
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
File: g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json)
Hash identifier: BkrHYrKN6TTdZHw9EsKYm7bvaLI2N2BBOecBDGTe/78=
Subject key identifier: C5:E1:89:EC:91:3B:55:C3:55:F3:B7:E7:91:58:A3:A1:1F:20:41:F6
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Certificate issuer: /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
Manifest number: 0162
Signing time: Fri 17 Apr 2026 04:34:40 +0000
Manifest this update: Fri 17 Apr 2026 04:34:39 +0000
Manifest next update: Fri 24 Apr 2026 04:34:39 +0000
Files and hashes: 1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: NY5f/Exp+zwmbiFHB4PZcphpABi84abY51kZ6godVVw=)
2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: CIdgKiWKc4mMdw08M1pwhFCtHHk4y+8zMM6sElC687o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Validity
Not Before: Apr 17 04:34:39 2026 GMT
Not After : Apr 24 04:34:39 2026 GMT
Subject: CN=69e1b860-f83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:2d:49:87:ce:e4:75:b3:c7:9e:32:2b:36:
9b:07:54:0f:dc:8e:94:56:de:17:91:fb:03:b6:12:
a7:68:6c:1a:62:65:a6:d7:4b:52:59:46:2f:dc:71:
e3:95:7a:29:b0:c6:8d:80:74:85:2f:15:d4:03:1c:
ce:77:f7:60:74:6d:5e:b3:1e:27:b2:58:ac:64:15:
00:64:52:ad:eb:18:04:39:54:a6:42:1f:66:5f:ce:
3e:12:61:22:c5:d2:dd:f7:c7:9d:45:a0:ee:b5:1a:
ac:db:60:e8:bc:bc:4a:70:8c:90:9a:8f:74:ed:fb:
20:ff:25:2c:48:03:71:2f:c5:44:32:2f:ec:72:13:
0b:2d:3e:2f:d0:8c:a2:0d:fa:e0:91:9b:71:9c:99:
e6:d3:9a:05:b2:d1:1e:ac:04:96:4f:f6:25:e7:2c:
ed:dd:08:0d:e0:95:c7:b9:ab:99:e4:25:4a:db:c9:
d8:af:51:d8:6c:c4:76:2f:56:01:f6:2c:87:4f:d5:
36:95:b1:aa:b3:4c:58:d3:76:2b:a3:ee:14:de:ce:
86:db:cd:12:6b:d9:63:02:65:30:81:01:e4:10:00:
cf:c0:97:61:81:cc:85:28:26:cf:58:c7:af:2b:26:
84:af:de:b0:8b:ba:5b:f6:20:a6:e6:91:22:29:6a:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:89:EC:91:3B:55:C3:55:F3:B7:E7:91:58:A3:A1:1F:20:41:F6
X509v3 Authority Key Identifier:
keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bb:ab:ba:90:25:3f:fb:e7:7c:a2:4a:bf:69:4b:7f:40:15:
fc:15:ea:a2:5c:ea:aa:5d:10:61:cc:41:ee:a0:d9:ca:d2:61:
61:28:76:c8:4c:c7:be:76:41:db:22:28:fd:74:54:70:7d:aa:
e3:f5:b2:2e:66:4e:41:6c:60:03:4c:56:de:74:df:d5:d3:52:
6d:bf:7d:e5:b8:3c:70:0b:4a:87:c2:d7:60:c0:2a:d7:fb:f9:
59:82:18:52:7c:68:12:5b:92:f4:f5:5b:56:4d:aa:70:ea:22:
67:ae:a5:a2:ef:f5:d1:ea:56:5d:22:d6:17:29:75:97:06:48:
9c:c3:7c:c8:23:5d:74:73:da:34:77:09:b6:41:6e:fd:85:2e:
a6:d0:12:39:5d:df:65:e8:8a:cc:9a:0d:9e:aa:4f:fd:8e:d1:
97:c4:90:39:18:31:78:22:da:2d:b8:24:f0:f0:a6:42:07:ca:
78:93:36:7a:91:66:d2:e1:b6:00:01:91:bd:94:90:39:11:2b:
05:b3:19:26:04:13:92:fc:06:a7:41:e3:e5:28:cd:2c:4c:07:
28:1f:94:4f:4a:bc:42:49:b2:58:17:f0:5f:ff:09:b2:39:25:
41:30:3d:0a:c2:5b:60:31:c5:bc:3f:26:aa:86:bc:6c:41:b3:
b4:93:19:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQwOTExMTAvBgNVBAUTKDgzQzkwMTUxQkUxNzgyMTRGQzE2NzU4MzM0RDNCNkQ1
Mjc3QTNDQkYwHhcNMjYwNDE3MDQzNDM5WhcNMjYwNDI0MDQzNDM5WjAYMRYwFAYD
VQQDEw02OWUxYjg2MC1mODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAul4tSYfO5HWzx54yKzabB1QP3I6UVt4XkfsDthKnaGwaYmWm10tSWUYv3HHj
lXopsMaNgHSFLxXUAxzOd/dgdG1esx4nslisZBUAZFKt6xgEOVSmQh9mX84+EmEi
xdLd98edRaDutRqs22DovLxKcIyQmo907fsg/yUsSANxL8VEMi/schMLLT4v0Iyi
DfrgkZtxnJnm05oFstEerASWT/Yl5yzt3QgN4JXHuauZ5CVK28nYr1HYbMR2L1YB
9iyHT9U2lbGqs0xY03Yro+4U3s6G280Sa9ljAmUwgQHkEADPwJdhgcyFKCbPWMev
KyaEr96wi7pb9iCm5pEiKWo6ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXhieyR
O1XDVfO355FYo6EfIEH2MB8GA1UdIwQYMBaAFIPJAVG+F4IU/BZ1gzTTttUnejy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS81QTExNkJBQTFE
OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9nOGtCVWI0WGdoVDhGbldETk5PMjFTZDZQ
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c4a0JVYjRYZ2hUOEZuV0ROTk8yMVNkNlBMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDA5MS81QTExNkJBQTFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9nOGtCVWI0WGdo
VDhGbldETk5PMjFTZDZQTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwLurupAlP/vnfKJKv2lLf0AV/BXqolzqql0QYcxB7qDZytJhYSh2yEzHvnZB
2yIo/XRUcH2q4/WyLmZOQWxgA0xW3nTf1dNSbb995bg8cAtKh8LXYMAq1/v5WYIY
UnxoEluS9PVbVk2qcOoiZ66lou/10epWXSLWFyl1lwZInMN8yCNddHPaNHcJtkFu
/YUuptASOV3fZeiKzJoNnqpP/Y7Rl8SQORgxeCLaLbgk8PCmQgfKeJM2epFm0uG2
AAGRvZSQORErBbMZJgQTkvwGp0Hj5SjNLEwHKB+UT0q8QkmyWBfwX/8JsjklQTA9
CsJbYDHFvD8mqoa8bEGztJMZ5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:25 2026 by rpki-client