
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json)
Hash identifier: UyYf4kvq6vh5NIftIY1BJboET9VsWugV9vLW5RVKjQ4=
Subject key identifier: EA:CF:18:6C:6B:40:59:FC:CA:49:9B:C1:11:AD:7D:20:93:2C:C5:11
Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
Manifest number: 025A
Signing time: Mon 27 Jul 2026 03:39:05 +0000
Manifest this update: Mon 27 Jul 2026 03:39:04 +0000
Manifest next update: Mon 03 Aug 2026 03:39:04 +0000
Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: ULZOx8zJahj9m9zZlpox0yCNZJp4onsFxX32diO1b28=)
2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: evrrp35v+kEqYtlZi8zcxreXxzWFEB8bQkw/fkPA/3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Validity
Not Before: Jul 27 03:39:04 2026 GMT
Not After : Aug 3 03:39:04 2026 GMT
Subject: CN=6a66d2d8-d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:50:6c:83:94:98:b3:cb:50:97:4e:c8:4d:
e5:31:c8:c7:68:c0:dd:a8:72:70:a1:b7:a8:b4:b0:
53:e0:a9:d1:e9:d1:c5:cc:33:2f:ee:16:05:58:2b:
bd:d4:a3:84:44:bf:d9:f7:e0:f2:c4:b9:4f:fd:e1:
9b:5f:69:d7:cb:b6:df:6d:b5:a0:d4:13:8b:65:6a:
08:3d:a6:2b:aa:88:c9:e1:a7:cd:ea:db:ab:be:33:
67:b8:8c:2e:e7:8c:a9:d0:31:1d:87:20:08:de:08:
66:f2:67:bd:ab:d4:fb:20:b5:bd:24:9b:9d:2f:62:
bd:02:0c:70:88:91:8c:79:60:85:51:53:1e:e0:6c:
31:11:7a:2a:ff:25:dd:b6:f5:31:1f:66:e7:25:91:
fc:3f:fe:e4:19:9a:4a:b6:7a:30:79:e2:51:f4:b1:
24:b0:0c:b6:ed:85:08:7b:e6:4c:2f:18:d0:14:fe:
8a:2a:42:87:f7:fa:87:fa:15:22:03:40:88:29:d7:
88:d1:a8:1f:2d:a3:3b:ee:60:17:19:db:59:cc:a2:
69:e2:8c:41:7f:08:20:36:ff:a8:b1:86:1b:33:82:
ed:85:70:91:d9:9d:cf:77:5d:d3:18:3a:c2:71:57:
f6:b9:c2:41:ea:1e:d4:6f:d5:e0:72:ac:2a:b2:a8:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:18:6C:6B:40:59:FC:CA:49:9B:C1:11:AD:7D:20:93:2C:C5:11
X509v3 Authority Key Identifier:
keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:b2:0b:8f:4f:b1:bb:dd:7d:c3:30:6f:b3:32:d0:5a:1e:07:
20:d6:1b:2e:7d:a0:ae:12:2f:1a:dc:ee:59:8c:d1:8f:10:55:
fb:31:aa:4f:76:9c:95:10:27:06:a1:59:d3:c2:7d:4a:e4:6e:
51:50:72:fb:af:67:9d:35:bd:8a:82:2d:6a:5b:5e:2d:67:36:
8b:85:b7:78:ff:4e:0c:70:a2:28:68:f5:c3:fb:8d:ae:ad:4e:
d1:4e:10:4c:a5:20:e1:86:ac:34:6b:3c:17:28:56:c4:25:f4:
58:a3:84:ea:f6:c2:7b:89:b7:2e:19:26:dc:04:f8:24:70:cd:
c7:4e:00:74:c4:11:06:c3:7c:62:d7:61:0e:af:4b:22:7f:14:
31:ce:37:40:d8:a2:2f:d8:4e:1a:df:4a:12:60:3c:09:b4:f7:
8f:6c:c2:a8:47:6f:78:77:79:81:82:58:5a:a9:70:73:04:61:
b9:e3:3b:a1:dc:3d:27:83:d0:20:60:09:13:2f:24:ba:ac:24:
99:1d:4a:89:36:8e:ad:6b:e5:67:ca:21:25:12:f5:2c:03:30:
92:92:01:59:0d:b4:f8:2b:d2:de:0e:5e:f8:56:e8:d7:b1:e8:
37:d9:ad:62:98:4b:95:d9:77:87:68:11:c0:54:e3:ce:1b:b3:
d3:80:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:46 2026 by rpki-client