
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json)
Hash identifier: 3bWymQ6xvAQFsh4bA7H+RhUCV5oUIca5pRgruemPt9Q=
Subject key identifier: 12:C7:A7:04:06:1C:DC:8E:5E:DE:D5:88:D0:B3:F8:74:69:AC:2A:51
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
Manifest number: 0414
Signing time: Mon 27 Jul 2026 01:25:16 +0000
Manifest this update: Mon 27 Jul 2026 01:25:15 +0000
Manifest next update: Mon 03 Aug 2026 01:25:15 +0000
Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: yiguJGboGBoH0hnF3OopGzokWEMZ6QBJQLFSArkhYBs=)
2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: XV4+6RexVCN6qV3gQG680PT5iGhrAgYP0jd0N7lfisU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Validity
Not Before: Jul 27 01:25:15 2026 GMT
Not After : Aug 3 01:25:15 2026 GMT
Subject: CN=6a66b37b-01ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:2e:35:06:5b:b4:a0:ed:93:55:27:40:e7:
3c:e0:59:a6:63:d6:b0:25:aa:ab:1b:a6:08:c4:33:
26:e2:6f:49:90:68:f7:ca:77:1a:9c:54:72:50:11:
b0:f8:a2:b3:81:d1:4f:6a:d3:fa:8e:01:de:9c:7b:
53:35:c6:de:dc:5d:fc:7d:76:09:d0:8b:d5:48:c3:
29:5d:54:ee:3e:a1:c7:4b:1c:78:cf:5c:7a:23:04:
13:82:1a:76:36:65:bc:d7:bc:ce:e5:25:47:f6:c0:
fa:df:21:c4:b8:c2:53:c7:3b:1e:d4:ab:31:dd:25:
ad:aa:4f:4a:dd:78:44:55:3f:38:f6:04:1b:96:b8:
60:61:e6:eb:ff:ba:8f:47:79:8d:e2:14:5f:93:14:
42:68:8e:af:a3:94:bd:63:15:81:5a:3f:17:7b:dd:
55:da:81:8a:88:0d:f7:89:37:f7:e4:4c:3c:43:e4:
2c:5a:e0:7a:05:b0:c5:8c:fe:dd:da:56:0c:f6:35:
9c:f7:8b:76:31:53:9d:9a:d7:05:b5:3d:44:1e:83:
30:76:4f:5e:9c:f1:3d:85:2f:67:97:b2:d7:ec:7d:
2a:a5:36:1d:e3:1f:15:ca:eb:17:16:b8:a2:9b:a2:
78:bf:2b:19:64:ca:77:07:56:43:49:63:8e:d6:9a:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:A7:04:06:1C:DC:8E:5E:DE:D5:88:D0:B3:F8:74:69:AC:2A:51
X509v3 Authority Key Identifier:
keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ef:16:ad:6c:c3:b1:d1:ef:a6:3a:93:ec:b9:79:45:0d:cb:
4d:e4:3d:02:36:6d:90:da:52:8c:41:bc:58:8d:49:9d:37:30:
a1:01:0c:13:58:9b:89:01:b1:95:0f:cc:ac:37:47:e4:8e:d4:
4e:d8:47:eb:bc:9b:26:4b:9f:38:e1:2b:91:15:30:84:2f:a8:
b1:7b:5e:c5:c3:90:19:09:24:69:4a:8c:ef:ea:7d:5a:d2:16:
60:d4:95:c4:67:ac:8d:ca:61:c1:57:2e:eb:e7:3a:33:42:88:
88:21:2e:aa:cc:40:a9:99:47:01:c2:47:74:ed:60:60:3c:33:
04:69:e8:93:8d:5a:11:17:ce:16:b1:bf:06:7d:82:7a:c6:6f:
dc:30:cf:97:23:e7:0c:ad:c8:71:94:10:25:0d:fa:1f:f7:af:
3c:4f:bc:e1:98:6d:ab:38:28:bf:a3:d1:82:16:ee:7d:15:89:
23:fd:48:36:2d:29:d2:c2:65:d8:59:32:57:f6:bb:b1:49:9c:
30:1d:f0:57:64:3f:11:01:40:56:77:ca:0c:1a:1a:65:94:ce:
33:46:2e:4e:77:87:d9:28:85:41:05:77:6a:0e:23:f3:69:99:
3a:9e:71:ca:ff:a2:d9:29:9c:0a:fe:2c:d1:3c:bb:db:6d:86:
4b:75:c1:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx
NEVCREM5OTAwHhcNMjYwNzI3MDEyNTE1WhcNMjYwODAzMDEyNTE1WjAYMRYwFAYD
VQQDEw02YTY2YjM3Yi0wMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuIAuNQZbtKDtk1UnQOc84FmmY9awJaqrG6YIxDMm4m9JkGj3yncanFRyUBGw
+KKzgdFPatP6jgHenHtTNcbe3F38fXYJ0IvVSMMpXVTuPqHHSxx4z1x6IwQTghp2
NmW817zO5SVH9sD63yHEuMJTxzse1Ksx3SWtqk9K3XhEVT849gQblrhgYebr/7qP
R3mN4hRfkxRCaI6vo5S9YxWBWj8Xe91V2oGKiA33iTf35Ew8Q+QsWuB6BbDFjP7d
2lYM9jWc94t2MVOdmtcFtT1EHoMwdk9enPE9hS9nl7LX7H0qpTYd4x8VyusXFrii
m6J4vysZZMp3B1ZDSWOO1prSvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLHpwQG
HNyOXt7ViNCz+HRprCpRMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx
REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp
ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqO8WrWzDsdHvpjqT7Ll5RQ3LTeQ9AjZtkNpSjEG8WI1JnTcwoQEME1ibiQGx
lQ/MrDdH5I7UTthH67ybJkufOOErkRUwhC+osXtexcOQGQkkaUqM7+p9WtIWYNSV
xGesjcphwVcu6+c6M0KIiCEuqsxAqZlHAcJHdO1gYDwzBGnok41aERfOFrG/Bn2C
esZv3DDPlyPnDK3IcZQQJQ36H/evPE+84Zhtqzgov6PRghbufRWJI/1INi0p0sJl
2FkyV/a7sUmcMB3wV2Q/EQFAVnfKDBoaZZTOM0YuTneH2SiFQQV3ag4j82mZOp5x
yv+i2SmcCv4s0Ty7222GS3XBPg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:03 2026 by rpki-client