
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json)
Hash identifier: h7Abbg1y5/TZNj4ZTa0B8RaTn7z7gNLpq1ZK2huqGiI=
Subject key identifier: F2:EA:F4:3A:FB:84:52:99:71:65:C2:76:0F:B1:D4:FB:78:A8:DF:D8
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
Manifest number: 01DF
Signing time: Wed 23 Sep 2026 03:35:19 +0000
Manifest this update: Wed 23 Sep 2026 03:35:18 +0000
Manifest next update: Wed 30 Sep 2026 03:35:18 +0000
Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: m8FxxCL6ll005bxBIeWj88neKuKGiP0ChkhrFMat2M0=)
2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: ASSeDHssqVl8cZ4Esb8BMEdnFofDHR30D5GNUNH0EGI=)
3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: 5ZhWi40cwTm+16cr2zLqWoivb7ML/fDRAm1Hc0nhbKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Validity
Not Before: Sep 23 03:35:18 2026 GMT
Not After : Sep 30 03:35:18 2026 GMT
Subject: CN=6ab348f7-7531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:b2:25:08:ad:34:98:35:08:93:cc:a4:38:
e9:23:10:4f:57:c3:05:47:63:31:48:7d:9d:34:f6:
5e:c8:f2:16:c3:27:7c:c9:d8:5a:27:de:f6:ee:41:
58:6b:68:82:e0:5e:12:36:f1:b2:50:7c:46:21:8b:
d5:8f:54:d4:88:51:31:78:58:42:79:05:4a:05:c8:
ef:a2:29:9b:06:2a:68:b8:38:5d:74:93:60:a6:62:
bd:1e:e2:dd:29:1a:2a:0f:9e:6f:88:cd:1a:e7:d0:
df:e0:df:6e:7a:1f:5d:85:fb:61:e3:6d:94:58:4c:
5a:7e:ec:42:7e:79:e1:05:cb:cf:90:80:22:54:d8:
79:ef:76:13:21:df:81:e4:01:d6:53:16:72:e4:f9:
8a:b5:92:b9:9c:2b:a1:30:d2:c2:cc:39:9b:4d:06:
20:6e:6f:4b:dd:58:c0:65:15:94:18:cc:de:ef:9b:
f1:da:54:a7:e8:49:88:ba:a0:e3:c9:82:d2:96:33:
9f:55:92:1d:1c:42:bd:c9:a1:9c:7c:f8:17:32:50:
bc:a8:90:56:43:b5:07:29:20:70:9a:44:a9:1b:f7:
4b:c2:d3:89:87:7c:33:d4:8a:d1:1e:41:41:82:00:
6f:a6:ef:13:09:c7:ac:39:d0:a5:4f:8b:b4:fb:13:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:F4:3A:FB:84:52:99:71:65:C2:76:0F:B1:D4:FB:78:A8:DF:D8
X509v3 Authority Key Identifier:
keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8e:52:ab:d4:cd:bd:2a:0b:48:59:45:45:4c:51:fc:f3:a9:
52:92:06:94:96:fa:03:b5:6c:4e:d2:22:26:91:c3:7f:51:6f:
32:da:7a:71:cb:29:54:b4:84:f0:cb:93:39:f1:08:9b:2b:9b:
5e:74:90:76:e0:13:d4:fe:e7:e5:fb:b8:48:26:3f:bb:a5:26:
cd:2e:59:45:ac:fc:1c:f7:c6:ab:88:4d:cc:cd:c3:7a:86:f7:
eb:0a:b1:c4:33:3e:4d:52:93:54:44:66:da:46:97:8e:12:c7:
28:d1:42:04:8a:38:a0:fa:4d:18:e8:be:ea:4b:a2:bf:52:33:
af:17:11:6a:5c:29:58:6b:5c:4f:89:fe:41:32:78:e0:ed:38:
6d:37:23:91:61:98:a9:c6:46:8f:9b:74:6f:9a:97:fb:3c:6e:
24:4e:58:b6:0c:c0:88:5e:88:d1:de:b1:99:82:8f:e2:f0:79:
49:58:11:2e:68:2f:71:17:b0:2c:19:dd:94:bb:73:7e:61:c8:
5a:ba:e7:0b:15:fc:f5:e4:93:85:de:ad:a5:22:c0:22:0b:bf:
c3:71:21:c0:79:67:53:a1:de:9d:68:7a:aa:0c:47:bf:26:51:
b0:c8:46:a4:d5:36:88:f7:74:75:6a:6a:41:b1:11:c4:4f:9e:
44:96:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:29:51 2026 by rpki-client