
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
File: 80gH4oZFUlDDf1PcB78ego0Zpi0.mft (raw, json)
Hash identifier: PNt2iZAN1OU96POeAYJF6+/gUgEfUPxmKp+t1kvPCIw=
Subject key identifier: A6:98:3A:FA:7F:79:60:34:AF:DF:FE:14:19:08:CF:70:FA:19:F8:C7
Authority key identifier: F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D
Certificate issuer: /CN=A91AE317/serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
Manifest number: 08
Signing time: Sun 19 Apr 2026 08:45:19 +0000
Manifest this update: Sun 19 Apr 2026 08:45:18 +0000
Manifest next update: Sun 26 Apr 2026 08:45:18 +0000
Files and hashes: 1: 80gH4oZFUlDDf1PcB78ego0Zpi0.crl (hash: kkDJPH8QHmcy9R9AD/AnJOwfUMfLMj4HjpL0Tm3Mz5s=)
2: 6AD7B83833F111F1BEF90B0CBC833773.roa (hash: 8WPkjnCq5gWzPkDaukbewo2KFmM/DSl1x5vnl/o5OAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl
rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 08:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE317, serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
Validity
Not Before: Apr 19 08:45:18 2026 GMT
Not After : Apr 26 08:45:18 2026 GMT
Subject: CN=69e4961f-4864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:4b:55:e7:3e:33:ac:23:5a:f1:83:3d:6e:
21:82:53:d7:6d:95:56:71:1d:7b:8e:ce:41:90:c8:
53:90:4c:86:2e:02:09:de:7e:eb:16:06:5e:d7:29:
68:32:7f:d8:49:07:03:e7:68:c7:8f:5f:3a:82:59:
0b:b3:87:e4:81:31:9f:69:3e:aa:60:d8:8f:9e:68:
17:a6:bf:84:71:a4:f1:05:5f:1f:17:67:45:17:cb:
99:a9:d6:64:c5:73:58:38:5d:7b:89:05:1c:5b:17:
2e:fa:60:6a:c8:eb:74:a3:64:ca:55:17:8d:a0:a9:
6e:c4:94:2a:84:32:f7:bc:50:a7:4a:41:5f:bd:bd:
94:7b:04:af:e3:8c:9a:98:22:19:85:d3:b6:bc:28:
60:fb:63:68:8f:71:f1:46:47:00:d4:87:2f:6b:9e:
93:7d:b9:57:52:bd:ab:02:2e:37:32:df:98:62:75:
fa:b8:b5:6e:2b:29:a7:7e:cd:e5:d8:50:d9:b0:ff:
0b:36:a0:5e:2b:ae:69:f1:e4:d2:06:4b:41:8c:bc:
79:7a:80:4e:78:49:49:5f:9d:f9:29:00:e1:66:85:
68:f8:6f:e7:a4:e1:86:f5:44:7d:72:c3:e6:5f:32:
f9:7e:96:24:1f:67:b2:2c:13:78:0b:5c:77:f6:53:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:3A:FA:7F:79:60:34:AF:DF:FE:14:19:08:CF:70:FA:19:F8:C7
X509v3 Authority Key Identifier:
keyid:F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:7e:bd:6a:ce:c3:2f:7c:6a:1e:b8:f4:ce:ae:b7:c0:8b:
04:aa:44:0d:ef:bf:ae:b2:4b:7e:31:50:39:2c:bb:81:26:87:
b8:e5:22:10:c3:5f:27:26:0e:1c:4b:ba:dd:62:4c:9e:cb:02:
10:ac:8a:cd:0d:27:ef:25:e4:ef:45:dd:38:64:be:88:ff:23:
ac:e0:94:5e:42:9e:8f:88:3b:61:36:e1:9f:1d:90:3e:04:47:
ba:ba:47:d7:f3:1c:c0:6b:1d:d5:19:02:99:6f:49:79:f8:c3:
c4:90:98:f8:28:4a:7f:ad:c0:9d:fe:ae:b0:f4:34:02:50:a1:
23:25:50:3a:8a:49:ba:be:3a:b8:6a:53:73:29:f3:67:0a:2d:
07:41:01:34:20:6b:71:07:b0:e8:29:77:a6:95:39:28:c1:17:
57:3f:18:f3:84:e5:12:9b:cc:35:ad:41:0e:b2:38:52:e4:ee:
8b:57:4b:45:ad:7d:63:b6:ad:a7:f9:3b:5e:51:64:c3:20:23:
ac:96:af:ee:9e:77:bd:bc:46:43:9f:64:88:3e:f9:6e:ca:21:
98:e3:73:9a:07:66:89:44:d7:6e:60:f7:b1:c7:b3:76:47:2d:
f4:3a:1b:b0:ae:cd:a1:2c:75:6b:92:cd:58:da:e1:db:f5:ad:
27:b9:a0:40
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RTMxNzExMC8GA1UEBRMoRjM0ODA3RTI4NjQ1NTI1MEMzN0Y1M0RDMDdCRjFFODI4
RDE5QTYyRDAeFw0yNjA0MTkwODQ1MThaFw0yNjA0MjYwODQ1MThaMBgxFjAUBgNV
BAMTDTY5ZTQ5NjFmLTQ4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBbUtV5z4zrCNa8YM9biGCU9dtlVZxHXuOzkGQyFOQTIYuAgnefusWBl7XKWgy
f9hJBwPnaMePXzqCWQuzh+SBMZ9pPqpg2I+eaBemv4RxpPEFXx8XZ0UXy5mp1mTF
c1g4XXuJBRxbFy76YGrI63SjZMpVF42gqW7ElCqEMve8UKdKQV+9vZR7BK/jjJqY
IhmF07a8KGD7Y2iPcfFGRwDUhy9rnpN9uVdSvasCLjcy35hidfq4tW4rKad+zeXY
UNmw/ws2oF4rrmnx5NIGS0GMvHl6gE54SUlfnfkpAOFmhWj4b+ek4Yb1RH1yw+Zf
Mvl+liQfZ7IsE3gLXHf2U1cdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUppg6+n95
YDSv3/4UGQjPcPoZ+McwHwYDVR0jBBgwFoAU80gH4oZFUlDDf1PcB78ego0Zpi0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFMzE3L0U4RTZCQTJDMzNG
MDExRjFBQUI1ODgwMEJDODMzNzczLzgwZ0g0b1pGVWxERGYxUGNCNzhlZ28wWnBp
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvODBnSDRvWkZVbEREZjFQY0I3OGVnbzBacGkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF
MzE3L0U4RTZCQTJDMzNGMDExRjFBQUI1ODgwMEJDODMzNzczLzgwZ0g0b1pGVWxE
RGYxUGNCNzhlZ28wWnBpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAvtn69as7DL3xqHrj0zq63wIsEqkQN77+uskt+MVA5LLuBJoe45SIQw18nJg4c
S7rdYkyeywIQrIrNDSfvJeTvRd04ZL6I/yOs4JReQp6PiDthNuGfHZA+BEe6ukfX
8xzAax3VGQKZb0l5+MPEkJj4KEp/rcCd/q6w9DQCUKEjJVA6ikm6vjq4alNzKfNn
Ci0HQQE0IGtxB7DoKXemlTkowRdXPxjzhOUSm8w1rUEOsjhS5O6LV0tFrX1jtq2n
+TteUWTDICOslq/unne9vEZDn2SIPvluyiGY43OaB2aJRNduYPexx7N2Ry30Ohuw
rs2hLHVrks1Y2uHb9a0nuaBA
-----END CERTIFICATE-----
Generated at Mon Apr 20 08:49:06 2026 by rpki-client