
$ rpki-client -vvf rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
File: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft (raw, json)
Hash identifier: Z0Uvl3p5w04CQlbOpMsl1Yi1/e9azzh2tiOMIt5i1Ew=
Subject key identifier: 3D:D4:FD:3E:2B:F3:E7:46:A3:83:CC:E2:B5:5E:05:BE:65:03:A7:3D
Authority key identifier: F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
Certificate issuer: /CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
Manifest number: 0312
Signing time: Thu 21 May 2026 01:16:28 +0000
Manifest this update: Thu 21 May 2026 01:16:28 +0000
Manifest next update: Thu 28 May 2026 01:16:28 +0000
Files and hashes: 1: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl (hash: 41uhKza23m6BLb2WXmFqILz9drkpKxn8wj/d9pFP9cs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243F8, serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Validity
Not Before: May 21 01:16:28 2026 GMT
Not After : May 28 01:16:28 2026 GMT
Subject: CN=6a0e5cec-f967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:61:25:f8:3a:9e:41:f8:1f:7c:59:92:4f:
43:90:9a:62:c8:ca:27:be:a9:ec:84:cd:00:ee:13:
37:3a:a1:10:c9:a4:86:28:b7:8a:16:75:c2:f3:48:
74:ed:f7:d6:bc:cd:61:a9:c5:9d:42:9b:01:02:13:
d9:1a:24:fd:ec:7a:47:61:ad:a4:f0:45:3c:b6:60:
aa:09:fc:84:3a:07:3c:e3:f1:98:fc:ce:f7:51:f0:
38:3e:8d:63:3a:06:60:a1:e8:ab:e9:1e:d4:81:4f:
b3:31:84:69:75:70:31:a9:bf:6b:3f:24:5f:e2:92:
b8:15:bf:7a:14:2f:0f:62:50:52:e2:e4:f7:5f:96:
22:5a:77:8c:1f:6a:cb:97:39:b6:3a:86:b5:57:94:
0e:98:5e:7d:73:ae:30:71:99:9e:ea:65:72:65:05:
8f:fb:8e:15:27:99:c7:86:cc:ab:68:25:e0:4b:04:
71:fa:3e:53:ac:94:13:2b:7f:a7:ce:37:76:7a:3e:
d8:33:06:89:92:34:59:1d:e2:7b:b3:8b:47:f8:c5:
03:f9:06:6b:03:a1:a6:f5:fb:74:1e:77:ac:b2:9c:
53:10:04:29:1b:1d:e8:37:d5:b0:ec:aa:4f:b1:8f:
70:2f:96:51:8e:a5:83:95:fa:70:32:62:b0:7c:10:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D4:FD:3E:2B:F3:E7:46:A3:83:CC:E2:B5:5E:05:BE:65:03:A7:3D
X509v3 Authority Key Identifier:
keyid:F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d7:c3:77:cd:44:ba:60:6b:3a:c4:7d:82:d2:3c:17:ce:9b:
b3:c5:5f:e0:fb:92:39:e9:dd:28:69:b5:cb:33:0a:ef:6a:8c:
ba:e1:17:f8:8f:0e:07:24:dd:f6:74:2c:a0:1f:b9:0d:67:7b:
4a:a1:fe:dc:29:fa:3c:82:db:f6:4b:fc:07:99:36:e5:54:24:
df:82:39:37:14:ba:15:ec:a2:78:e0:6b:80:4c:f1:61:31:54:
35:45:6e:84:bf:b6:5d:26:8d:fe:46:82:a9:fa:0a:f9:8f:6c:
9d:87:fd:74:7c:02:93:89:a6:0b:d9:20:a9:dc:ec:7d:31:bb:
75:a6:85:0b:5d:48:7c:98:b3:da:70:c7:9d:fe:64:52:e2:0b:
28:05:b6:0c:c2:0f:8b:ec:a2:44:5b:02:8f:6c:3f:3b:b9:df:
db:1d:a1:53:c0:43:46:ec:00:e4:5e:0d:52:ee:9c:77:bf:34:
b3:4e:7b:da:0e:b4:cd:4c:ca:32:c5:1f:eb:b4:7c:8b:d2:4b:
14:3e:22:16:77:7d:e3:dd:c4:70:f9:0d:9c:3f:57:f2:cb:7e:
b2:4f:a9:3c:a6:fb:bf:77:68:cd:75:8d:fb:3b:c7:df:1f:8f:
57:85:5d:c7:6c:aa:ea:ae:db:23:a7:da:7d:24:23:b5:a8:d0:
a4:cb:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:54 2026 by rpki-client