
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier: fLtytiQ/hTj0KzB/R8dBzkwgtETORANyWiwIyu2xjWA=
Subject key identifier: D0:CC:45:82:AA:DA:21:09:5C:00:B8:A4:B9:50:76:A2:54:05:0F:14
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number: 014B
Signing time: Sun 05 Apr 2026 04:37:39 +0000
Manifest this update: Sun 05 Apr 2026 04:37:38 +0000
Manifest next update: Sun 12 Apr 2026 04:37:38 +0000
Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: GXXxW9lcTJ7DcsYKUc9NSH1i7P1ENQi13n7E/Zd62Zo=)
2: E36214403D0011EFAD623342C4F9AE02.roa (hash: NA5xm/Sk+UM1S0R7e4w/A2uHlcPucDhnuPiGtwppY30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Validity
Not Before: Apr 5 04:37:38 2026 GMT
Not After : Apr 12 04:37:38 2026 GMT
Subject: CN=69d1e713-8487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:f2:e8:d0:0f:15:ee:9c:95:86:de:63:bf:
9d:d8:61:11:d5:56:9c:ce:b6:af:84:c4:ff:af:b6:
45:0e:db:8d:82:08:4d:a0:43:7d:bf:42:04:f5:9c:
ae:e9:d4:d5:3b:30:99:70:52:2d:94:44:63:0d:a1:
ac:b8:01:9c:33:f1:40:b6:fb:88:6c:3c:7a:0b:28:
85:68:3a:99:c7:b0:7b:a0:73:c2:1c:ed:98:48:a6:
a5:0b:88:f4:6f:de:a9:57:41:8f:bd:41:df:55:53:
94:3c:fa:4d:54:a1:7e:19:9c:4e:0c:0c:4d:c0:f0:
74:2c:ff:e8:6b:ca:87:6d:51:cf:c9:e1:68:32:3e:
01:59:80:3a:1f:64:02:4f:dc:7d:24:53:9b:de:e4:
b8:f9:83:39:f1:0d:ad:96:a6:9f:e6:6d:4b:f2:79:
96:50:19:bd:1e:9b:73:8f:8f:f0:fb:45:6f:b0:7b:
ed:a6:62:8b:38:00:36:3d:66:46:d0:5d:0f:17:4b:
22:cd:74:f2:bc:b3:13:a4:a1:11:ce:ea:a8:5f:b9:
1a:47:8d:03:d5:c9:3b:71:43:e3:84:82:df:13:3e:
1c:44:a4:54:0c:11:d6:88:b8:95:ab:bc:a8:d2:91:
48:a1:64:00:3b:c3:37:35:88:3d:66:9f:7d:e3:16:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:45:82:AA:DA:21:09:5C:00:B8:A4:B9:50:76:A2:54:05:0F:14
X509v3 Authority Key Identifier:
keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:87:67:62:9a:4e:bf:ab:65:84:52:ef:62:48:f9:0b:2c:0f:
50:5c:ac:4a:2d:24:17:44:45:8f:5e:3b:91:49:07:25:11:71:
3b:32:45:82:7e:d9:b7:b3:c8:8b:20:0e:94:42:d7:af:ed:3c:
40:07:2f:36:bc:84:18:e2:61:a9:2c:3b:73:51:33:ff:c2:9c:
4d:9c:36:40:ac:ed:b7:c7:3e:db:51:7c:35:a8:3e:ce:e2:ca:
2a:46:99:40:c8:92:aa:3a:40:f7:6a:e6:c8:6f:60:a5:dd:c5:
0d:e8:7f:f3:8f:af:31:68:d2:9b:35:dd:4d:2d:3c:69:6f:6a:
65:37:40:be:f5:e4:21:bf:d2:64:62:ba:d1:a3:7d:6c:79:31:
c7:26:9c:a8:68:b6:06:e6:ef:b3:a3:2f:3a:66:19:f5:dd:b0:
0b:8a:48:12:59:b6:1c:77:04:54:cb:e6:7c:76:3e:83:b3:39:
7d:ab:e9:6c:48:d1:d1:bb:8d:89:c8:0e:21:4e:8d:09:61:b4:
9d:5f:c6:4e:68:6c:64:4c:fc:47:7f:49:04:28:ff:aa:c4:df:
01:8f:b9:20:6a:f7:2d:53:45:4d:5a:78:3d:af:46:eb:a8:2a:
89:fb:e3:c7:f1:43:75:26:e4:12:e2:ce:22:ff:1d:e4:0e:77:
5b:5b:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:28:20 2026 by rpki-client