
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json)
Hash identifier: BFfFfRzYCAOCc9BEhT6b0ZaW2WLRWSzB4OV/bFTbUTY=
Subject key identifier: 97:E0:A7:0E:93:B6:7A:BA:2B:BD:D4:F7:E1:AF:A7:29:0E:90:76:81
Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Certificate serial: 07C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
Manifest number: 07AD
Signing time: Wed 20 May 2026 21:32:05 +0000
Manifest this update: Wed 20 May 2026 21:32:04 +0000
Manifest next update: Wed 27 May 2026 21:32:04 +0000
Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: 6G2ZGeegvwa54x2ji/K5ddC9ag7yoxzxREaFP3sN2G8=)
2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: FbF3GSUAuBF+Lu9+Biww40q4aw4ohnbpizYlHh1W2WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Validity
Not Before: May 20 21:32:04 2026 GMT
Not After : May 27 21:32:04 2026 GMT
Subject: CN=6a0e2854-7d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:d7:b5:45:70:86:f3:4a:2d:43:c5:32:06:
40:0a:fa:4f:6a:09:62:7b:ff:99:cc:ae:6e:32:85:
89:de:6d:8f:02:80:a6:f1:99:32:d7:4a:06:ea:2d:
08:ba:f2:6a:d8:28:ae:73:ab:23:a3:af:b5:1e:cf:
f0:2d:4d:70:62:c0:7f:68:1f:eb:82:26:52:56:b4:
6a:cb:02:a4:0a:b9:61:14:86:87:04:d5:9f:67:3e:
e9:cb:e7:ec:44:e5:7f:fc:06:23:74:68:66:70:96:
6d:df:db:5a:bf:18:fe:f1:a1:84:8c:24:61:c1:dd:
52:a2:d5:ce:e5:00:ab:04:d1:01:61:c0:85:3b:29:
dd:29:42:b5:5f:62:78:a1:d7:dd:ad:0a:18:01:34:
4b:10:4a:9c:39:21:fd:87:47:67:d0:e1:f5:15:15:
77:d5:ec:d8:80:4c:5a:fc:2e:f4:be:c5:d0:fa:0a:
4e:0b:97:4b:6d:ff:73:2b:d7:a3:70:de:6a:ef:99:
83:27:63:a9:b4:a6:d8:92:aa:f3:f3:4c:0a:90:31:
8d:ce:29:16:e6:26:c1:5f:2c:6a:eb:7c:97:f7:9d:
b3:f9:31:9b:88:c2:6a:cc:c5:bb:af:35:45:24:2a:
f3:9e:31:26:90:83:b6:f7:d0:95:33:21:54:d5:4d:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E0:A7:0E:93:B6:7A:BA:2B:BD:D4:F7:E1:AF:A7:29:0E:90:76:81
X509v3 Authority Key Identifier:
keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6b:0f:ce:15:53:e0:3c:9e:84:e8:39:87:41:49:b2:f6:67:
d7:5f:bf:6b:fb:87:96:e1:8c:20:a9:9e:ff:33:94:77:45:4e:
2c:5a:c5:b6:d9:5f:07:36:a3:65:12:bb:cb:86:a3:12:2f:41:
2c:e6:c7:dd:51:56:15:d3:ca:19:18:e9:ff:10:b0:de:e9:03:
ee:c9:b6:1d:5a:cd:0f:bc:2f:4f:38:f9:56:65:7f:be:58:e3:
c8:38:ca:45:ce:0b:e9:7f:99:f6:54:cf:54:9a:99:31:41:6a:
0d:e0:5f:0c:6b:57:a9:43:72:6e:fd:cd:f2:42:cf:a5:86:85:
f4:d1:d4:26:c9:28:1c:c2:da:6b:b3:b1:70:17:83:56:d4:86:
4f:62:b7:05:37:50:d2:ec:4e:2e:73:c1:cc:e8:8b:0b:fd:3e:
8a:76:74:82:09:df:a0:ec:07:db:c5:15:82:23:ff:f2:fe:b8:
eb:19:18:6f:fa:69:1a:31:a4:b5:ea:58:26:f0:cd:f4:3c:93:
c9:6e:4c:93:9a:62:12:f3:eb:7c:7e:82:f4:99:61:a6:da:e0:
19:bf:07:0f:73:42:91:a1:25:97:95:55:a0:10:62:eb:7c:c1:
43:ef:d2:27:5c:27:1f:a0:95:7c:be:c4:aa:39:f8:49:58:76:
c5:9f:b4:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3
NUEwMjdDNjkwHhcNMjYwNTIwMjEzMjA0WhcNMjYwNTI3MjEzMjA0WjAYMRYwFAYD
VQQDEw02YTBlMjg1NC03ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxf/XtUVwhvNKLUPFMgZACvpPaglie/+ZzK5uMoWJ3m2PAoCm8Zky10oG6i0I
uvJq2Ciuc6sjo6+1Hs/wLU1wYsB/aB/rgiZSVrRqywKkCrlhFIaHBNWfZz7py+fs
ROV//AYjdGhmcJZt39tavxj+8aGEjCRhwd1SotXO5QCrBNEBYcCFOyndKUK1X2J4
odfdrQoYATRLEEqcOSH9h0dn0OH1FRV31ezYgExa/C70vsXQ+gpOC5dLbf9zK9ej
cN5q75mDJ2OptKbYkqrz80wKkDGNzikW5ibBXyxq63yX952z+TGbiMJqzMW7rzVF
JCrznjEmkIO299CVMyFU1U1B6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfgpw6T
tnq6K73U9+GvpykOkHaBMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx
MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND
TWVIdGczdkR1QVoxb0NmR2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnmsPzhVT4DyehOg5h0FJsvZn11+/a/uHluGMIKme/zOUd0VOLFrFttlfBzaj
ZRK7y4ajEi9BLObH3VFWFdPKGRjp/xCw3ukD7sm2HVrND7wvTzj5VmV/vljjyDjK
Rc4L6X+Z9lTPVJqZMUFqDeBfDGtXqUNybv3N8kLPpYaF9NHUJskoHMLaa7OxcBeD
VtSGT2K3BTdQ0uxOLnPBzOiLC/0+inZ0ggnfoOwH28UVgiP/8v646xkYb/ppGjGk
tepYJvDN9DyTyW5Mk5piEvPrfH6C9JlhptrgGb8HD3NCkaEll5VVoBBi63zBQ+/S
J1wnH6CVfL7Eqjn4SVh2xZ+0BA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:17:24 2026 by rpki-client