
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json)
Hash identifier: gDYvNJgw0tDwb3XPyKq7J9j5adRaF7sFs7OcRUwyq6k=
Subject key identifier: 03:92:26:2C:37:E5:DC:85:BF:37:16:55:CB:43:EB:A5:91:1A:8B:89
Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
Manifest number: 25
Signing time: Tue 19 May 2026 08:41:56 +0000
Manifest this update: Tue 19 May 2026 08:41:56 +0000
Manifest next update: Tue 26 May 2026 08:41:56 +0000
Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: 2ANzfVHOji1Vxmb5iUoXQ6d4yS1g7FpehOHOknWi0FI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl
rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B
Validity
Not Before: May 19 08:41:56 2026 GMT
Not After : May 26 08:41:56 2026 GMT
Subject: CN=6a0c2254-8c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:05:10:b3:0b:d0:31:f9:63:99:42:a0:d6:
f4:d7:ba:c4:21:aa:51:bd:b3:a4:2f:6c:4a:ce:4f:
e1:a0:ea:7b:a9:cc:c6:f5:a2:0f:3c:4a:8d:92:e9:
63:9d:db:1c:49:8e:52:e5:06:41:ff:2f:4a:ad:ae:
2d:d7:36:0c:f9:58:ae:2e:56:19:51:51:17:62:c1:
15:28:5a:be:dd:39:2a:10:bb:18:dd:c4:1c:0e:2f:
ee:c5:77:4f:bd:99:a8:e4:e5:3d:fb:97:c0:2d:f7:
c5:d5:0d:a7:87:3c:c7:31:86:7e:8b:08:c5:9e:3e:
82:58:a9:18:98:df:ca:04:08:68:cb:5f:17:99:51:
a8:b6:a8:d4:80:d8:4b:90:97:79:76:20:1e:18:be:
6a:a4:fe:6e:32:93:56:d1:a6:0c:bd:3d:26:86:83:
cc:5d:a2:40:48:d1:8a:a7:4c:c2:11:f0:ad:80:16:
09:c1:4e:aa:bb:93:43:8f:80:60:46:ca:56:7b:88:
24:d2:8f:1c:ff:74:b6:51:42:36:d8:69:d0:bd:f5:
0b:6b:14:f8:d6:81:f4:72:a9:c7:38:48:4b:d6:86:
d3:16:b7:c6:48:18:fa:68:00:e9:80:e3:7c:97:a9:
41:bf:9a:c6:63:da:93:0b:a6:44:b9:df:f0:a1:e0:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:26:2C:37:E5:DC:85:BF:37:16:55:CB:43:EB:A5:91:1A:8B:89
X509v3 Authority Key Identifier:
keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:45:75:3b:65:80:ca:22:7b:f4:40:6f:42:11:7e:af:d3:
bc:d6:35:85:d3:c9:38:52:16:7f:f0:13:85:28:f2:6e:f9:e2:
e3:47:6b:66:50:2b:62:c4:4a:e7:7a:7d:4d:5a:21:77:ad:e6:
0b:99:16:99:5f:2d:92:d1:2b:3a:b5:04:57:72:e5:1f:a9:79:
b2:2e:10:66:2a:69:18:f0:8b:67:4f:4f:46:84:8d:7f:e4:a3:
e7:42:35:67:02:7c:4c:f0:13:40:33:57:39:92:4a:bd:aa:79:
9f:3e:a5:06:38:df:c4:ee:98:39:ed:9c:e6:c4:f4:e7:66:8e:
d2:bf:d0:2c:8e:5e:d3:92:99:bf:1b:c2:c3:92:e6:4d:6d:3a:
be:79:b3:69:22:a4:fb:8d:ad:d3:2f:59:69:16:74:38:cc:0b:
f4:45:da:90:82:70:3d:87:d5:d6:ce:73:d6:84:70:80:6c:8d:
2d:9f:82:ad:2b:64:81:62:5a:d2:c9:96:b5:b4:6f:16:0d:fc:
f0:a4:0e:cf:c9:5c:a4:b9:27:e8:23:40:71:87:f6:7e:75:70:
ac:6a:9b:75:89:ef:04:9b:fc:96:14:f6:73:2a:93:17:88:e3:
70:5b:e8:35:43:11:8d:d4:ee:e5:26:3e:30:ad:0c:73:01:63:
9e:10:79:28
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy
MURFNDE0QjAeFw0yNjA1MTkwODQxNTZaFw0yNjA1MjYwODQxNTZaMBgxFjAUBgNV
BAMTDTZhMGMyMjU0LThjNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBbAUQswvQMfljmUKg1vTXusQhqlG9s6QvbErOT+Gg6nupzMb1og88So2S6WOd
2xxJjlLlBkH/L0qtri3XNgz5WK4uVhlRURdiwRUoWr7dOSoQuxjdxBwOL+7Fd0+9
majk5T37l8At98XVDaeHPMcxhn6LCMWePoJYqRiY38oECGjLXxeZUai2qNSA2EuQ
l3l2IB4Yvmqk/m4yk1bRpgy9PSaGg8xdokBI0YqnTMIR8K2AFgnBTqq7k0OPgGBG
ylZ7iCTSjxz/dLZRQjbYadC99QtrFPjWgfRyqcc4SEvWhtMWt8ZIGPpoAOmA43yX
qUG/msZj2pMLpkS53/Ch4DuzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA5ImLDfl
3IW/NxZVy0PrpZEai4kwHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz
RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE
NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw
LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBgHUV1O2WAyiJ79EBvQhF+r9O81jWF08k4UhZ/8BOFKPJu+eLjR2tmUCtixErn
en1NWiF3reYLmRaZXy2S0Ss6tQRXcuUfqXmyLhBmKmkY8ItnT09GhI1/5KPnQjVn
AnxM8BNAM1c5kkq9qnmfPqUGON/E7pg57ZzmxPTnZo7Sv9Asjl7Tkpm/G8LDkuZN
bTq+ebNpIqT7ja3TL1lpFnQ4zAv0RdqQgnA9h9XWznPWhHCAbI0tn4KtK2SBYlrS
yZa1tG8WDfzwpA7PyVykuSfoI0Bxh/Z+dXCsapt1ie8Em/yWFPZzKpMXiONwW+g1
QxGN1O7lJj4wrQxzAWOeEHko
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:03 2026 by rpki-client