
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json)
Hash identifier: PqASGsMr0F96mU+/Ryyw1DdJLgSLddHT8yVChna0WPY=
Subject key identifier: 7B:74:28:0E:0E:09:05:32:9B:C7:CC:B8:5F:14:17:48:65:C4:D3:4A
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial: 0403
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
Manifest number: 03FA
Signing time: Sun 01 Mar 2026 01:18:10 +0000
Manifest this update: Sun 01 Mar 2026 01:18:10 +0000
Manifest next update: Sun 08 Mar 2026 01:18:10 +0000
Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: 4eqNBxCIkBQxGkX8R18r4jmNU5qwkIt8Fy15ZHewdUQ=)
2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=)
3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Validity
Not Before: Mar 1 01:18:10 2026 GMT
Not After : Mar 8 01:18:10 2026 GMT
Subject: CN=69a393d2-883f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:12:4e:bf:18:25:53:c8:47:31:8c:34:cd:
86:a3:50:52:4e:65:0b:6a:ac:21:10:03:1c:3b:8c:
d9:29:61:9e:11:54:04:f9:b8:f5:7d:bb:66:cb:56:
63:85:ad:65:a8:0e:d6:e4:23:1b:ea:07:7b:01:19:
f0:2a:fd:48:23:f7:0a:ab:da:b1:43:0c:5b:de:3e:
8a:05:95:e9:cf:e9:74:97:2b:ba:ea:64:89:02:93:
9a:59:3b:40:91:78:1f:23:fd:9c:b1:90:43:50:bb:
40:39:67:a4:fa:01:7a:56:15:c7:74:bb:1f:0e:97:
71:4f:9f:cf:74:c8:e6:6a:b7:9e:d0:76:07:35:26:
f0:65:ef:f5:72:dc:05:9a:82:56:41:c6:3d:3c:ef:
0a:b9:c9:88:4c:2c:b6:57:01:2d:ad:09:2f:a1:47:
7e:91:64:05:26:0c:3e:84:46:4b:11:35:e3:39:bf:
4d:a6:6d:9b:4b:81:7b:a0:ff:3f:6f:34:8f:a3:eb:
6c:8e:53:d7:61:fb:1d:be:38:6e:9e:a6:53:5b:38:
c1:01:d8:a3:48:8e:d9:d1:93:e1:1e:15:83:72:49:
fc:66:25:f0:e1:26:f7:20:67:50:cc:24:31:dc:77:
15:4a:f5:e2:1d:af:ad:18:60:26:41:9f:a6:c6:b1:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:74:28:0E:0E:09:05:32:9B:C7:CC:B8:5F:14:17:48:65:C4:D3:4A
X509v3 Authority Key Identifier:
keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8a:b7:be:e7:0d:11:53:83:f2:97:69:76:7e:a4:9f:16:18:
52:1a:d2:fc:d1:f5:3d:34:40:e7:c7:9e:36:ea:26:ea:85:7e:
64:0c:29:f0:42:a6:bd:dd:0f:f6:fa:ac:47:ba:71:9d:3d:5c:
a8:25:46:b0:80:ff:b8:96:4f:78:13:ff:5f:03:72:62:f1:df:
26:38:29:be:bf:ab:fd:b5:f5:67:28:62:27:5e:c2:e2:18:ee:
ad:ab:f0:fd:92:f4:51:a7:8e:b3:99:8c:31:50:10:fa:87:7b:
41:e7:9e:34:06:ce:32:23:00:ca:ea:1a:d5:87:bb:f7:4d:b5:
ec:6b:26:23:01:19:e8:fb:4c:6c:6f:19:fc:7e:55:91:e3:c1:
d1:53:b9:62:3e:29:0c:c7:a7:6c:8f:66:e8:02:ed:7f:43:c2:
7d:a1:30:34:3b:2e:e2:b6:b9:0e:76:e2:84:99:26:cb:eb:73:
d4:10:03:6a:61:74:a7:6b:b1:f0:74:46:a4:19:39:1d:6e:1c:
07:10:45:08:b6:f2:30:85:66:5c:11:b1:09:55:74:c9:99:31:
c4:db:08:ab:e9:26:ca:28:51:e7:94:37:68:b1:50:ed:24:a5:
d2:af:55:ce:cd:6d:e2:f8:42:06:48:13:17:e0:7a:aa:26:7f:
9b:4e:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:32 2026 by rpki-client