
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json)
Hash identifier: wXNFo0I3cSDqB5qJiRqk98/F888JbQjteePzaVTBDlI=
Subject key identifier: 18:2C:ED:8C:91:3E:4D:24:B4:0E:A2:CD:BD:5E:5D:C0:8F:06:E9:B9
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
Manifest number: 0431
Signing time: Mon 21 Sep 2026 00:04:12 +0000
Manifest this update: Mon 21 Sep 2026 00:04:12 +0000
Manifest next update: Mon 28 Sep 2026 00:04:12 +0000
Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: 99+nQ2dqdb8I7VZHfkvSepIjzxtq8RWhBs2DmxcbDKU=)
2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: XV4+6RexVCN6qV3gQG680PT5iGhrAgYP0jd0N7lfisU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Validity
Not Before: Sep 21 00:04:12 2026 GMT
Not After : Sep 28 00:04:12 2026 GMT
Subject: CN=6ab0747c-8ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:be:ac:5e:8d:e8:d1:2e:38:60:e2:27:d8:
2b:0d:d6:43:35:11:e4:80:97:52:d4:81:34:85:6b:
ef:64:00:c3:e1:0a:6f:e7:6b:88:c1:59:d2:22:4c:
f1:5d:0a:6f:01:4b:ab:68:ff:5f:7e:e7:00:6c:cd:
8e:15:f9:df:d1:98:d8:8e:d7:ed:d7:e5:43:d2:2b:
70:04:a6:4b:bb:d2:73:4f:69:7f:8e:7d:53:05:e6:
f1:20:21:4f:a7:e7:e7:a2:a8:48:f2:9d:6d:c8:51:
a1:3c:e6:fd:59:b9:89:01:8e:cf:5e:38:7d:c4:a9:
fe:92:16:45:2b:c0:05:7f:d1:13:4f:dd:f0:06:a3:
a1:3b:2b:24:6b:21:c6:e4:31:6a:f4:78:60:d8:87:
a7:43:93:d3:ca:0e:06:0c:97:d3:5d:c5:da:bf:38:
97:cc:8d:0e:66:17:19:b4:12:a9:eb:85:fc:c0:ca:
e2:3d:af:9b:93:2d:5c:10:89:d6:5f:ea:c0:62:4b:
96:7d:c8:2d:32:ea:9d:65:c7:90:41:ca:32:b7:5e:
86:3d:d9:10:b3:e6:73:d8:79:70:da:89:1b:6e:9f:
1f:73:9f:52:e0:99:f2:16:b8:d6:ac:ba:a2:ca:47:
9f:79:98:e8:a9:da:c1:4a:10:bf:93:34:a1:87:f7:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:ED:8C:91:3E:4D:24:B4:0E:A2:CD:BD:5E:5D:C0:8F:06:E9:B9
X509v3 Authority Key Identifier:
keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:64:c8:dc:a8:ad:da:ba:cd:2f:a6:06:1e:47:32:f1:12:b4:
27:d1:7d:04:05:46:43:1f:df:da:68:44:9f:9d:d4:61:c7:27:
be:b6:c0:9d:9e:2d:ee:44:05:1c:9a:41:87:28:64:cb:2d:8f:
aa:e6:5a:dc:5e:11:0d:ef:b3:be:80:14:cd:95:c3:2c:03:1e:
2a:35:0c:d3:d6:2e:39:57:a0:a3:22:5f:87:6e:2e:f2:2f:dc:
55:33:b5:52:21:1a:9a:83:c7:df:41:f1:71:53:e6:54:69:44:
e2:2f:96:77:60:79:ba:5e:ba:96:19:9c:2d:69:c1:26:8a:00:
96:28:f9:d2:d3:4f:d1:8a:f4:b4:63:ba:8a:97:32:84:c0:18:
7d:8d:9c:dd:27:fe:e9:ae:23:85:a2:a7:5c:5e:53:2a:97:4a:
44:f8:88:f1:89:72:ba:8d:76:9a:38:f9:13:e7:99:df:9f:26:
9e:86:05:c4:ce:32:c2:95:a5:77:64:1e:f7:b8:0f:c9:5e:de:
7a:75:d1:32:6b:41:8a:1b:66:f0:96:2a:db:4b:ee:e5:b0:6b:
87:c9:f6:31:ab:e3:62:4b:b4:55:d9:30:0f:ef:98:9e:73:23:
52:a1:c2:89:c6:ec:df:a9:b7:d8:05:5f:1d:08:ac:37:62:66:
78:85:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:35:22 2026 by rpki-client