
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
File: T8X9jSdo5Al3QhkY-xOcM12_g4A.mft (raw, json)
Hash identifier: n9vAQinT5nSLBksbAVDRkU5ZocM6rerASRYtJhmLhGk=
Subject key identifier: AA:3A:B6:6C:B8:78:E0:9E:E1:A0:A3:3A:7E:BC:29:1F:9B:AF:DA:80
Authority key identifier: 4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
Certificate issuer: /CN=A91B539C/serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
Manifest number: 16
Signing time: Mon 27 Jul 2026 11:24:12 +0000
Manifest this update: Mon 27 Jul 2026 11:24:12 +0000
Manifest next update: Mon 03 Aug 2026 11:24:12 +0000
Files and hashes: 1: T8X9jSdo5Al3QhkY-xOcM12_g4A.crl (hash: dLOn/Sq8zW6bH5QIhIt2YrFnDU8EZZK2ZZNIA56pIwc=)
2: DB14F0D8688611F19B84FAD56C47A888.roa (hash: 74bk58//l9arlYq1z7u+T+hfveHOzEv+5Ygge/tEw9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B539C, serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Validity
Not Before: Jul 27 11:24:12 2026 GMT
Not After : Aug 3 11:24:12 2026 GMT
Subject: CN=6a673fdc-270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:b3:82:11:78:db:ab:5f:48:88:0a:b1:a4:
80:f8:34:3c:57:01:96:48:d4:c7:a3:4f:8c:55:3f:
8a:95:0e:1e:80:f3:7f:c4:04:3d:f6:1b:3b:db:bb:
4b:2a:e8:cc:39:0e:9a:14:ab:fe:25:44:6f:8c:d1:
66:a5:3a:30:7b:48:b6:be:48:d3:be:cc:13:6d:6f:
58:6d:c2:e1:2b:c1:ab:fd:84:16:18:ba:e0:d4:de:
47:b6:ec:7b:ae:54:52:4f:e2:13:27:8d:06:57:5f:
e5:88:26:30:11:79:00:ca:3b:0a:32:ba:ac:92:91:
7d:c2:25:3b:bb:d0:4f:17:5b:cb:d7:1a:7d:59:12:
73:9c:dd:c9:d8:ac:76:23:78:0b:7d:1b:0a:35:91:
8a:98:59:c9:1c:eb:e0:5d:70:0f:3a:9a:61:a2:97:
fb:e8:7b:67:ae:9f:48:cf:7a:22:41:da:56:8d:34:
45:cb:49:93:7b:9e:36:f7:c4:bc:e9:9c:3c:4b:d4:
c0:ea:9b:34:2d:e1:ca:db:f6:90:e8:19:06:91:be:
9c:3c:20:0a:d8:27:67:5e:b2:e2:55:1d:39:d4:0d:
59:83:19:49:03:ad:9e:56:7e:72:83:53:7b:66:3c:
b3:e8:10:b6:02:54:f0:eb:ed:a7:8f:d5:08:14:6e:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:B6:6C:B8:78:E0:9E:E1:A0:A3:3A:7E:BC:29:1F:9B:AF:DA:80
X509v3 Authority Key Identifier:
keyid:4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:07:d0:a9:f1:ad:13:8e:25:bf:d7:7b:6d:d3:00:2c:8d:
4f:94:1a:dd:ba:00:5c:6b:ce:86:c8:24:32:a1:bf:0c:35:34:
3d:0b:59:dc:d1:27:75:c0:55:97:c3:e3:19:bf:be:f1:ba:a5:
f0:2f:80:f0:7e:d8:58:7f:e6:c9:56:ff:bc:7b:e1:01:9b:41:
3f:49:62:e2:8b:07:86:8c:a4:97:23:21:09:3e:ce:00:58:51:
e6:55:66:e5:25:f0:8f:47:ee:39:79:27:6c:ad:a8:d3:83:52:
8f:8a:4d:67:09:db:df:db:6d:6e:a1:67:c9:28:1d:37:41:08:
41:27:e7:27:ab:48:e7:e1:fa:32:5f:5e:39:52:0c:81:51:ea:
4f:5e:b4:a3:a7:63:3f:52:0b:14:d2:d5:6b:05:55:ab:7f:b3:
e3:6f:7b:47:63:93:31:bd:90:5c:c8:c4:85:f8:e7:11:a6:95:
33:cb:54:c7:a5:15:6e:80:bf:23:b8:86:1b:b4:e5:8b:87:58:
43:e0:0b:b0:90:01:3f:b6:91:92:ef:66:24:13:e2:0a:17:bb:
86:31:79:bb:ac:c9:80:4b:e2:18:d8:c6:e9:6b:48:51:e2:fb:
8e:20:80:61:e5:f6:48:5b:75:1e:8f:ed:e2:5d:b8:e2:08:e0:
26:7f:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:56 2026 by rpki-client