
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json)
Hash identifier: LJdu3FCfUAI/cYwLfB6HmrCcN5FnEe4kxLMRnQ4kpg8=
Subject key identifier: 2C:6C:83:6B:11:6C:D0:77:66:CF:23:E9:F8:DE:AA:A2:B6:1A:FD:62
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial: 0AF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
Manifest number: 0AED
Signing time: Mon 30 Mar 2026 19:22:08 +0000
Manifest this update: Mon 30 Mar 2026 19:22:07 +0000
Manifest next update: Mon 06 Apr 2026 19:22:07 +0000
Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: xosRzKpsOiIhB4BCkOh4S1XMfDzVlRzWPgEevBvgELY=)
2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: ohQ7dmr4wlhGIPSZo4SYR6kjahOfosEHSoyiv0ooBGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Validity
Not Before: Mar 30 19:22:07 2026 GMT
Not After : Apr 6 19:22:07 2026 GMT
Subject: CN=69cacd60-7751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:c8:88:12:c3:94:e2:03:8a:a0:b0:2f:f1:
ff:71:01:a1:51:14:ac:05:85:80:7c:20:d3:31:81:
b5:48:04:14:04:83:74:20:64:d1:2e:db:63:15:6a:
bb:32:81:98:c0:6f:dc:01:3a:e8:8a:34:e0:54:4e:
1a:ba:73:66:d9:10:04:59:57:82:af:fa:a2:6c:9c:
06:d4:25:e8:72:02:c2:a1:c9:c4:1f:76:a3:ba:fd:
0c:5c:70:ea:e9:fd:0e:17:76:e6:3c:33:97:16:27:
5b:f7:5a:d7:20:15:87:39:24:5c:43:e9:f4:ea:d7:
31:fb:35:e2:10:d3:a8:4c:8c:69:ff:6a:f2:83:58:
c5:07:cd:f8:06:9a:cc:2a:16:1d:32:ff:ed:4a:0d:
3c:f8:3c:9a:a8:ec:ed:19:f8:3c:5d:c9:bf:69:dd:
0e:11:97:06:d4:ba:a6:82:33:8b:b3:62:f1:ff:bc:
53:be:68:e3:09:c3:e3:87:44:86:fb:4e:4d:c6:42:
88:7f:5c:db:d0:97:c1:a0:ae:3f:ab:60:68:ee:5c:
36:36:cc:79:32:19:ae:c2:17:9c:65:eb:6d:aa:67:
0b:44:41:56:0e:01:de:d3:4e:b3:7d:57:3a:94:9a:
49:6f:1a:c6:92:f4:05:6d:05:39:08:1c:bd:37:53:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:83:6B:11:6C:D0:77:66:CF:23:E9:F8:DE:AA:A2:B6:1A:FD:62
X509v3 Authority Key Identifier:
keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:fa:1d:ff:10:01:e7:20:bf:c5:d2:76:8c:4a:87:cb:17:
da:46:4e:1b:38:b7:62:1c:ac:7f:fe:8c:4e:71:f3:5c:43:22:
19:76:e5:6f:42:db:ee:d8:f4:4f:94:66:9f:cd:9f:26:6f:28:
6a:04:39:45:ad:65:fc:40:57:fb:49:37:57:d7:11:98:87:69:
f2:fc:f3:db:ce:9f:ca:05:01:85:ff:3d:14:97:fd:1d:8d:ed:
53:84:91:ad:25:c9:7f:29:f3:8f:41:59:9e:af:cb:a4:a2:ad:
0c:01:23:69:b8:d4:24:5a:3c:dc:33:b7:26:6a:cb:31:53:d8:
3d:0d:ef:1e:6d:7c:90:50:f4:e3:c1:5a:05:4f:81:35:5b:ba:
8f:9c:8d:75:81:f2:cb:34:63:12:b6:3b:ef:f6:49:09:e7:ce:
34:f9:82:b5:85:79:d3:fd:20:b2:f9:ae:9e:9c:7f:7a:09:75:
e9:fc:c9:db:99:24:b3:ed:58:97:cb:0e:d3:d6:97:17:95:f8:
18:d6:2d:22:e2:03:a5:e3:5b:b2:f1:7f:ce:db:71:96:9f:46:
06:f1:de:25:f8:c0:ca:14:fd:a2:20:db:71:4c:8d:5a:e5:24:
11:69:ba:37:1d:0e:e8:95:d3:90:16:60:a9:00:26:b9:61:28:
f2:34:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 11:26:27 2026 by rpki-client