
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json)
Hash identifier: HvyE1AbmAPaNT2D2JBs1nJx6LkH26Uke8CZM74uQXBc=
Subject key identifier: BA:43:58:B0:13:AA:87:D7:DC:7F:CA:08:93:A6:50:4E:CA:3B:A9:1D
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial: 0772
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
Manifest number: 0767
Signing time: Wed 20 May 2026 21:42:03 +0000
Manifest this update: Wed 20 May 2026 21:42:02 +0000
Manifest next update: Wed 27 May 2026 21:42:02 +0000
Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: EJh0aowk2ORQrzYDTtaRbXTsAQoT7QgOHbhS1OmfZns=)
2: 9B6CA5663CB711F1A53ED041B4833773.roa (hash: WVuzX5CFpIrusgLbPfWDtQsMG2ekbWED5/WtRt7osX8=)
3: 00619CFA3CB911F1BBDAFF7AB4833773.roa (hash: DsdENVieE2RhNlpGEqRk9at7+HY0bRNG3YOtTEhYRjw=)
4: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: EK917a0brIXozyOjUJuFME0or9oqwhvu136xFaoo3CE=)
5: FFD30A3A3CB811F1BBDAFF7AB4833773.roa (hash: SjUSWIZP5JehPI4S4JhlMJHXgjL5bWNza1x377Y4CkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Validity
Not Before: May 20 21:42:02 2026 GMT
Not After : May 27 21:42:02 2026 GMT
Subject: CN=6a0e2aab-0913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:5d:46:32:64:4a:f8:7c:fc:30:0a:16:72:
2e:58:0d:64:88:8d:75:f5:8e:b3:0e:32:02:f2:2c:
44:c2:df:f3:95:7e:5e:ff:b9:fb:78:d3:31:de:dc:
05:6a:37:d7:92:e7:c3:c1:72:70:ad:00:89:2b:33:
7e:a6:d3:30:18:71:fb:84:75:ab:47:1e:8f:81:c6:
dc:1e:1b:0a:c1:8b:8f:ba:ff:66:bc:93:1f:15:81:
f0:be:60:d8:d3:2c:57:25:13:a2:36:da:17:74:b3:
01:33:4d:cd:9b:c9:7b:19:02:1f:f1:30:82:83:a9:
9b:d4:17:76:da:75:d3:4e:22:6f:d6:30:a2:37:13:
4d:0b:75:54:39:87:33:98:23:0c:93:12:ca:6f:d2:
84:4b:09:fc:8c:d5:a3:bf:8c:40:7c:e1:17:49:c3:
29:ee:ef:aa:32:58:94:28:10:b9:6a:74:da:8b:b9:
86:38:db:1a:08:55:5b:56:91:0e:ae:6d:21:22:13:
7f:b8:36:72:4b:fd:28:54:fb:f8:e2:86:25:c8:57:
16:32:ca:2f:11:95:d2:4f:54:22:6b:78:18:fe:ee:
a6:3d:27:ce:ad:21:64:65:8e:78:cb:5a:f6:09:9b:
c0:82:9e:a8:5b:fa:fb:c0:fb:d4:51:16:b0:cc:94:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:58:B0:13:AA:87:D7:DC:7F:CA:08:93:A6:50:4E:CA:3B:A9:1D
X509v3 Authority Key Identifier:
keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:65:2a:67:c2:b0:d6:ed:43:d6:53:52:ad:f1:d4:7c:40:46:
da:5e:98:a8:ed:47:97:b1:1b:d5:b0:82:04:c4:18:3c:5a:a0:
3a:6c:bc:2e:09:2a:68:58:b4:ef:8c:6b:c0:91:af:9f:f6:80:
df:0d:ec:91:20:a1:eb:ca:4c:87:c2:cb:a0:60:33:8e:1b:c8:
14:19:10:ae:7d:19:7b:69:53:06:19:dd:2b:14:4e:27:1e:ea:
74:44:de:eb:59:d4:9b:a8:9c:73:fa:05:a6:ba:4a:ad:48:fa:
21:fd:2c:05:7e:2c:14:83:d6:12:5e:72:e6:b6:df:f1:fb:5a:
2e:45:d7:2d:c5:0f:73:cf:68:5a:75:f0:1d:bb:ee:94:e6:e5:
c8:3d:d4:72:0e:dd:12:33:8c:58:58:25:64:ea:14:2a:04:f8:
e0:a9:a9:4a:d7:4f:d5:31:56:75:4f:f4:f9:e5:60:57:a0:0e:
37:a4:f8:f8:cb:96:e2:bf:ad:f7:bb:23:d8:ac:d5:1c:1e:5c:
70:a4:22:b2:72:52:41:8a:55:d8:22:a6:2f:e7:91:8f:60:be:
3f:7b:77:31:9d:ce:f3:1b:fd:03:02:5d:a8:06:6f:a9:a5:3d:
19:9d:93:53:ea:c1:1a:b5:d1:5b:57:65:77:78:33:81:77:6b:
2f:26:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:13 2026 by rpki-client