
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier: e4CTi9ePzQWGgY+Z8d4xaI6cTKvXXOATZLwWxdQgZNs=
Subject key identifier: 01:AC:D3:33:81:76:06:74:A2:25:52:8E:3A:88:FA:15:68:2C:9A:D6
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number: 075F
Signing time: Mon 26 Oct 2026 21:43:23 +0000
Manifest this update: Mon 26 Oct 2026 21:43:22 +0000
Manifest next update: Mon 02 Nov 2026 21:43:22 +0000
Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: 8ZhAJt1K/fZ7siVJmrpdIynW08MTlsRHQYc/l6z+x4A=)
2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: ette4LAwg26M5pj2ePPXPSItzIGGrF3PbLrnLGwJk9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Validity
Not Before: Oct 26 21:43:22 2026 GMT
Not After : Nov 2 21:43:22 2026 GMT
Subject: CN=6adfc97a-cf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:96:1f:e9:25:1d:cf:ed:36:25:da:03:e3:
15:ae:b1:a1:0b:50:59:13:ca:bc:11:c1:48:ba:9f:
6e:da:3a:70:c9:fa:24:84:47:c0:51:9f:b9:2a:80:
6c:c5:0d:59:b4:73:5b:76:af:67:9f:d2:6a:15:ab:
2e:1a:5c:1d:d6:00:0c:c8:51:6b:bb:b2:da:09:cb:
68:aa:36:eb:70:13:df:35:c8:12:ae:b5:01:d1:03:
43:1b:a2:12:2a:0c:2f:67:3a:2f:60:aa:6e:cc:cd:
c9:d9:cf:02:f5:af:58:40:c8:f3:7d:d3:07:7e:9f:
e4:8e:64:c6:58:3c:b8:31:87:3d:47:2a:43:8a:6e:
b7:45:c1:54:84:0d:dd:d9:71:a5:d9:26:c4:bb:02:
4d:e2:b3:d3:e9:97:53:31:ad:38:d6:fd:93:30:9d:
23:0c:cb:5c:13:de:3b:9e:3c:93:9e:91:75:77:3c:
07:8e:55:e3:a6:05:b3:2a:3c:1e:5c:d5:39:93:81:
c2:b9:44:a5:60:5d:c9:62:e0:07:bb:30:8e:e0:0f:
2c:13:2f:72:84:6c:44:14:26:7e:ac:2a:e6:17:d8:
17:97:f0:14:55:5d:d6:11:1d:9f:67:01:1c:f2:57:
0b:5d:1e:5c:b5:5c:0f:0b:74:64:d2:56:3b:35:d0:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AC:D3:33:81:76:06:74:A2:25:52:8E:3A:88:FA:15:68:2C:9A:D6
X509v3 Authority Key Identifier:
keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:17:f9:0c:49:35:5e:37:f2:f0:b2:1a:28:cf:3d:6b:c1:c1:
2f:0f:bb:9c:6d:9b:df:94:31:94:14:a5:74:7d:75:aa:e1:23:
d1:d0:7a:94:28:1f:c1:c2:f0:3c:e4:94:12:72:29:bf:52:a4:
97:f2:cc:2f:c5:70:5b:35:ed:2f:ea:ef:44:05:df:5d:0c:80:
6a:8b:ab:43:7d:97:69:e8:5d:0f:dd:90:4b:5b:4c:24:19:9e:
7f:e2:19:ce:c4:99:15:e2:56:95:bc:30:8d:4b:d2:ca:f0:98:
ae:fc:08:ae:35:3d:9f:ce:32:cb:fa:20:04:f8:66:b8:91:f5:
1c:61:01:9e:72:ae:e4:20:31:e4:fa:8a:14:32:09:3a:a6:65:
e5:99:6e:94:35:3a:fa:06:68:ad:16:79:55:0c:4b:a0:04:0e:
31:7d:ab:cf:75:5c:2b:80:72:4a:48:a4:3b:77:62:14:36:ec:
b9:ff:22:34:f5:84:38:0f:59:a0:27:14:09:ad:dc:85:5e:58:
6a:7c:67:61:3d:ac:6f:5b:41:bf:6b:e9:5a:e3:6c:ba:bb:50:
5b:b6:f8:3e:eb:1e:3a:c2:e0:81:9e:a3:8b:11:a0:10:71:4c:
d8:e6:33:48:06:17:12:15:9e:0a:4d:cf:87:cf:f4:fa:fe:4b:
2a:90:7b:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE0RUYxMTAvBgNVBAUTKEYxQjY1Qjc5NzYxNjM5NzM1MkVDQkQ0QTJDNzc0RkNG
N0VDNkQ0NzAwHhcNMjYxMDI2MjE0MzIyWhcNMjYxMTAyMjE0MzIyWjAYMRYwFAYD
VQQDEw02YWRmYzk3YS1jZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3qmWH+klHc/tNiXaA+MVrrGhC1BZE8q8EcFIup9u2jpwyfokhEfAUZ+5KoBs
xQ1ZtHNbdq9nn9JqFasuGlwd1gAMyFFru7LaCctoqjbrcBPfNcgSrrUB0QNDG6IS
KgwvZzovYKpuzM3J2c8C9a9YQMjzfdMHfp/kjmTGWDy4MYc9RypDim63RcFUhA3d
2XGl2SbEuwJN4rPT6ZdTMa041v2TMJ0jDMtcE947njyTnpF1dzwHjlXjpgWzKjwe
XNU5k4HCuUSlYF3JYuAHuzCO4A8sEy9yhGxEFCZ+rCrmF9gXl/AUVV3WER2fZwEc
8lcLXR5ctVwPC3Rk0lY7NdCVLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGs0zOB
dgZ0oiVSjjqI+hVoLJrWMB8GA1UdIwQYMBaAFPG2W3l2FjlzUuy9Six3T89+xtRw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTRFRi8yNjQwMTAwNjg2
MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09YTlM3TDFLTEhkUHozN0cx
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhiWmJlWFlXT1hOUzdMMUtMSGRQejM3RzFIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTRFRi8yNjQwMTAwNjg2MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09Y
TlM3TDFLTEhkUHozN0cxSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOxf5DEk1Xjfy8LIaKM89a8HBLw+7nG2b35QxlBSldH11quEj0dB6lCgfwcLw
POSUEnIpv1Kkl/LML8VwWzXtL+rvRAXfXQyAaourQ32XaehdD92QS1tMJBmef+IZ
zsSZFeJWlbwwjUvSyvCYrvwIrjU9n84yy/ogBPhmuJH1HGEBnnKu5CAx5PqKFDIJ
OqZl5ZlulDU6+gZorRZ5VQxLoAQOMX2rz3VcK4BySkikO3diFDbsuf8iNPWEOA9Z
oCcUCa3chV5YanxnYT2sb1tBv2vpWuNsurtQW7b4PuseOsLggZ6jixGgEHFM2OYz
SAYXEhWeCk3Ph8/0+v5LKpB7zg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:17:35 2026 by rpki-client