
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier: PAE0ncntamMd4veMKuPV8Ok+CtPEfF+RISytKzQegK4=
Subject key identifier: 92:D1:DD:9F:0E:52:05:B0:8F:A2:06:9C:9F:E4:14:3B:64:40:A2:D0
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number: DE
Signing time: Mon 27 Jul 2026 08:40:37 +0000
Manifest this update: Mon 27 Jul 2026 08:40:37 +0000
Manifest next update: Mon 03 Aug 2026 08:40:37 +0000
Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: h6OCtBtFM8tK+oFnvpcRqTMCmwdGRGtGPMXavaeRPdQ=)
2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: THMYN1koeOfwnbK8AGxlReff3pZqD6xwEXO++zbayH8=)
3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: EWbmDsTGqQLpUfNOlcyjqkg7ey8/2rO6qBfbLaQNH74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Validity
Not Before: Jul 27 08:40:37 2026 GMT
Not After : Aug 3 08:40:37 2026 GMT
Subject: CN=6a671985-b4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:44:dc:ad:1c:5f:3a:92:53:b0:be:18:30:
94:ef:ee:1a:f5:be:17:7d:c8:39:89:fc:58:42:b4:
45:32:3b:45:33:3a:f5:db:05:ce:dc:50:a5:f7:92:
bb:57:6a:f4:b2:d2:63:76:58:d0:f9:ab:a7:69:e6:
65:3c:9e:03:8b:20:d6:5a:ff:8f:9c:66:78:92:3e:
41:9f:2a:9c:6c:9d:0c:d0:74:ec:a2:c6:83:4e:75:
86:f9:e0:1f:ff:6e:0c:25:cf:b5:40:9f:0d:60:49:
2e:34:1c:74:16:b2:1d:bb:d3:1c:92:ab:89:f7:05:
ac:dd:68:d6:cd:08:fa:a7:01:23:a7:7d:8b:70:31:
97:f0:72:f2:6d:1d:a7:90:ab:bf:63:b7:1f:b2:92:
24:30:c8:eb:05:3f:bf:e0:d4:00:3e:f6:51:f3:c9:
78:0a:82:f5:d3:56:e9:a3:94:96:da:2a:c6:50:d2:
0b:8c:07:26:ce:fe:89:64:37:67:2a:1d:a7:83:5f:
05:a6:13:8b:e9:94:bf:6a:b0:c8:8c:56:f3:58:1f:
c7:07:68:fa:04:90:38:59:2b:30:1d:a8:26:f3:57:
cf:17:ce:84:1f:dd:69:da:e0:97:e6:e1:53:6f:7a:
9f:31:55:b7:48:61:41:bc:70:89:0c:b0:11:4a:a4:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:DD:9F:0E:52:05:B0:8F:A2:06:9C:9F:E4:14:3B:64:40:A2:D0
X509v3 Authority Key Identifier:
keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d7:2f:a1:5f:34:63:09:55:d7:27:27:25:16:cf:08:af:87:
38:c0:13:7b:79:68:52:98:66:a4:b9:82:d8:78:d6:b9:76:e5:
ec:7d:7e:d3:c5:47:aa:7d:13:db:33:3d:92:1b:f8:99:69:d1:
87:8e:40:61:50:48:a3:e9:61:fe:23:fc:90:dc:13:17:99:b7:
f2:6a:95:ae:44:8e:50:dc:9b:5b:a5:4d:fb:6d:90:29:90:de:
8c:14:89:7e:ea:fa:83:1d:25:8f:00:af:9b:40:3b:ab:c2:16:
95:26:86:fb:23:d8:6d:af:74:ad:b9:2b:e3:fd:4d:f2:74:ab:
bc:34:bb:ee:f9:a6:d4:ad:c0:d8:5b:79:15:c4:d2:de:d8:3a:
b6:d5:38:04:ac:d6:99:36:29:6a:9a:43:97:04:10:a0:3b:e6:
92:c4:1a:7d:7b:06:23:1b:e3:8d:91:66:7d:93:dc:74:13:f1:
1f:82:79:2a:8c:89:92:c5:c9:d5:43:0b:90:96:38:88:a2:8d:
e1:3b:cb:75:4c:1d:ec:b6:d3:d7:8d:a5:09:b5:aa:46:5f:51:
52:9e:11:5f:a5:08:a2:b8:04:09:01:d1:27:33:8c:66:b7:97:
47:76:97:5a:87:fe:36:14:c9:c2:a3:67:96:9d:d5:f8:74:c7:
e1:f8:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:20:59 2026 by rpki-client