
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
File: z8CATaxP_3oipAThDphkpxHeGck.mft (raw, json)
Hash identifier: B8iBPpBWnXg7Nxv6tjHPZp9cJUAPiCnfpccmnmMDIpo=
Subject key identifier: 9D:06:56:51:74:C7:E8:0F:DE:86:11:D5:C6:DD:01:A5:03:B4:83:91
Authority key identifier: CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9
Certificate issuer: /CN=A91A12C4/serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
Manifest number: 0164
Signing time: Mon 27 Jul 2026 06:49:41 +0000
Manifest this update: Mon 27 Jul 2026 06:49:41 +0000
Manifest next update: Mon 03 Aug 2026 06:49:41 +0000
Files and hashes: 1: z8CATaxP_3oipAThDphkpxHeGck.crl (hash: cMLvthv5ZVcumcFpmraqPHIxR3JYqgKIsWA9dw7HuZA=)
2: BCA395126C1811EFAFBE6B0FC4F9AE02.roa (hash: cWJj/maUSSWmIwVQv3v+/nXUc2cIEZ3WxI91PpLYj30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl
rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4, serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
Validity
Not Before: Jul 27 06:49:41 2026 GMT
Not After : Aug 3 06:49:41 2026 GMT
Subject: CN=6a66ff85-ea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:a3:8d:38:48:c4:c3:34:24:82:2f:04:68:
01:3a:ce:50:89:19:e5:3e:93:60:d5:12:72:72:d2:
11:d8:19:b0:2f:b2:73:41:02:55:0e:00:5d:25:bc:
73:5e:af:6c:34:40:6f:56:58:6e:8f:11:b3:c8:92:
b4:56:0e:5e:14:c8:e8:30:fe:2b:81:1f:96:71:f5:
d8:b3:1f:a9:4d:a1:e6:f4:23:3f:8c:0a:38:bc:d8:
66:77:15:20:0c:bf:81:b6:43:9a:5e:78:8e:12:17:
fb:21:4b:35:34:df:65:ed:06:eb:2b:bf:a3:ce:61:
3d:09:27:9e:cf:77:8d:7f:42:f1:a8:bf:f9:f9:c9:
39:a5:cc:4f:73:9e:b9:90:36:47:89:3b:cc:55:9f:
76:4b:c3:18:b9:b4:ed:20:8a:10:ae:cc:df:0e:5d:
d4:37:04:57:30:2c:ff:dd:20:48:be:67:32:4f:98:
e7:17:5a:3e:38:db:3b:f5:a5:4c:df:d1:37:12:1b:
3c:12:76:03:31:2f:f1:92:0f:9c:22:3f:98:0e:3f:
08:57:85:dd:fb:46:65:c7:69:b1:36:56:16:ce:13:
3e:ae:a1:a8:89:e4:34:43:59:e1:17:b8:20:65:13:
2c:ec:39:95:49:fa:c4:72:1f:89:97:22:11:60:8d:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:06:56:51:74:C7:E8:0F:DE:86:11:D5:C6:DD:01:A5:03:B4:83:91
X509v3 Authority Key Identifier:
keyid:CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5a:93:c1:d7:ce:74:a7:ea:d9:39:44:cb:6e:3e:3d:04:6d:
3e:0a:fa:45:38:1c:8b:52:c6:21:2a:98:48:65:c1:b4:ed:18:
24:3f:5e:27:6d:ee:30:12:e2:dd:69:05:6e:28:27:63:f3:af:
91:f7:5d:f6:73:59:14:0f:59:6d:35:93:a5:ec:30:fb:9a:bc:
6c:57:0c:6c:6f:d7:ba:97:ee:3d:ce:ad:1b:16:de:ea:ed:77:
1f:b5:7d:56:81:a2:36:94:3f:30:14:79:f4:24:73:31:5c:45:
52:4b:e2:08:81:5a:b2:44:6d:0a:24:d1:89:4f:6b:79:03:99:
d2:86:30:fc:70:9e:57:c0:26:a3:4e:ca:66:fa:60:69:0a:3a:
39:d8:8b:75:45:89:41:a2:3b:a8:f9:d4:b2:6d:dd:d0:1f:a1:
de:3d:4e:3d:f2:8c:c3:7f:b7:46:42:f2:eb:91:f9:94:66:00:
9e:1d:35:82:cf:cc:24:ec:59:4c:77:4f:da:7b:b3:7b:8c:25:
03:82:6c:c2:ae:a0:38:7c:17:3a:d8:09:91:ba:0b:70:ab:d2:
e7:b2:04:0d:c5:9e:5d:86:21:5c:08:e1:13:c2:a8:54:e6:cd:
47:7a:ee:79:3b:ce:87:02:c3:e2:32:79:d9:2b:88:da:14:6d:
3e:4f:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:43 2026 by rpki-client