
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier: YUFuz3ElhUaFU19AljC1RXgW8IQpMGww+E7o00uRUoo=
Subject key identifier: 67:29:73:78:16:40:39:D1:A2:8F:D2:C4:AD:42:98:2D:10:D5:FB:E7
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial: 0BBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number: 0BB1
Signing time: Wed 20 May 2026 19:03:35 +0000
Manifest this update: Wed 20 May 2026 19:03:35 +0000
Manifest next update: Wed 27 May 2026 19:03:35 +0000
Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: P8T+J/ASy8jPUO/rfmXyJl7vIhniBGPZiTY5BXi5jpY=)
2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Validity
Not Before: May 20 19:03:35 2026 GMT
Not After : May 27 19:03:35 2026 GMT
Subject: CN=6a0e0587-1300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:fe:21:b1:a8:63:2c:b9:c0:97:bb:e0:89:
a5:0d:96:a1:54:f1:77:63:e8:89:2a:27:5b:46:68:
64:28:33:53:93:95:87:f8:77:04:67:81:4b:32:70:
d4:ac:8e:3d:1b:7d:0f:af:35:b7:4e:7c:80:8d:72:
e4:0a:47:9b:48:00:64:c4:1c:d8:e5:b2:b6:b7:ed:
a7:c3:24:a3:64:ad:ea:f0:dd:d3:9b:da:5e:16:0c:
8c:62:78:41:4f:d9:09:73:e9:0a:0c:f4:27:36:66:
63:af:1d:aa:de:43:f3:d2:31:a8:4d:25:95:fb:15:
ca:cb:18:e2:8e:f7:28:e0:b2:22:aa:3e:e0:21:45:
4e:f1:62:75:3a:b0:06:b7:9b:7e:85:09:ae:ec:31:
96:0c:8d:f4:50:ad:cc:be:f2:cb:ba:0c:86:8a:d5:
19:49:ca:e0:97:dc:a5:27:c3:e3:b4:04:c0:59:24:
d7:d2:f6:70:07:0f:69:51:8d:1f:1a:64:59:7b:18:
09:58:1f:01:71:b2:fd:5d:32:b2:32:7e:62:5e:03:
33:5d:8b:62:8a:a0:b7:ff:13:69:7b:da:81:ef:99:
de:95:84:f4:73:5e:1f:d6:29:98:37:4c:75:09:9f:
b7:54:7d:ca:8f:b2:94:08:cc:67:f9:47:67:19:3a:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:29:73:78:16:40:39:D1:A2:8F:D2:C4:AD:42:98:2D:10:D5:FB:E7
X509v3 Authority Key Identifier:
keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:fa:40:70:87:30:e5:c9:fc:17:85:e9:2d:d7:00:09:0a:
50:df:5a:10:aa:a6:2f:92:b4:8c:09:2d:32:ea:b8:c0:61:2f:
f2:54:8f:e6:c1:4f:a9:fa:5c:a4:fb:db:35:a4:4c:ce:ab:59:
8a:19:54:f1:19:27:59:b5:eb:d2:e0:0e:48:c4:4e:86:de:1f:
75:f3:68:63:ff:60:c6:3b:76:c3:a4:d6:99:50:95:0a:0f:5c:
4d:2e:42:08:eb:60:25:a9:3d:15:da:dd:8b:6e:00:a3:e4:4f:
21:c4:60:fb:04:0c:d8:c7:88:43:d2:d5:6c:28:87:0b:06:63:
42:d7:4c:2c:11:ec:9c:9a:8e:a3:3e:84:41:8f:6a:2d:db:64:
4d:41:de:61:fb:2e:eb:57:b0:1e:72:00:42:40:73:0c:7e:2e:
41:20:91:d0:56:65:59:a6:2c:ea:35:bb:e2:c5:94:5c:84:e5:
6e:93:dd:7a:5f:2b:e7:3b:ed:58:24:59:58:db:61:60:ca:3f:
bc:8e:04:bd:7b:c6:66:4a:db:26:75:fb:e9:b4:dd:fd:4e:29:
e0:1e:81:a4:97:9f:33:cb:b4:f9:3e:19:37:69:26:a1:06:50:
1a:5c:e5:86:57:50:ce:38:77:e0:9d:a9:e3:d6:91:86:41:a5:
90:81:24:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw
RjcyODdDOUEwHhcNMjYwNTIwMTkwMzM1WhcNMjYwNTI3MTkwMzM1WjAYMRYwFAYD
VQQDEw02YTBlMDU4Ny0xMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj4b+IbGoYyy5wJe74ImlDZahVPF3Y+iJKidbRmhkKDNTk5WH+HcEZ4FLMnDU
rI49G30PrzW3TnyAjXLkCkebSABkxBzY5bK2t+2nwySjZK3q8N3Tm9peFgyMYnhB
T9kJc+kKDPQnNmZjrx2q3kPz0jGoTSWV+xXKyxjijvco4LIiqj7gIUVO8WJ1OrAG
t5t+hQmu7DGWDI30UK3MvvLLugyGitUZScrgl9ylJ8PjtATAWSTX0vZwBw9pUY0f
GmRZexgJWB8BcbL9XTKyMn5iXgMzXYtiiqC3/xNpe9qB75nelYT0c14f1imYN0x1
CZ+3VH3Kj7KUCMxn+UdnGToCqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcpc3gW
QDnRoo/SxK1CmC0Q1fvnMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1
QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH
LXEzSkl6aUxtR1lQY29mSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUlr6QHCHMOXJ/BeF6S3XAAkKUN9aEKqmL5K0jAktMuq4wGEv8lSP5sFPqfpc
pPvbNaRMzqtZihlU8RknWbXr0uAOSMROht4fdfNoY/9gxjt2w6TWmVCVCg9cTS5C
COtgJak9Fdrdi24Ao+RPIcRg+wQM2MeIQ9LVbCiHCwZjQtdMLBHsnJqOoz6EQY9q
LdtkTUHeYfsu61ewHnIAQkBzDH4uQSCR0FZlWaYs6jW74sWUXITlbpPdel8r5zvt
WCRZWNthYMo/vI4EvXvGZkrbJnX76bTd/U4p4B6BpJefM8u0+T4ZN2kmoQZQGlzl
hldQzjh34J2p49aRhkGlkIEkfg==
-----END CERTIFICATE-----
Generated at Thu May 21 11:04:24 2026 by rpki-client