
$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json)
Hash identifier: HTc/kW1oyfy3xyAvpdv815klUJfW3c3xCRLJDRz0+os=
Subject key identifier: 6A:FB:00:80:63:1B:21:E1:3D:14:30:2F:D2:5D:BA:4F:36:74:E7:B5
Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Certificate serial: 0782
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
Manifest number: 0779
Signing time: Sun 26 Jul 2026 22:20:21 +0000
Manifest this update: Sun 26 Jul 2026 22:20:21 +0000
Manifest next update: Sun 02 Aug 2026 22:20:21 +0000
Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: V/UWQD6778HJCHco6Oj46zivbDyxmJ2wjFv8FmM+pAQ=)
2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: te1kdq92VgFygTtdop1iQjv7JxZOQ/Lth61MfMSAoiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Validity
Not Before: Jul 26 22:20:21 2026 GMT
Not After : Aug 2 22:20:21 2026 GMT
Subject: CN=6a668825-de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:93:7a:2d:48:40:04:e8:ae:57:21:45:40:
30:70:a1:6a:64:56:b9:17:d8:12:02:41:ba:0a:41:
f8:de:07:5d:91:10:a8:de:36:bf:d0:ff:b5:6f:17:
06:a9:9d:04:ce:b1:52:f3:8f:32:db:90:91:d4:e6:
26:6e:84:4e:95:14:a6:1a:29:73:25:f7:6b:77:f4:
7b:5c:5c:06:c5:fb:ff:0b:fb:a8:94:0d:61:71:22:
f5:a7:09:ea:b6:54:61:07:a8:fc:f0:4a:b4:c0:41:
7c:88:7c:71:d0:78:1c:7b:5e:46:f2:33:81:c9:62:
d3:f5:9a:0a:4f:3d:36:3e:2b:48:28:43:71:fd:70:
e7:e5:4f:fd:f8:34:37:d0:ac:0b:49:4e:fd:04:db:
da:eb:22:b7:78:bd:41:54:05:bf:bb:4f:3f:21:8d:
15:51:41:62:a6:6f:df:00:ba:ee:56:ef:de:81:e0:
a0:3d:0c:70:bc:dd:6f:66:48:17:bf:5c:1b:69:7a:
db:0a:1d:1a:e4:27:e0:09:e4:7f:46:85:ea:18:54:
ce:4f:08:28:36:a5:8b:56:ad:89:24:74:bb:0f:7c:
7f:f8:ab:c1:c4:6d:26:ea:30:63:a8:96:2a:2a:dc:
63:39:f4:27:aa:c3:73:92:fa:29:55:97:95:f4:a4:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:00:80:63:1B:21:E1:3D:14:30:2F:D2:5D:BA:4F:36:74:E7:B5
X509v3 Authority Key Identifier:
keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5e:e2:a1:38:7d:d2:89:6d:66:65:8c:5a:37:09:9a:82:55:
c1:2a:c9:18:d0:e2:64:bf:65:23:4e:a6:fd:a4:e9:31:bc:73:
1f:75:2b:f0:85:8f:9f:92:2d:32:1d:1b:a4:db:03:3d:c6:77:
9f:4f:09:40:8e:ea:95:f4:2a:31:21:81:f8:cd:4d:94:9a:9e:
7d:fb:16:34:be:30:52:e1:d4:a4:ee:8c:86:b4:41:72:2c:3d:
6d:2d:ae:22:b6:72:0c:17:3c:88:40:d9:58:36:14:be:23:b3:
3a:5b:28:a7:71:2b:ea:fc:d1:2e:0c:89:f3:fb:76:25:de:39:
1e:a9:d2:83:34:f5:db:1b:00:36:04:f6:92:47:08:73:b0:2b:
3f:71:ca:7b:15:66:65:64:cf:dc:c2:2d:48:2c:f6:b0:b7:ca:
c8:0f:fd:b9:9c:74:e7:3d:87:d6:70:6b:f4:c8:52:6e:24:2d:
8b:1a:8b:46:5f:d7:33:78:80:f8:22:57:70:6e:de:f2:86:7a:
78:93:d2:15:75:7f:37:8e:f1:f0:75:4b:ec:5e:74:d4:b1:d3:
c1:5b:3b:d5:62:c4:e0:95:35:db:78:d8:ca:a8:92:92:52:1a:
5f:ed:1b:3f:61:b6:6d:ba:0b:55:c1:36:51:64:e5:7c:53:a7:
e2:5b:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:41 2026 by rpki-client