
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
File: A8hWADTpF_SEBrQEaVALI_OVa10.mft (raw, json)
Hash identifier: MyzsHWe/+K+56rDN6SnNgVS6VhIbLDPZhOiwu3nTPzo=
Subject key identifier: C1:62:ED:6B:B1:86:2E:69:DE:4E:5C:12:2E:E5:B1:9A:99:29:FE:61
Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Certificate issuer: /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
Manifest number: 02E5
Signing time: Mon 21 Sep 2026 02:28:56 +0000
Manifest this update: Mon 21 Sep 2026 02:28:56 +0000
Manifest next update: Mon 28 Sep 2026 02:28:56 +0000
Files and hashes: 1: A8hWADTpF_SEBrQEaVALI_OVa10.crl (hash: Xj6w/YR3DXRLDEB2NSgU7LI+62VeoGaT3NyiGxTMR6o=)
2: CAD00992C9C611F09C9EF018C4F9AE02.roa (hash: 1WK0pKqWk649s/jspmynYFwLv9eNrG6RsSK4CLXFtLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Validity
Not Before: Sep 21 02:28:56 2026 GMT
Not After : Sep 28 02:28:56 2026 GMT
Subject: CN=6ab09668-a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:2a:f2:4a:1c:c4:3f:69:83:ec:9f:3c:c4:
5a:84:08:46:73:be:ee:4c:54:a0:19:40:d0:aa:aa:
5a:1e:fb:49:0e:15:d8:69:72:d0:d6:89:00:69:a1:
19:27:49:9b:fb:e1:c8:96:ac:fb:2b:2c:49:3d:5d:
d6:f8:d7:ec:25:df:ab:d5:3c:77:d8:ec:d0:d4:1b:
e0:60:ed:41:a1:54:25:84:2c:6f:9f:23:3a:d9:2b:
bf:c9:bc:fa:f3:33:eb:51:c1:d8:e5:e1:00:73:d9:
50:16:d9:71:96:9a:a1:93:fe:d3:b9:da:eb:39:21:
e1:a3:8c:92:2c:c6:c7:09:cf:6c:b2:53:df:74:43:
9f:56:9a:77:65:94:ab:fd:d8:4b:33:7c:78:26:4b:
35:e9:8a:e3:05:e8:91:ae:d2:ed:71:59:27:7e:4e:
75:35:49:6a:22:04:48:dd:6b:4e:cf:6b:19:b7:fa:
99:79:37:6f:fe:1d:8b:23:66:3b:bd:e1:2a:70:fe:
66:9b:c9:48:9c:4d:f9:d0:cd:c0:d3:ca:8d:2a:51:
f1:3b:fa:85:d9:1a:7b:fa:79:86:4e:b8:62:5b:d4:
da:a6:82:f0:0d:94:7e:59:d4:4f:a9:a6:2c:85:f8:
2b:4b:9f:68:23:91:78:b4:02:40:72:c9:50:7a:fd:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:ED:6B:B1:86:2E:69:DE:4E:5C:12:2E:E5:B1:9A:99:29:FE:61
X509v3 Authority Key Identifier:
keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:00:0e:a1:9d:de:73:5f:0a:e3:31:12:35:15:b6:68:3d:df:
3f:82:79:d3:a2:e4:ba:07:f1:f1:a6:70:5c:69:96:2e:95:6f:
05:77:1f:e4:62:36:a4:a9:d8:f9:7c:7c:d8:bc:46:6b:04:97:
4c:69:16:9f:2d:67:82:b8:2d:32:7f:bf:26:0e:a6:d4:b5:79:
7a:31:3f:16:3d:f0:08:14:ef:c1:f2:e5:a6:6b:fa:d6:60:57:
12:48:6f:b6:ae:33:8d:21:48:f6:a3:0f:9a:1b:70:52:6e:44:
f7:ac:fe:6c:3c:85:bd:69:98:7e:ac:da:7b:6a:07:de:5a:f1:
f0:8e:77:07:7c:8b:e8:a0:4e:0a:c5:dd:00:c4:52:f1:a0:05:
90:49:6f:df:99:0b:d0:ca:3d:2c:6e:36:1a:b0:a9:d4:b6:f3:
7e:f9:e2:61:31:5b:a6:11:e2:11:c5:9e:64:36:9a:d5:61:7c:
1a:2c:ff:44:f5:14:ad:fc:f9:31:34:64:3e:9e:46:85:94:87:
0f:3d:05:6b:55:a4:b8:1c:14:95:ac:2c:b3:ab:08:ad:3c:01:
91:f5:4c:ff:05:da:3a:c2:f1:60:aa:c0:9b:94:be:08:28:20:
28:51:30:4c:cf:5b:84:49:3b:cd:f7:f6:43:21:f6:f9:91:c3:
32:cc:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:59:55 2026 by rpki-client