
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier: Z/+7lC6UjbulA0s67weNaGBEu0UY9nziXGuPju1mlQo=
Subject key identifier: 42:1F:ED:B1:2D:56:49:02:98:8F:13:6C:7D:38:CD:B1:C9:4D:33:C0
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number: AA
Signing time: Mon 13 Apr 2026 06:50:32 +0000
Manifest this update: Mon 13 Apr 2026 06:50:31 +0000
Manifest next update: Mon 20 Apr 2026 06:50:31 +0000
Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: I/U1oa9XwZyPB9wR4u94cJoRzOdy6I+xK04r4YNu3Dk=)
2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: THMYN1koeOfwnbK8AGxlReff3pZqD6xwEXO++zbayH8=)
3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: EWbmDsTGqQLpUfNOlcyjqkg7ey8/2rO6qBfbLaQNH74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Validity
Not Before: Apr 13 06:50:31 2026 GMT
Not After : Apr 20 06:50:31 2026 GMT
Subject: CN=69dc9238-af13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:db:37:37:12:81:ae:ea:56:59:47:98:97:
dc:dc:2f:52:08:30:e5:8a:61:e5:8c:f5:6b:4b:fe:
e3:75:97:14:bf:19:85:14:f1:ed:15:d7:06:a2:58:
5c:43:bd:4c:1c:e6:49:46:f4:12:fb:ae:14:ca:2e:
e1:c8:a2:3e:7e:b9:21:26:8b:96:f6:be:54:16:eb:
3f:70:9f:5d:4c:fd:a0:ee:8b:96:a0:15:c9:08:bb:
b7:a9:f7:74:45:fa:67:71:2e:44:06:c4:1e:77:bd:
02:7c:03:e3:d5:ad:b1:df:d5:ee:29:b6:42:c7:19:
ae:80:10:93:85:c8:29:24:47:02:b7:e1:57:ad:a4:
5f:1a:c6:b7:4f:0b:f2:6f:58:93:d5:21:d0:48:91:
0f:d7:ed:2a:d2:9f:59:4e:4c:0f:24:3f:b5:eb:e9:
49:69:e5:7f:1a:01:b8:05:04:c1:fa:50:de:37:58:
18:f7:06:61:09:a5:bb:ae:ee:f4:6e:2f:e3:58:b0:
f4:b7:ad:30:32:d0:ec:85:7f:8d:4b:0c:a9:ab:aa:
98:86:5d:e0:6b:a5:66:b0:08:97:3c:8d:09:36:10:
b6:a9:e1:dc:87:91:bd:5a:6d:71:20:67:37:1a:9f:
55:91:94:6e:df:e8:3b:dd:b4:19:2e:1a:e2:94:d0:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:ED:B1:2D:56:49:02:98:8F:13:6C:7D:38:CD:B1:C9:4D:33:C0
X509v3 Authority Key Identifier:
keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:ee:37:00:a0:be:dd:86:2e:2c:f8:d2:d4:72:63:98:60:b0:
07:f4:8d:75:a9:84:05:01:d0:e9:0f:b8:62:4c:79:de:47:a0:
32:d9:2b:26:a0:36:02:62:41:24:94:db:8b:a4:32:19:ff:23:
9a:00:be:97:c2:94:5c:73:35:8b:5e:a9:10:57:c0:13:6d:08:
95:b7:ca:b3:7a:36:5d:8a:a0:b0:c8:5c:d9:6c:bc:3c:cc:e7:
1c:3c:28:1b:80:02:0f:ab:1b:b5:1c:51:9c:01:f3:95:1d:9c:
eb:08:5a:d8:7a:d7:d2:de:7d:07:1f:7b:df:a2:1a:93:35:97:
09:a4:d8:7d:1f:85:f1:e1:91:8c:a7:b6:49:4b:ab:55:24:22:
36:c9:6c:25:9c:8a:d5:04:d6:29:78:a8:ab:73:0b:87:35:f3:
9a:73:86:98:6d:27:73:8b:ba:14:aa:99:a6:84:34:ba:1d:ac:
76:85:b5:2a:b8:57:97:6b:d9:b0:79:30:f0:d0:ce:2f:2a:7a:
92:bc:a4:92:ff:35:d5:24:f9:1d:cf:1c:09:b7:15:12:bf:d0:
8c:75:50:14:55:fb:0c:df:fd:7d:d4:7c:2e:2b:1e:fa:a2:42:
56:72:0a:4a:09:06:20:09:81:b9:d5:c5:88:94:04:4a:4d:83:
75:5f:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:56:38 2026 by rpki-client