
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json)
Hash identifier: 9nzbeLhIWB9/6KBrefjY5Agll4HoMGknTX7ohz5n1IQ=
Subject key identifier: 62:91:92:6D:03:F6:BD:6E:AC:0E:8C:8C:8B:71:A3:AA:91:AC:7E:D9
Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Certificate serial: 0459
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
Manifest number: 0452
Signing time: Sat 19 Sep 2026 00:03:18 +0000
Manifest this update: Sat 19 Sep 2026 00:03:18 +0000
Manifest next update: Sat 26 Sep 2026 00:03:18 +0000
Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: XGGuz9jz6QHOjAgFZya2MNPy3UFJ6tKHVyCiU9yauEg=)
2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: E0te7z7859at34MRFLNavnFyL+a8lv5dig7hn7bo8Ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Validity
Not Before: Sep 19 00:03:18 2026 GMT
Not After : Sep 26 00:03:18 2026 GMT
Subject: CN=6aadd146-03cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:e0:7b:5d:84:65:65:1b:62:de:df:23:a8:
44:e4:e4:74:ab:43:9e:4b:87:ab:cb:18:c9:08:84:
89:7a:93:5d:4d:8b:40:a9:c8:0a:84:53:af:61:bf:
cb:23:43:e2:d0:d7:48:d3:67:79:26:27:36:75:bb:
ab:14:cf:2c:63:de:a1:08:d9:10:cb:1f:7a:51:a7:
02:cc:26:60:05:af:37:ef:f2:45:a7:89:43:bd:57:
25:15:bb:5d:65:bd:30:43:02:71:3b:d3:57:ee:c6:
62:43:00:fe:85:ba:de:33:71:fe:af:d9:2a:4d:9d:
71:ac:3d:bf:88:5d:20:0d:6f:16:bf:5c:86:fc:8a:
1c:db:3b:7e:72:98:0c:58:8a:33:ff:3d:6d:a6:7f:
d6:83:64:4c:a8:a8:8b:77:be:01:f3:2d:fd:a4:cc:
5a:b8:c3:23:25:3e:86:b0:d7:ae:8f:14:36:44:47:
88:f2:f5:ec:78:87:a6:d2:06:9f:11:1d:7e:61:0e:
04:a4:d8:82:bd:f1:61:7e:17:32:af:0a:a2:eb:d1:
fd:99:df:e5:0c:77:e3:a8:85:28:47:fc:45:7b:8b:
ad:58:10:46:97:03:ab:dd:5d:11:2e:35:fd:e8:79:
bd:38:14:47:8d:17:bd:ce:5b:7d:a5:35:2e:51:fb:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:91:92:6D:03:F6:BD:6E:AC:0E:8C:8C:8B:71:A3:AA:91:AC:7E:D9
X509v3 Authority Key Identifier:
keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:04:43:82:3d:60:65:a2:14:41:7c:f3:ad:cd:84:12:76:15:
42:07:71:d0:bd:33:d8:eb:4e:e6:74:f9:1e:a4:71:a9:0f:1c:
35:54:a5:17:19:5b:bb:3b:47:f3:61:4c:e1:14:7e:0f:d6:b5:
10:1b:dc:63:3e:a4:f1:25:33:da:73:cb:ce:3e:7e:49:6d:62:
aa:d6:b5:ed:73:a0:cd:92:39:c3:6d:e2:0e:a3:84:f9:96:ed:
2f:fe:1d:c9:99:6f:46:2b:7d:ef:26:f9:9f:e7:e9:da:74:89:
0d:ae:90:2a:5f:ea:00:41:00:90:0f:c3:80:5b:d4:0a:83:27:
f5:cd:ae:d3:87:2e:ae:78:51:74:e7:0d:51:96:10:c8:2d:01:
83:51:78:87:01:c2:91:91:e9:c0:e3:7e:3d:2b:71:38:0f:39:
a1:d3:5f:35:39:15:28:d6:eb:69:8e:f0:3a:65:33:a9:e5:e4:
4a:dd:de:72:b3:e0:b8:c8:fe:85:cc:80:21:6c:a5:53:ed:fd:
af:7a:eb:40:f2:f1:be:e3:4d:1f:a1:06:94:95:08:9e:ee:b1:
cf:5f:1b:af:6f:4c:ec:1e:cf:22:a1:d2:3e:7f:79:17:00:72:
5b:aa:6b:59:a9:d5:f1:4a:f1:8f:36:a3:e7:89:fc:ae:e9:f7:
11:e5:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:39:48 2026 by rpki-client