
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
File: 8YoO2nD7GHLaQ0DijybVT38KXtA.mft (raw, json)
Hash identifier: uW/LZ80oigTs26FjHK7EVE2tbpPOgq1pEpXRJ0e0lU4=
Subject key identifier: EF:6B:AA:11:14:A2:B1:86:BB:34:22:95:38:CC:80:35:11:FE:10:74
Authority key identifier: F1:8A:0E:DA:70:FB:18:72:DA:43:40:E2:8F:26:D5:4F:7F:0A:5E:D0
Certificate issuer: /CN=A91191B7/serialNumber=F18A0EDA70FB1872DA4340E28F26D54F7F0A5ED0
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YoO2nD7GHLaQ0DijybVT38KXtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
Manifest number: 4D
Signing time: Mon 21 Sep 2026 08:18:26 +0000
Manifest this update: Mon 21 Sep 2026 08:18:25 +0000
Manifest next update: Mon 28 Sep 2026 08:18:25 +0000
Files and hashes: 1: 8YoO2nD7GHLaQ0DijybVT38KXtA.crl (hash: jQB5LspPuZ898sUMfgu118U0BnvZQJsslSFK8H/zCjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.crl
rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YoO2nD7GHLaQ0DijybVT38KXtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91191B7, serialNumber=F18A0EDA70FB1872DA4340E28F26D54F7F0A5ED0
Validity
Not Before: Sep 21 08:18:25 2026 GMT
Not After : Sep 28 08:18:25 2026 GMT
Subject: CN=6ab0e851-90c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:42:84:d3:a5:55:6a:90:a5:79:ee:01:fa:
70:0a:98:77:b1:43:38:0a:29:2f:3c:91:d4:5f:8a:
55:99:80:ec:cf:dd:ce:f4:fc:8b:b4:c4:63:ee:95:
84:20:3b:ca:51:c9:c8:07:91:22:d4:90:ae:14:9b:
42:77:86:b6:3b:9e:3f:2a:a0:60:8e:dd:fb:43:ce:
bb:8c:82:ca:46:96:83:e7:d2:09:69:1b:a4:1b:46:
54:ae:d2:5a:d3:ee:30:53:84:b0:29:97:5c:d5:7a:
51:17:75:f4:c6:7b:8c:e7:a3:ab:a4:70:87:e4:51:
e1:07:8a:a7:b9:49:89:5d:1f:12:a5:5e:91:86:96:
d3:8c:f8:94:c0:d8:b4:22:40:08:ee:5c:8b:a5:9e:
a2:8d:a6:ca:e0:75:e4:da:de:2c:71:17:db:c3:0a:
6f:4d:76:6b:88:ec:95:d0:9a:24:f1:80:13:3d:0d:
85:c5:f2:39:fa:ad:30:9c:29:d9:c5:56:30:3c:1e:
23:01:f5:a8:30:db:25:70:3c:49:f8:05:0f:d1:b0:
00:93:06:8e:c4:dd:3f:fc:f6:a0:4c:da:68:4d:92:
0d:3f:b2:f7:0b:86:d8:6d:eb:08:e3:32:e3:ef:67:
d4:eb:3e:22:47:b9:77:dd:30:e1:d7:49:e6:3c:26:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6B:AA:11:14:A2:B1:86:BB:34:22:95:38:CC:80:35:11:FE:10:74
X509v3 Authority Key Identifier:
keyid:F1:8A:0E:DA:70:FB:18:72:DA:43:40:E2:8F:26:D5:4F:7F:0A:5E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YoO2nD7GHLaQ0DijybVT38KXtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:70:25:e6:e0:7c:cb:ab:28:f6:f6:ef:ff:5e:35:93:b7:a1:
02:7b:88:72:1d:d7:1b:c3:e4:a5:0a:8c:d3:89:ce:ef:b0:ba:
23:40:2d:36:d2:50:71:1c:05:91:db:93:d7:bc:11:00:e7:2d:
41:b0:48:37:44:66:a6:96:31:a9:7a:07:3b:ef:d4:b6:ea:7f:
db:17:11:80:d1:b8:8a:8c:f1:4f:a0:81:28:0b:38:0c:ca:ab:
e7:6b:1b:4f:50:f1:04:95:59:7a:50:8f:4c:77:9b:ee:85:ff:
73:06:3b:4e:e8:69:f3:07:62:c0:c4:9b:6c:fe:df:70:cb:48:
f6:60:70:1c:b9:78:59:e9:6b:37:4d:88:09:62:05:34:76:cd:
89:e9:33:1e:97:49:df:d0:0d:f2:35:2f:b8:a0:cb:d9:e9:be:
8c:da:8a:07:69:5a:29:2c:b4:9f:8f:21:d1:9d:e0:39:32:74:
36:3b:c8:8a:58:fe:58:b1:e7:70:20:4e:5f:3a:79:ca:cc:f8:
fb:2e:f3:15:22:a4:c2:6a:16:95:31:f2:d1:de:1e:8e:bc:0e:
51:83:a2:e7:e4:fe:c9:db:51:1e:63:91:dd:72:fd:f0:d4:62:
0e:e1:7f:33:63:31:e2:44:e5:28:36:2a:6b:77:19:50:93:26:
3c:72:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:06 2026 by rpki-client