
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json)
Hash identifier: +YwE5n2BeodnPPHBgSTHYagRaRmOqn9LcK8wZ9wu23o=
Subject key identifier: BC:59:69:C6:76:43:2C:B5:F2:17:76:9B:30:BA:AF:AB:74:34:27:54
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial: 0313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
Manifest number: 02FC
Signing time: Tue 13 Oct 2026 01:21:28 +0000
Manifest this update: Tue 13 Oct 2026 01:21:28 +0000
Manifest next update: Tue 20 Oct 2026 01:21:28 +0000
Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: cxQv1JFDqDXHVXcIeVob0nSuPsJLGpuRa0CcjejIQdY=)
2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: GzxKXa3buEq11SyhBYB0QOC/CAu38GX6nYU4rsrNTsE=)
3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: CYGWWz/nixHL5zlXfnZLMHoHJguF5UwXiTUzH6J+3lQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 01:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Validity
Not Before: Oct 13 01:21:28 2026 GMT
Not After : Oct 20 01:21:28 2026 GMT
Subject: CN=6acd8798-285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:95:20:54:72:ec:96:ac:1a:bb:e7:74:e2:
48:59:06:86:81:94:0f:a9:f3:fd:64:6e:0f:d4:f8:
e2:f6:1d:73:38:5f:7c:a5:3c:0d:5c:88:c8:03:f3:
ff:26:be:81:de:4d:a2:eb:08:79:5d:58:10:e4:3d:
6c:c2:6b:f1:fb:e5:53:98:01:49:e6:54:91:9c:a4:
cc:45:bd:68:e5:1b:f1:f3:f8:d2:cc:0d:39:bc:8d:
42:bf:df:0f:0b:b3:50:28:4c:5f:2d:fb:77:41:b4:
b6:d6:2b:01:6a:dc:c6:c1:4b:2e:4d:67:40:6c:c4:
99:72:b5:00:8c:a5:d4:97:fb:6a:09:10:0f:0e:7f:
d7:68:4e:48:40:10:66:40:9d:be:1e:67:c4:bb:35:
51:b5:94:de:0e:5b:89:63:f5:d0:87:c4:82:8b:ab:
28:01:05:1f:36:69:c9:86:25:43:03:4e:f3:fd:8d:
35:cc:2e:f8:34:2a:2f:e5:70:6d:48:a2:18:1f:cf:
c0:f4:8f:25:b2:46:41:12:2e:9e:f6:76:9d:73:7e:
f5:44:8a:d7:9b:05:a6:92:1b:2d:34:d0:5e:00:46:
ca:0c:8f:d7:4b:00:54:dc:47:d5:5f:a1:51:94:d1:
a8:e6:d9:d8:4f:bc:5a:21:8e:ff:7f:a9:48:65:b6:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:69:C6:76:43:2C:B5:F2:17:76:9B:30:BA:AF:AB:74:34:27:54
X509v3 Authority Key Identifier:
keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:45:8a:1b:a1:d6:5d:89:c1:cd:5c:5c:d0:2a:c0:c0:12:33:
11:74:48:e1:6f:c7:c2:eb:2f:9c:e0:64:f1:02:db:d2:5f:34:
87:8f:d6:05:a8:1f:f2:4d:54:ac:62:3d:b2:15:7c:8c:1f:f5:
73:d7:c6:fe:59:30:46:76:53:10:8e:31:5f:ff:49:f7:b3:ca:
cb:be:1c:06:a4:39:31:d0:0f:e5:70:ed:c0:9d:8a:06:72:99:
1c:f7:8c:27:ce:1b:cf:8c:77:50:10:26:3e:e2:3f:bb:be:62:
2b:4a:0a:60:1e:03:ff:d1:e7:dd:28:a9:32:d4:a3:83:ae:ea:
99:bc:7b:4d:63:04:f4:dd:69:a3:41:1b:2f:2b:f0:b4:a8:a3:
e5:26:1f:05:70:33:39:06:ef:66:63:d9:bb:d1:54:b0:58:e3:
e5:1a:94:90:f2:85:04:62:54:c3:b8:fe:43:5d:57:40:9b:42:
8c:1c:c3:53:93:2f:22:00:c0:3d:89:bd:bb:df:8a:9c:25:d4:
0b:6d:dc:35:f5:d2:a7:06:52:cf:a8:26:e5:0b:c2:8c:4a:9c:
8e:52:2d:3b:14:5d:ee:b6:f8:d7:64:6a:87:03:df:ef:e2:64:
81:38:d9:70:f5:d2:85:7f:f9:ad:80:67:24:fe:3c:1f:95:32:
b0:4a:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:42:41 2026 by rpki-client