
$ rpki-client -vvf rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
File: 8YoO2nD7GHLaQ0DijybVT38KXtA.mft (raw, json)
Hash identifier: TAVohk0k0uAhuUbDpe8UqxaSy1c1PamKsuX2m4K25fQ=
Subject key identifier: CD:47:35:5E:DE:3C:0A:94:9F:A2:83:5D:C9:E8:4C:3F:B0:1D:05:C1
Authority key identifier: F1:8A:0E:DA:70:FB:18:72:DA:43:40:E2:8F:26:D5:4F:7F:0A:5E:D0
Certificate issuer: /CN=A91191B7/serialNumber=F18A0EDA70FB1872DA4340E28F26D54F7F0A5ED0
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YoO2nD7GHLaQ0DijybVT38KXtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
Manifest number: 30
Signing time: Mon 27 Jul 2026 11:01:50 +0000
Manifest this update: Mon 27 Jul 2026 11:01:50 +0000
Manifest next update: Mon 03 Aug 2026 11:01:50 +0000
Files and hashes: 1: 8YoO2nD7GHLaQ0DijybVT38KXtA.crl (hash: sg20mu9STl0W4Rg8PQtOEuSa0r3DTEVLSQddiCNCDUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.crl
rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YoO2nD7GHLaQ0DijybVT38KXtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91191B7, serialNumber=F18A0EDA70FB1872DA4340E28F26D54F7F0A5ED0
Validity
Not Before: Jul 27 11:01:50 2026 GMT
Not After : Aug 3 11:01:50 2026 GMT
Subject: CN=6a673a9e-df0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:4f:5a:55:e1:1d:df:ff:f8:9d:0a:7e:7b:
5b:0c:73:43:df:fc:f4:cc:62:d2:c5:b5:b0:2d:8f:
27:b1:08:61:d6:1d:22:86:96:66:b2:f1:ee:7f:cf:
a5:06:30:b9:95:29:88:f5:8b:4c:cb:d4:7d:1f:a1:
5b:37:bd:a2:33:99:89:8b:64:4e:99:55:8d:15:48:
b6:7f:6d:cd:7b:d0:be:46:5f:0e:c9:b4:01:4f:16:
36:14:23:9b:9c:be:2a:17:1c:78:26:04:c7:e2:84:
e2:a9:20:4a:3e:83:f2:e6:f5:fe:8a:b9:1e:65:47:
6d:de:22:f9:60:c9:3b:14:dc:fd:9b:40:e7:01:4b:
15:90:e0:6a:99:d6:e2:20:32:78:5f:fb:b3:4d:95:
02:86:1b:ed:89:e4:3d:9c:bd:20:0e:54:6c:d7:4f:
59:33:6d:17:ba:fd:d5:73:82:c0:18:f0:68:92:4e:
03:80:15:7d:ea:47:06:c2:47:3c:b7:c4:51:c2:9f:
e9:11:fd:a7:be:3a:e9:ec:da:2c:59:5f:84:09:05:
da:85:ed:d3:9f:e0:f6:f8:d0:0a:e4:8f:49:6c:c3:
49:52:39:5c:72:fa:36:7b:bb:60:02:8b:7e:ed:25:
81:dd:74:39:aa:ca:bc:fd:c6:1d:bd:df:c6:55:3a:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:35:5E:DE:3C:0A:94:9F:A2:83:5D:C9:E8:4C:3F:B0:1D:05:C1
X509v3 Authority Key Identifier:
keyid:F1:8A:0E:DA:70:FB:18:72:DA:43:40:E2:8F:26:D5:4F:7F:0A:5E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YoO2nD7GHLaQ0DijybVT38KXtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91191B7/84F62B543FA511F189ABF565BD833773/8YoO2nD7GHLaQ0DijybVT38KXtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:69:1f:16:56:b7:9d:7c:b9:38:89:7c:f9:f1:31:b0:5a:01:
a8:b1:62:18:22:4d:aa:dc:03:2e:7d:4b:8b:4d:2b:22:11:32:
76:6a:2e:96:09:5c:0a:d8:ff:83:d4:b8:e1:45:6e:e6:83:e9:
b9:a2:3e:59:ec:09:9f:c3:60:ae:7e:49:20:ea:4f:e8:68:a7:
b9:6f:21:03:ac:8a:41:e0:bf:6b:82:05:c2:77:85:9d:21:9e:
ab:81:d3:5c:ad:3a:01:cf:3c:0f:2f:97:37:05:02:52:f0:c6:
d0:e5:3e:b9:8d:4f:6c:92:46:f7:bc:55:e5:77:ee:da:c9:46:
eb:0d:ef:08:ef:94:dc:f0:2f:eb:7a:45:e9:99:54:e9:83:dd:
84:f9:c9:ef:b6:cf:8d:77:01:de:fb:82:d7:1b:2d:45:01:fc:
4e:e0:13:ed:fd:27:1f:26:04:02:c8:47:a8:94:43:9b:db:3d:
94:78:25:3e:d1:f8:ab:93:8b:b0:0e:67:5c:4e:79:d1:e8:95:
d7:94:74:05:07:d3:03:9a:28:4b:05:4a:1f:33:fb:be:26:22:
df:b1:aa:f2:d9:f3:6a:c1:25:0c:87:8c:13:de:d4:f0:33:c1:
8d:72:c5:4d:2a:af:73:55:e4:63:2b:9f:51:08:96:7b:ce:8b:
35:bf:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:52 2026 by rpki-client