
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: TNAX2MwXfVhsQkpGWi1cIZwsda8Jk/j2h0kLqcdzfVE=
Subject key identifier: F2:55:E4:65:7C:7A:5F:A6:40:0F:E2:DA:C1:4A:8E:38:3B:B0:69:01
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 0451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 05B4
Signing time: Sat 04 Apr 2026 23:59:37 +0000
Manifest this update: Sat 04 Apr 2026 23:59:37 +0000
Manifest next update: Sat 11 Apr 2026 23:59:37 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: JKmP39Jjiog3GaQ51roSx+W4Zeztz8zOlE6SFhOGLKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Apr 4 23:59:37 2026 GMT
Not After : Apr 11 23:59:37 2026 GMT
Subject: CN=69d1a5e9-96f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:a5:af:a4:74:36:67:6e:fe:c1:0c:82:70:
4a:e9:2d:12:7b:73:0b:96:6e:db:10:c7:a5:e0:11:
37:d5:3d:50:5f:4c:a8:41:90:29:ab:97:5c:d7:18:
52:00:8b:8a:60:1b:02:a5:9f:27:b0:29:84:09:fc:
95:94:a1:cc:76:19:4e:27:7d:1e:21:5f:52:f3:d8:
54:46:10:2d:aa:69:10:cc:b0:cd:17:57:d3:7e:9b:
3f:9a:71:c0:1f:37:e5:df:b6:91:62:2c:3a:15:35:
02:ea:c2:91:12:8b:74:18:11:64:29:b0:cd:fa:a6:
fe:c6:06:9e:a5:39:27:5a:8b:61:27:31:df:e5:1c:
9a:50:f7:b3:77:56:af:20:07:54:ef:2e:89:2e:6d:
1d:e0:32:4b:6d:ec:fa:19:61:82:63:dd:0c:ea:08:
7a:ab:27:2c:8e:49:63:69:f6:ed:51:5b:36:01:47:
a2:22:7e:46:cd:ec:4c:69:c6:73:e9:bc:0f:c5:1a:
80:f7:87:ec:3e:1f:ed:ea:05:26:d1:e8:23:7a:8f:
f2:94:63:fc:86:de:ea:08:09:54:36:8a:3a:bc:11:
1e:48:18:10:2e:3d:32:a5:f0:32:85:c3:58:d8:e3:
ef:7a:be:e7:60:6c:27:51:26:b8:e7:70:9c:37:40:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:55:E4:65:7C:7A:5F:A6:40:0F:E2:DA:C1:4A:8E:38:3B:B0:69:01
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:de:ac:39:7d:7a:8d:46:95:40:c4:61:34:c1:56:23:b7:95:
ca:12:a4:d6:9e:31:37:bb:a3:bc:a3:c3:70:ba:f9:4a:a9:b0:
e4:2f:e2:06:eb:9d:2b:ec:97:b1:56:b5:ec:d1:6b:44:52:d2:
30:14:bd:d2:8c:ce:b4:11:3e:f1:b8:ec:8f:f3:a4:11:b3:fb:
4c:7e:04:5b:b4:7d:eb:68:af:63:02:43:18:b2:d4:09:57:20:
84:74:ed:1d:fb:8a:a8:17:cb:9b:f5:8a:ac:8f:b1:16:ad:de:
bc:c7:ad:e9:62:e9:96:ba:4c:6a:85:27:d6:98:24:47:84:5c:
89:66:f5:08:11:82:82:f6:78:a2:bb:1a:ed:0e:ba:b3:53:cc:
be:3f:1c:4a:f6:fa:82:b1:2f:c0:41:2a:0b:37:c7:e6:39:87:
e0:92:04:57:6d:fb:88:fb:13:4c:51:89:a3:28:a4:ec:4b:2e:
fe:4a:62:83:e4:b1:24:43:61:ba:39:6d:75:3c:5a:22:22:72:
2a:bb:cb:f9:a7:18:06:50:22:b0:b2:4f:09:54:f6:84:c1:32:
71:77:e7:b5:d8:d7:db:63:e5:f5:ec:27:73:5f:39:9b:95:e0:
36:5e:4b:c6:64:96:c2:ce:e0:19:9a:a8:d1:06:c0:13:88:19:
a1:5d:df:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw
NTBGRDFENDYwHhcNMjYwNDA0MjM1OTM3WhcNMjYwNDExMjM1OTM3WjAYMRYwFAYD
VQQDEw02OWQxYTVlOS05NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+Glr6R0Nmdu/sEMgnBK6S0Se3MLlm7bEMel4BE31T1QX0yoQZApq5dc1xhS
AIuKYBsCpZ8nsCmECfyVlKHMdhlOJ30eIV9S89hURhAtqmkQzLDNF1fTfps/mnHA
Hzfl37aRYiw6FTUC6sKREot0GBFkKbDN+qb+xgaepTknWothJzHf5RyaUPezd1av
IAdU7y6JLm0d4DJLbez6GWGCY90M6gh6qycsjkljafbtUVs2AUeiIn5GzexMacZz
6bwPxRqA94fsPh/t6gUm0egjeo/ylGP8ht7qCAlUNoo6vBEeSBgQLj0ypfAyhcNY
2OPver7nYGwnUSa453CcN0Bx5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJV5GV8
el+mQA/i2sFKjjg7sGkBMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1
NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF
MGM2MTA1bWxBYllGRDlIVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI96sOX16jUaVQMRhNMFWI7eVyhKk1p4xN7ujvKPDcLr5Sqmw5C/iBuudK+yX
sVa17NFrRFLSMBS90ozOtBE+8bjsj/OkEbP7TH4EW7R962ivYwJDGLLUCVcghHTt
HfuKqBfLm/WKrI+xFq3evMet6WLplrpMaoUn1pgkR4RciWb1CBGCgvZ4orsa7Q66
s1PMvj8cSvb6grEvwEEqCzfH5jmH4JIEV237iPsTTFGJoyik7Esu/kpig+SxJENh
ujltdTxaIiJyKrvL+acYBlAisLJPCVT2hMEycXfntdjX22Pl9ewnc185m5XgNl5L
xmSWws7gGZqo0QbAE4gZoV3fZw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:08 2026 by rpki-client