
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
File: h8MVYTVzTVYviayugrfBqOytOao.mft (raw, json)
Hash identifier: JuZaXYlX14dKR2dPioCIKiWQ33tGnuUZ8ggbmM769gw=
Subject key identifier: 8A:BD:39:EA:F4:09:7C:2B:1D:24:C8:75:92:07:31:FA:97:50:6D:45
Authority key identifier: 87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Certificate issuer: /CN=A91B821A/serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
Manifest number: 16
Signing time: Sat 13 Jun 2026 09:05:01 +0000
Manifest this update: Sat 13 Jun 2026 09:05:00 +0000
Manifest next update: Sat 20 Jun 2026 09:05:00 +0000
Files and hashes: 1: h8MVYTVzTVYviayugrfBqOytOao.crl (hash: Bm+UWrEtKof7rwcGEOGYOh/+212jQ0ccGSOZu/h+en4=)
2: B73DBDC848FD11F1BBA9715993833773.roa (hash: AGc8FPeV1XnTmwaCgwjyk//SDE1tk9ZLKFTYlrVR/0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Validity
Not Before: Jun 13 09:05:00 2026 GMT
Not After : Jun 20 09:05:00 2026 GMT
Subject: CN=6a2d1d3d-abdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:b9:4e:ab:8e:7b:28:67:79:95:1c:22:40:
47:04:df:d4:72:e6:5f:27:0e:33:68:ff:f3:a0:5d:
aa:dd:9b:51:7a:36:4d:af:05:e6:f7:05:64:c2:e8:
a3:ce:12:69:66:80:eb:34:24:df:a6:31:ce:c9:5b:
b8:d5:30:8f:b4:01:d3:c6:57:88:ae:75:de:e5:5d:
67:a7:c0:a4:ca:7e:c4:21:c9:5a:37:06:4d:dd:fb:
41:5d:40:65:e2:0b:71:d5:5b:73:4d:55:0f:9f:b7:
ba:98:ee:51:45:3c:86:cd:92:77:c5:28:ee:39:af:
40:b6:8c:b5:24:4c:b4:66:80:ac:80:44:da:e1:94:
ab:4b:86:71:8a:8d:39:12:81:f1:84:a4:44:3e:8c:
27:dd:78:b0:27:a6:5c:db:ee:a4:32:b1:14:c5:ef:
64:b0:85:3f:25:e5:5b:0e:a0:a3:c1:b8:15:dc:9e:
b0:bf:59:b4:fb:3d:8f:8e:03:39:02:5c:e7:6e:b2:
b0:4c:20:3c:c6:67:38:e9:a7:5f:93:02:57:40:31:
e8:7c:e8:34:c3:db:0d:7a:2a:08:6f:f0:b0:20:37:
2e:7d:56:d6:56:69:ea:b7:86:ea:bc:0c:1b:29:e2:
7d:1f:02:a0:08:47:62:7c:e2:64:c4:98:a2:45:aa:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:39:EA:F4:09:7C:2B:1D:24:C8:75:92:07:31:FA:97:50:6D:45
X509v3 Authority Key Identifier:
keyid:87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:c4:01:24:9e:f5:15:a7:41:85:22:21:1d:ee:7a:63:f1:
9b:85:5d:77:e9:ab:09:85:07:ca:4b:a7:0c:c8:5e:57:32:30:
aa:18:39:b5:66:29:3a:88:da:17:d7:54:46:bb:80:7f:4f:45:
a4:95:96:dc:af:28:0c:76:db:4c:5c:64:ff:9b:a6:74:04:af:
41:bc:46:46:71:84:bf:62:f1:c3:47:43:d6:94:be:3c:59:a9:
ed:76:55:eb:bf:51:0b:da:26:3c:df:3d:6e:cd:9b:7d:14:ac:
03:e6:49:b3:8c:a4:2c:9a:59:f2:25:19:ff:51:90:e4:4d:60:
92:8e:67:73:23:c2:31:4c:88:d2:be:b8:25:69:48:e7:68:29:
39:3a:71:38:dd:87:79:64:ce:42:84:c0:a8:07:09:04:b0:d2:
a1:b5:44:51:e2:fc:5f:e9:14:af:7b:e4:9e:8a:83:56:13:61:
95:3f:6c:ca:1a:ba:b4:a3:32:a6:3e:31:f0:9b:6e:ef:35:0d:
0a:c3:cb:c7:e4:1e:40:59:6a:1c:90:84:89:9e:6e:cd:82:b2:
8a:ec:3b:34:53:64:4f:f6:50:d5:5c:c4:6f:98:93:8f:d7:c1:
cc:2c:be:2b:5e:f8:08:99:85:9a:cf:3d:27:9d:88:0a:35:37:
1c:ad:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:00:23 2026 by rpki-client