
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
File: 8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json)
Hash identifier: MgJqp/ojsrbwewdnPB15RnNqsXdznjDValRJsobpnrw=
Subject key identifier: 5C:D3:C6:08:BB:F7:06:00:C2:4C:57:5D:8F:DB:18:19:0D:42:27:91
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Certificate issuer: /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial: 058B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
Manifest number: 057F
Signing time: Sun 26 Apr 2026 23:14:21 +0000
Manifest this update: Sun 26 Apr 2026 23:14:21 +0000
Manifest next update: Sun 03 May 2026 23:14:21 +0000
Files and hashes: 1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: 5ywnVuw38bGlRa8CGu48WGFafpSotD4axIF3WAJDrrY=)
2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: JC7lbeFnRnICzkSYuKq2WaMSqXlPZ3bBUzx31GKWCuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 23:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Validity
Not Before: Apr 26 23:14:21 2026 GMT
Not After : May 3 23:14:21 2026 GMT
Subject: CN=69ee9c4d-37e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:84:bd:01:92:3c:73:f9:12:ca:e5:21:75:
37:17:43:19:10:9a:27:7f:b6:05:f9:dd:74:30:62:
b6:37:82:af:9b:da:93:07:c3:45:b9:40:e0:52:84:
0d:b2:40:76:2d:f8:c5:26:cf:06:d9:cf:a1:1d:76:
3c:f4:5f:13:75:4b:e7:15:50:d6:14:bf:0a:e1:3c:
1c:d1:79:72:de:8a:6d:9b:d7:85:77:13:d0:7b:57:
c7:be:62:0e:78:c5:ef:df:42:80:de:7b:90:06:2c:
3e:7e:e4:38:4f:b0:58:7d:5e:40:9c:46:7c:8f:48:
5d:43:5d:ed:15:ef:5a:a6:cc:3b:a0:46:5f:3e:39:
27:ed:5f:34:9a:db:33:66:6f:3f:70:63:10:51:d3:
58:40:8c:8b:63:6d:ac:01:dc:b3:91:c0:e9:d2:02:
7d:fa:c0:bb:39:34:b0:88:fc:52:42:a9:99:c4:ff:
d9:6a:df:1e:51:28:09:86:60:95:4c:06:a5:e6:cc:
64:1d:ee:ef:ac:8d:80:fb:ae:b1:80:3f:74:6b:a6:
11:d8:2b:5e:75:4e:ae:03:09:dc:4c:3e:8b:57:44:
7a:c9:64:45:6e:fb:a6:98:32:28:03:e4:e1:bf:ef:
1a:64:c1:ad:fc:f1:eb:26:3c:7a:7a:11:68:27:5e:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:C6:08:BB:F7:06:00:C2:4C:57:5D:8F:DB:18:19:0D:42:27:91
X509v3 Authority Key Identifier:
keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fe:f3:3a:ea:35:6e:0c:7f:b5:7d:26:9f:ae:da:e2:19:77:
96:df:42:42:7d:8d:22:38:1d:c8:51:ac:2d:d2:eb:c5:1d:96:
f6:5e:23:85:ce:55:ef:fa:c3:3a:4e:0f:3a:32:a9:eb:55:ad:
79:16:9f:d3:be:25:d7:96:de:63:05:34:27:2d:39:28:fe:59:
b6:e7:32:45:5b:21:85:fa:ea:db:09:ca:27:38:77:34:aa:01:
00:64:9f:e1:05:3a:ad:5a:38:ae:17:3a:72:8e:f6:18:d5:61:
27:9b:1e:7b:24:d1:7a:dd:96:2c:f9:08:b4:68:76:58:7e:f0:
e5:a3:f8:de:34:4f:d1:25:3f:8a:59:45:2a:28:41:73:6e:90:
6f:e8:3f:0c:c9:d9:a7:16:00:b3:25:6a:dc:f9:2a:dd:f7:0c:
ca:5c:6b:05:7c:f5:a3:27:77:89:8c:8c:ea:f4:ee:43:d8:c8:
f1:b3:38:b6:42:18:58:a8:38:3b:db:17:18:de:b5:85:b0:9f:
42:96:56:f9:3c:a9:f9:b9:ef:3c:25:75:4e:93:82:08:a9:31:
94:70:b5:35:d7:a3:61:be:2e:aa:d1:47:5b:d9:9c:68:b7:ea:
3b:39:88:69:55:25:c9:83:f8:3f:e4:e4:2c:77:ab:09:b5:19:
bd:46:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:58:21 2026 by rpki-client