
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json)
Hash identifier: rCUFQZEM+GPaf75433U410WeDSclU0Gsyc1frqyk5dI=
Subject key identifier: B9:90:C0:07:82:0D:FB:ED:92:EC:1C:40:76:C4:33:A9:6F:82:80:10
Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Certificate serial: 0D11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
Manifest number: 1630
Signing time: Tue 28 Jul 2026 18:26:59 +0000
Manifest this update: Tue 28 Jul 2026 18:26:59 +0000
Manifest next update: Tue 04 Aug 2026 18:26:59 +0000
Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: scIurqKVyHxTQ4M+FicdOAMhp2jjK8HIXntQm1xBIAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Validity
Not Before: Jul 28 18:26:59 2026 GMT
Not After : Aug 4 18:26:59 2026 GMT
Subject: CN=6a68f473-a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:86:45:f6:28:88:95:4f:a7:d2:f7:30:4a:
74:07:43:a0:aa:df:9b:28:74:1b:9a:75:a4:a9:b8:
1e:2f:2f:81:a1:a2:49:dc:bd:b7:c9:c7:c9:b2:28:
6d:8a:b3:df:37:4c:8b:26:e9:ed:77:04:8b:cd:54:
d8:c9:80:b9:37:42:14:ea:cb:58:4a:b2:e8:bd:6b:
30:1c:fb:97:a2:b2:93:1f:41:15:85:b5:8f:0e:07:
90:33:a7:63:ea:59:09:ba:2a:6c:18:86:ea:5f:7a:
8f:91:c4:b0:85:6e:77:36:ab:9a:fb:39:33:2c:29:
c4:ed:ab:0c:44:d4:bc:26:67:0f:85:f4:70:db:73:
08:36:55:8a:4b:7b:98:32:27:93:9d:75:b4:fc:0e:
fe:cc:b3:08:62:f3:7d:1d:1c:d2:7e:63:d3:aa:e3:
23:3b:af:bc:1d:d9:8f:21:64:e6:87:06:07:0b:9e:
ca:cd:e8:56:cd:8f:f2:36:28:2c:e5:84:48:af:bc:
75:c6:e9:61:96:30:b1:85:06:9b:7e:f7:07:3f:7e:
f9:50:73:cc:4d:87:76:0c:cc:70:92:1d:4b:1f:1c:
5f:39:92:5c:bb:93:1e:9d:ac:d4:c5:f2:30:ab:63:
c3:45:c4:62:51:f8:73:61:e6:d1:e0:a3:4c:b9:f5:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:C0:07:82:0D:FB:ED:92:EC:1C:40:76:C4:33:A9:6F:82:80:10
X509v3 Authority Key Identifier:
keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:f2:db:87:0d:69:0b:c1:8c:f0:84:3b:db:6c:22:a7:96:
ad:46:1b:25:87:17:0d:dc:b2:8b:5a:be:92:5a:35:89:93:ed:
83:30:e6:a2:8a:44:5d:00:4e:ff:aa:8c:2e:95:47:fb:cf:84:
77:2f:f0:83:b5:d2:86:ef:2a:b1:42:cc:d6:63:57:6d:8e:1f:
81:91:7c:9d:b4:42:90:b6:c3:8b:16:da:2a:df:41:22:d6:92:
40:7f:73:2f:e7:71:d7:08:9d:83:fe:f7:42:5d:b7:64:d6:a1:
3a:3e:de:23:f9:42:b0:93:d4:8c:c0:ba:97:e5:a9:65:91:f8:
66:fb:ea:4d:8b:8c:16:5b:42:49:31:34:ac:33:67:ea:d4:1c:
2d:91:df:a7:58:56:03:db:bb:57:e7:aa:c9:49:b4:c7:f9:d3:
e5:9c:78:9b:40:03:2f:0a:7b:c0:c4:9d:b3:27:77:32:d6:a8:
83:11:4e:d8:ca:6a:b6:42:4d:a2:f7:50:48:5e:b7:08:10:1d:
33:1a:b8:53:fd:b3:a6:0a:27:1c:6e:62:59:97:5a:26:7b:b7:
b7:d2:7d:64:2f:0d:d9:cd:03:b4:96:39:e3:08:06:5f:7e:5e:
b2:6b:bf:f0:d8:c0:cf:c6:22:7d:d8:4a:8c:30:9c:63:e4:45:
e2:57:68:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD
NDY1MEZDRDMwHhcNMjYwNzI4MTgyNjU5WhcNMjYwODA0MTgyNjU5WjAYMRYwFAYD
VQQDEw02YTY4ZjQ3My1hMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnieGRfYoiJVPp9L3MEp0B0Ogqt+bKHQbmnWkqbgeLy+BoaJJ3L23ycfJsiht
irPfN0yLJuntdwSLzVTYyYC5N0IU6stYSrLovWswHPuXorKTH0EVhbWPDgeQM6dj
6lkJuipsGIbqX3qPkcSwhW53Nqua+zkzLCnE7asMRNS8JmcPhfRw23MINlWKS3uY
MieTnXW0/A7+zLMIYvN9HRzSfmPTquMjO6+8HdmPIWTmhwYHC57KzehWzY/yNigs
5YRIr7x1xulhljCxhQabfvcHP375UHPMTYd2DMxwkh1LHxxfOZJcu5MenazUxfIw
q2PDRcRiUfhzYebR4KNMufWqNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmQwAeC
DfvtkuwcQHbEM6lvgoAQMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5
MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2
bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACzry24cNaQvBjPCEO9tsIqeWrUYbJYcXDdyyi1q+klo1iZPtgzDmoopEXQBO
/6qMLpVH+8+Edy/wg7XShu8qsULM1mNXbY4fgZF8nbRCkLbDixbaKt9BItaSQH9z
L+dx1widg/73Ql23ZNahOj7eI/lCsJPUjMC6l+WpZZH4ZvvqTYuMFltCSTE0rDNn
6tQcLZHfp1hWA9u7V+eqyUm0x/nT5Zx4m0ADLwp7wMSdsyd3MtaogxFO2MpqtkJN
ovdQSF63CBAdMxq4U/2zpgonHG5iWZdaJnu3t9J9ZC8N2c0DtJY54wgGX35esmu/
8NjAz8YifdhKjDCcY+RF4ldoVA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:30 2026 by rpki-client