
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json)
Hash identifier: 2aBGLu3KaQHg7+JT9CkNtM01Xy7j0wUctt9biZsW5v8=
Subject key identifier: 14:D8:7D:95:F2:C8:BC:0B:C0:6A:41:CD:D9:87:C5:F6:09:DA:A0:56
Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Certificate serial: 08CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
Manifest number: 08C5
Signing time: Wed 20 May 2026 21:25:11 +0000
Manifest this update: Wed 20 May 2026 21:25:10 +0000
Manifest next update: Wed 27 May 2026 21:25:10 +0000
Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: VZFNQuO6Ip+LL8bb7ZTSj337iQFmCE8fzYdmSVTgLNk=)
2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: oD5sf3A4U4md3wLKHjzwPVMM7w2O2dFOwWBo8buNQfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Validity
Not Before: May 20 21:25:10 2026 GMT
Not After : May 27 21:25:10 2026 GMT
Subject: CN=6a0e26b7-4818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:1f:0f:21:6e:5b:c4:c3:db:31:5c:4e:24:
43:8a:9a:1d:01:0c:17:65:d7:4a:1e:d4:7b:6b:f2:
86:a4:d7:83:43:83:04:7e:82:b8:9e:09:a5:61:4f:
fc:fa:2e:4e:b3:72:09:2f:d1:08:93:5a:ff:1d:be:
40:43:ef:cb:aa:53:11:da:15:a4:42:6f:7e:8a:da:
14:d7:88:2d:86:63:f5:6b:92:ea:6f:f4:cb:c1:e1:
1e:21:53:c1:f7:fe:41:01:03:10:b8:cc:96:59:70:
54:01:4a:fc:8c:e7:8c:c8:3b:e5:ec:31:36:54:90:
6b:56:18:73:66:d8:93:f4:fe:75:ee:81:89:03:01:
d5:95:0c:f6:3c:28:94:22:eb:1f:d4:dc:ce:bd:24:
ed:10:21:79:47:4d:1e:89:4a:cf:6b:ca:f3:ed:ae:
63:e8:07:96:e4:91:ad:16:67:5e:24:00:e4:dd:ee:
13:db:f3:be:c3:41:70:f6:f7:b4:ab:ac:a0:3c:53:
8d:a1:68:a4:5d:91:a7:dd:30:eb:5d:59:7b:a1:71:
b3:6c:e9:60:0d:37:87:3b:4c:32:e2:b8:96:47:57:
2f:14:aa:4b:20:6b:48:dd:ab:1a:b0:b3:58:18:c7:
a0:af:c2:31:c4:31:da:59:94:dc:eb:02:94:e1:49:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D8:7D:95:F2:C8:BC:0B:C0:6A:41:CD:D9:87:C5:F6:09:DA:A0:56
X509v3 Authority Key Identifier:
keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5e:63:86:b2:c4:31:3b:ec:45:21:8a:03:46:81:6a:2c:2b:
07:89:7b:14:a5:12:a0:a1:32:b9:99:ff:72:a1:59:28:7c:50:
3a:f8:10:2c:df:d1:d3:00:48:09:69:61:c7:de:8b:62:d0:8a:
54:d7:fe:02:52:cb:1a:12:05:f0:8b:b6:47:2f:7e:e3:9f:b6:
e2:9e:5f:37:5e:5b:4d:be:06:ca:6d:3e:73:72:3d:a8:19:ba:
c0:fc:8f:ea:b8:99:f0:cf:fe:ba:16:c5:08:77:e5:49:35:4f:
fc:ad:72:d1:c8:36:ed:08:6b:34:56:fe:a2:d2:c4:1f:7e:47:
fc:22:98:77:d0:7a:48:32:be:b9:04:0e:3f:0a:d2:fe:5c:8e:
98:7d:fd:4b:66:6d:fa:78:b4:16:19:e6:5b:ac:fc:d1:23:41:
74:b8:9e:bb:9d:ac:8b:32:ac:91:6b:42:66:ac:ad:c9:a2:fb:
b3:16:b4:72:14:69:f4:dd:d3:5e:44:b8:c5:34:cd:0a:ef:4c:
00:20:4f:8c:f6:62:34:25:bc:e3:7a:2b:50:10:b8:2b:79:46:
26:9f:18:fe:01:05:c6:a0:31:8d:c9:60:bb:3f:21:c4:c3:6f:
1f:9c:ce:18:b1:f2:61:5f:cc:44:0e:cc:13:de:fc:7d:ad:83:
fe:3a:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:43 2026 by rpki-client