
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier: Sa0S8sdoJEt79UxOEvEw1msSpSnRDWb0m++ogdP0s+U=
Subject key identifier: CD:17:1E:66:00:9B:6B:A5:D7:55:6E:FB:0B:25:D1:01:7D:6F:5C:55
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial: 327A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number: 327A
Signing time: Sat 28 Feb 2026 15:26:37 +0000
Manifest this update: Sat 28 Feb 2026 15:26:37 +0000
Manifest next update: Sat 07 Mar 2026 15:26:37 +0000
Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: lvrY9yRYjUnWC4EgrxDpDJpZlQ7IEoejsPptk1aeIBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12922 (0x327a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
Validity
Not Before: Feb 28 15:26:37 2026 GMT
Not After : Mar 7 15:26:37 2026 GMT
Subject: CN=69a3092d-c943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:db:17:ab:48:3a:66:74:d4:0b:a8:da:e1:
9e:87:34:af:31:97:13:25:6a:a4:16:af:a1:88:10:
4c:38:ec:ae:5d:29:ed:ea:30:f1:70:9f:0c:68:44:
78:33:bf:61:63:d7:a6:f1:a3:b5:2a:ef:58:95:f4:
cf:ca:e2:4f:76:49:9d:b3:64:96:74:b7:10:af:22:
a4:0d:b2:2c:ff:fc:90:7a:94:ec:f2:55:13:eb:f1:
79:5e:53:ee:a3:66:98:dd:24:d9:57:83:b3:f2:0f:
78:72:fa:98:38:e0:6f:71:51:85:b4:54:92:5c:35:
44:5a:3f:c9:ec:a8:0b:9a:cd:f0:f2:b9:f6:f5:ce:
59:ac:60:24:c4:db:c7:a3:07:c3:44:ec:ed:9d:b6:
d1:c9:43:f3:db:87:fc:dc:77:fc:da:6e:86:4e:f2:
3a:a4:43:2e:06:f0:0c:ce:c2:aa:db:cd:d1:ea:41:
4e:f6:7c:4e:23:68:4f:7f:00:30:d1:41:47:dc:3e:
7e:c5:71:e6:60:d8:c0:0c:57:df:f8:de:c8:7f:c1:
dd:54:b1:1f:3f:5d:a5:35:b3:1b:d7:ab:33:47:c3:
e5:2b:3e:a5:83:0d:7f:b5:06:99:d6:03:56:d2:38:
c8:25:35:5f:9f:b4:82:95:11:02:bf:e2:e2:3b:9f:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:17:1E:66:00:9B:6B:A5:D7:55:6E:FB:0B:25:D1:01:7D:6F:5C:55
X509v3 Authority Key Identifier:
keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:f9:2e:59:60:b4:68:a1:63:10:65:98:e6:8a:7d:5a:68:1f:
35:e3:82:87:49:73:59:7e:94:21:c7:cc:6e:ab:40:18:59:85:
8f:dc:16:9a:e9:db:5d:ed:cd:31:8b:44:b3:cd:82:72:ba:5b:
01:ba:b6:e5:c1:67:c0:a0:6c:88:c6:b9:2d:8a:ca:fd:b0:39:
33:d3:05:cb:73:b0:dd:3e:c1:95:0c:58:a5:6e:e4:38:05:c7:
ce:af:35:87:95:67:8b:01:48:e8:58:e9:08:58:a3:09:9f:a6:
b8:d3:87:b3:18:3e:95:a7:fe:54:41:02:c4:e1:0f:8d:69:e6:
49:f0:0a:0d:ac:99:04:79:99:af:49:29:86:43:3a:ee:ec:d5:
03:0a:b3:3f:53:58:b2:91:4b:4c:71:b2:32:bc:ce:5e:d2:87:
17:38:02:29:8c:db:7a:13:1f:7b:a4:d5:9d:d2:73:ac:1b:e5:
7f:9a:c7:ed:65:d5:dd:34:3b:9f:ff:b1:fd:61:ff:9d:e0:7c:
9c:33:2f:2d:4c:31:83:ba:7f:d3:c8:a3:4d:03:01:d3:88:a7:
7b:89:ea:2d:3d:f9:43:58:40:34:1a:39:22:c2:28:6b:26:d3:
eb:d2:c6:39:45:69:f4:d8:3a:13:33:19:81:94:c4:96:ca:d0:
e2:aa:be:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3
QTU2Njg2OTEwHhcNMjYwMjI4MTUyNjM3WhcNMjYwMzA3MTUyNjM3WjAYMRYwFAYD
VQQDEw02OWEzMDkyZC1jOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVXbF6tIOmZ01Auo2uGehzSvMZcTJWqkFq+hiBBMOOyuXSnt6jDxcJ8MaER4
M79hY9em8aO1Ku9YlfTPyuJPdkmds2SWdLcQryKkDbIs//yQepTs8lUT6/F5XlPu
o2aY3STZV4Oz8g94cvqYOOBvcVGFtFSSXDVEWj/J7KgLms3w8rn29c5ZrGAkxNvH
owfDROztnbbRyUPz24f83Hf82m6GTvI6pEMuBvAMzsKq283R6kFO9nxOI2hPfwAw
0UFH3D5+xXHmYNjADFff+N7If8HdVLEfP12lNbMb16szR8PlKz6lgw1/tQaZ1gNW
0jjIJTVfn7SClRECv+LiO5/9eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0XHmYA
m2ul11Vu+wsl0QF9b1xVMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG
RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ
YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdfkuWWC0aKFjEGWY5op9WmgfNeOCh0lzWX6UIcfMbqtAGFmFj9wWmunbXe3N
MYtEs82CcrpbAbq25cFnwKBsiMa5LYrK/bA5M9MFy3Ow3T7BlQxYpW7kOAXHzq81
h5VniwFI6FjpCFijCZ+muNOHsxg+laf+VEECxOEPjWnmSfAKDayZBHmZr0kphkM6
7uzVAwqzP1NYspFLTHGyMrzOXtKHFzgCKYzbehMfe6TVndJzrBvlf5rH7WXV3TQ7
n/+x/WH/neB8nDMvLUwxg7p/08ijTQMB04ine4nqLT35Q1hANBo5IsIoaybT69LG
OUVp9Ng6EzMZgZTElsrQ4qq+zQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:56 2026 by rpki-client