
d3:fe:9d:56:f7:7b:21:8c:d9:58:5a:91:16:12:34:
f8:bf:1a:06:c6:1c:30:02:27:ad:19:95:09:f3:da:
30:9c:a2:e8:15:e8:11:ba:e4:60:3d:8c:d2:8b:a2:
4c:50:0d:6f:11:5e:0a:fd:1c:37:a6:0f:f8:bb:c6:
9d:6e:1e:54:81:67:70:c1:06:50:ee:3f:67:f2:1b:
0a:b6:e7:22:a4:0a:82:1f:23:3b:ba:e6:9f:73:6b:
62:d5:47:ee:24:a8:f6:50:38:df:c2:0d:60:43:e9:
13:65:1a:6a:4d:76:ae:84:bc:4f:3f:72:1d:30:f7:
27:7e:fe:16:24:5b:fb:69:cf:bc:4e:44:d8:53:95:
2e:d5:37:e7:74:bf:4e:d4:c8:f7:8c:78:f2:c8:fd:
c1:09:cd:d3:4a:4c:22:59:83:c1:78:d4:d3:9e:78:
76:9d:93:14:b9:59:54:fe:9f:e6:da:d4:6d:29:3c:
ce:20:ea:7e:bd:38:29:41:37:9a:5d:ef:1b:2a:e4:
51:da:ec:ee:08:80:43:84:44:33:de:45:93:23:69:
3e:c0:45:b5:50:4e:ae:01:79:ed:a9:18:34:e5:71:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:01:88:5E:6C:5A:83:0B:11:1A:43:34:3F:FC:80:DA:0A:4B:0B:9D
X509v3 Authority Key Identifier:
keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:c8:c4:6e:5f:3a:31:91:57:ae:13:99:f8:66:6e:e8:5d:2a:
6e:59:50:ee:90:12:27:bd:61:5d:86:26:0c:dc:9a:74:c7:b4:
12:78:8c:17:a5:25:c0:e0:b5:36:dd:58:86:15:43:16:22:87:
e0:66:85:b9:96:e0:d1:f6:7c:de:65:68:fd:00:25:7a:bf:89:
bc:25:58:db:73:60:35:57:45:d7:e1:f3:be:99:ee:49:6f:a3:
0d:80:8b:17:fc:db:71:9e:c9:6d:5a:bd:3f:b1:be:1a:f1:33:
fc:66:25:99:e8:de:9b:43:fd:7e:f5:4b:19:8f:a5:69:51:40:
d2:82:ba:f3:d2:70:f2:ef:c8:65:26:de:a3:d7:87:56:5c:bc:
01:80:f6:8a:29:30:02:cc:b0:60:fd:62:fe:ad:b1:67:c2:0f:
7e:f3:66:57:7d:0b:fe:18:a8:7f:aa:83:9e:00:be:9f:56:39:
c2:ce:11:54:f2:28:4d:1d:e9:7e:7b:0d:df:27:a0:0a:68:dd:
ad:dc:af:14:25:7e:66:1b:8b:a2:7b:b3:eb:c8:62:9c:36:fb:
06:88:a0:86:e4:38:72:64:39:4d:39:cb:cb:91:dc:bf:9b:2b:
ed:10:33:c2:9d:6b:fe:48:5b:a4:40:61:a5:f0:b6:36:90:16:
ff:88:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:00 2026 by rpki-client