
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json)
Hash identifier: lGunvM4ZByYIK5KNh95CE2Oy7A7vEdCoHY8VnbjeKNI=
Subject key identifier: 20:23:17:B5:04:DF:5A:14:C6:9F:97:28:96:33:33:6D:3C:F5:A6:09
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial: 077E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
Manifest number: 0773
Signing time: Fri 12 Jun 2026 21:40:34 +0000
Manifest this update: Fri 12 Jun 2026 21:40:33 +0000
Manifest next update: Fri 19 Jun 2026 21:40:33 +0000
Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: 7fXvGHi/gOIUlwrNXJ2bC/vZ0jFcc4i9QZGKKLNh6CY=)
2: 9B6CA5663CB711F1A53ED041B4833773.roa (hash: WVuzX5CFpIrusgLbPfWDtQsMG2ekbWED5/WtRt7osX8=)
3: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: EK917a0brIXozyOjUJuFME0or9oqwhvu136xFaoo3CE=)
4: FFD30A3A3CB811F1BBDAFF7AB4833773.roa (hash: SjUSWIZP5JehPI4S4JhlMJHXgjL5bWNza1x377Y4CkQ=)
5: 00619CFA3CB911F1BBDAFF7AB4833773.roa (hash: DsdENVieE2RhNlpGEqRk9at7+HY0bRNG3YOtTEhYRjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Validity
Not Before: Jun 12 21:40:33 2026 GMT
Not After : Jun 19 21:40:33 2026 GMT
Subject: CN=6a2c7cd2-b968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:dd:88:a4:29:f0:33:ac:68:06:52:16:96:
a1:50:07:15:ec:03:bc:66:96:dc:c2:ff:f4:e9:74:
86:11:c7:7c:07:09:92:71:a0:fa:7a:48:cd:de:05:
06:b8:11:67:04:df:4b:bf:85:f4:76:36:1e:4b:3e:
a7:a5:c3:0e:92:e4:c8:c5:a4:49:53:e3:a0:44:92:
93:4f:99:54:b7:28:d8:46:e6:e8:2f:96:69:93:4e:
21:ff:7a:80:6d:32:a3:6c:d6:c5:f9:69:37:6e:a1:
c8:8e:21:c0:d7:67:5a:92:a4:56:89:ed:5c:ed:02:
ff:7c:f7:a1:0b:dc:62:d0:ba:ac:87:ba:ff:8c:49:
d6:ca:16:b7:49:d2:15:8a:42:a9:35:be:08:57:04:
93:90:e6:3f:92:08:96:80:2e:4a:c3:b8:ac:78:ee:
e0:a9:dc:45:56:e5:db:69:08:b9:a4:36:12:4a:5c:
bf:c0:d6:ff:17:29:00:59:54:0a:be:5d:55:d3:87:
7a:ce:58:8f:c2:cd:23:df:82:0b:05:6f:25:9a:ef:
6d:7d:4f:b0:18:1e:20:cb:bc:25:f9:cf:9c:df:cb:
d3:62:6a:32:b2:6f:66:e3:bc:55:39:45:c9:63:6f:
48:38:55:2e:89:4b:5e:c9:e5:8f:f7:6e:f6:fd:56:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:17:B5:04:DF:5A:14:C6:9F:97:28:96:33:33:6D:3C:F5:A6:09
X509v3 Authority Key Identifier:
keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:b3:e2:df:1e:8f:d7:28:f2:9c:26:bb:53:49:db:79:bd:47:
2c:14:34:84:6f:6f:88:ce:db:4c:57:a9:60:fc:c0:5c:92:17:
97:82:b6:07:45:d6:92:3c:3b:b6:fb:63:db:a6:0b:88:f7:ed:
d5:bf:68:93:da:e3:60:ec:9c:2e:e4:ba:c6:c0:6d:29:0d:98:
c7:f4:c6:bc:df:1f:c2:b1:f0:8e:8e:e4:7e:aa:5c:44:78:7a:
ec:5d:ce:33:e6:1c:b3:71:ae:54:7d:ec:0b:7b:69:c3:48:7a:
7b:65:f4:9c:a0:f6:55:0d:8a:c6:d6:41:a2:01:17:2a:72:62:
f1:18:17:ba:92:dd:d2:8d:0f:7f:93:f3:6e:3d:68:80:68:c2:
0f:15:2d:c8:d3:ba:5d:80:5d:a3:b8:48:e3:ea:70:b2:02:73:
a1:ef:c8:fd:c8:d6:6a:17:c9:52:37:b2:fc:a0:35:96:a0:1f:
d5:2e:64:d5:b0:a7:fd:6b:5f:42:c0:70:11:0c:8b:87:61:d7:
77:f7:3f:b7:72:ce:0a:8f:fa:fa:1c:ea:14:48:bc:57:2c:97:
fa:dc:e3:c7:7a:3d:d9:87:70:05:ec:a1:a9:61:ed:d1:13:3f:
e2:68:60:a6:7f:30:2e:97:b1:81:76:8c:3c:26:3a:9f:88:1b:
74:3c:36:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5
NkRCMDkxNTMwHhcNMjYwNjEyMjE0MDMzWhcNMjYwNjE5MjE0MDMzWjAYMRYwFAYD
VQQDEw02YTJjN2NkMi1iOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNzdiKQp8DOsaAZSFpahUAcV7AO8Zpbcwv/06XSGEcd8BwmScaD6ekjN3gUG
uBFnBN9Lv4X0djYeSz6npcMOkuTIxaRJU+OgRJKTT5lUtyjYRuboL5Zpk04h/3qA
bTKjbNbF+Wk3bqHIjiHA12dakqRWie1c7QL/fPehC9xi0Lqsh7r/jEnWyha3SdIV
ikKpNb4IVwSTkOY/kgiWgC5Kw7iseO7gqdxFVuXbaQi5pDYSSly/wNb/FykAWVQK
vl1V04d6zliPws0j34ILBW8lmu9tfU+wGB4gy7wl+c+c38vTYmoysm9m47xVOUXJ
Y29IOFUuiUteyeWP9272/VYXvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAjF7UE
31oUxp+XKJYzM2089aYJMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1
MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1
Wm9JTzBfemlpcWVXMndrVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVrPi3x6P1yjynCa7U0nbeb1HLBQ0hG9viM7bTFepYPzAXJIXl4K2B0XWkjw7
tvtj26YLiPft1b9ok9rjYOycLuS6xsBtKQ2Yx/TGvN8fwrHwjo7kfqpcRHh67F3O
M+Ycs3GuVH3sC3tpw0h6e2X0nKD2VQ2KxtZBogEXKnJi8RgXupLd0o0Pf5Pzbj1o
gGjCDxUtyNO6XYBdo7hI4+pwsgJzoe/I/cjWahfJUjey/KA1lqAf1S5k1bCn/Wtf
QsBwEQyLh2HXd/c/t3LOCo/6+hzqFEi8VyyX+tzjx3o92YdwBeyhqWHt0RM/4mhg
pn8wLpexgXaMPCY6n4gbdDw2Pg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:06 2026 by rpki-client