
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
File: g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json)
Hash identifier: CsvEzkt3K1SHIsz+Ba6XzTtLAJMynvAXbNyVVrDr27I=
Subject key identifier: 84:9F:4D:0C:EC:EB:AE:B4:68:2C:4E:A1:4D:64:D2:9E:EB:49:30:44
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Certificate issuer: /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
Manifest number: 0148
Signing time: Sun 01 Mar 2026 06:11:08 +0000
Manifest this update: Sun 01 Mar 2026 06:11:07 +0000
Manifest next update: Sun 08 Mar 2026 06:11:07 +0000
Files and hashes: 1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: magentPpA7k8PEkJNvD64jZrFNYXwmC1L4Pz7GH9E5I=)
2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: YulPvT0hM25YZIDv5KjG+XciSXVC4OQirSgi0X2f6Hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Validity
Not Before: Mar 1 06:11:07 2026 GMT
Not After : Mar 8 06:11:07 2026 GMT
Subject: CN=69a3d87b-d5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:98:f0:47:4a:21:50:f3:78:96:2f:f9:9c:
3b:42:22:0a:32:1e:33:5d:89:9b:ba:40:b9:fc:e9:
d3:f8:d7:b1:63:0e:ea:af:b7:f6:2b:5b:6a:f4:2f:
b8:2e:39:20:52:74:1e:91:93:ab:31:cb:71:61:f8:
c3:86:a8:d9:2f:a4:6a:a4:4b:18:d3:80:03:62:4b:
10:cc:85:6b:e1:cc:d4:a4:e4:ef:22:8a:aa:73:65:
80:81:43:bf:d4:ef:af:78:ec:f2:4d:df:bb:7e:55:
6b:bb:6d:53:14:a3:57:bd:84:f1:64:98:7c:50:6c:
af:0f:f9:fa:6d:04:64:e9:c8:23:1b:99:40:5b:f0:
03:e9:19:bd:c9:ca:60:f0:76:8b:42:6a:eb:21:e4:
e6:b6:ea:93:b9:29:a7:17:68:f5:75:2c:6c:cc:68:
4f:e3:46:77:c6:d7:8d:26:30:9a:c9:d1:4e:d9:aa:
95:d1:3a:9c:37:c7:36:c8:8a:b2:5a:17:f2:34:ba:
01:3d:86:4b:87:00:d4:1e:fd:7e:58:92:89:58:4d:
71:3e:c0:f1:a0:25:df:05:24:ef:68:22:a0:29:c7:
5a:a5:05:61:27:f8:5c:91:2f:d9:c0:e4:3d:cc:67:
5f:46:43:12:f7:89:c1:55:d8:97:e5:33:8d:85:dc:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:4D:0C:EC:EB:AE:B4:68:2C:4E:A1:4D:64:D2:9E:EB:49:30:44
X509v3 Authority Key Identifier:
keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9b:27:7c:37:45:54:b9:dd:02:bf:9a:bb:fe:bd:11:e2:44:
a0:4d:81:d4:74:21:d7:bb:6a:a2:2c:61:d0:cf:57:0a:b7:f2:
a6:06:5a:8e:aa:e4:b0:85:89:20:94:01:b4:46:33:90:11:a0:
21:b0:91:be:ad:d0:59:b2:61:39:00:71:15:0b:95:32:dc:b3:
81:5b:67:dc:65:76:e9:14:f4:3f:e8:4e:85:09:46:c0:6b:21:
f2:c8:f2:01:50:60:c8:a9:db:7e:ce:5c:33:49:2a:15:ed:12:
6c:bf:10:53:34:5c:48:d2:bb:ec:be:95:10:92:2c:52:bf:61:
c3:b8:ab:05:4b:fb:b5:93:73:5c:9b:05:bf:ad:cc:a3:9b:18:
8d:1e:91:98:6f:05:a3:8e:a0:f1:3e:fa:69:0b:12:bc:66:8a:
be:ac:bb:84:50:16:c9:29:96:ac:62:ac:81:60:4f:47:59:2f:
15:23:a5:11:73:e8:02:8d:d6:4b:a3:ae:15:5b:d2:c2:d1:7d:
81:b3:77:b8:41:d2:2e:87:8c:c2:1f:e2:1f:df:9f:db:73:36:
d1:18:fd:c1:a7:50:a6:66:bf:06:d7:87:1d:7c:a1:d7:e9:e3:
81:e0:57:de:b1:f9:65:d2:9a:93:e4:8e:c3:d5:48:3a:eb:a8:
07:71:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:24 2026 by rpki-client