
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json)
Hash identifier: Zrg+gOBF9WVN2Ziftp1Ud0hlPgFzPfFEI2WgBhBMNrU=
Subject key identifier: D1:C1:AC:DA:0F:05:EA:6A:BF:DD:73:80:AC:EF:2E:28:83:4E:86:E8
Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
Manifest number: 0244
Signing time: Sat 13 Jun 2026 02:25:15 +0000
Manifest this update: Sat 13 Jun 2026 02:25:14 +0000
Manifest next update: Sat 20 Jun 2026 02:25:14 +0000
Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: +Ka/YeXXpmlJHxyfiUSFnHOSp9cLKNLjMG97M05VY4k=)
2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: evrrp35v+kEqYtlZi8zcxreXxzWFEB8bQkw/fkPA/3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Validity
Not Before: Jun 13 02:25:14 2026 GMT
Not After : Jun 20 02:25:14 2026 GMT
Subject: CN=6a2cbf8a-9c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:30:64:a5:d8:26:e3:31:0f:bc:5a:40:02:
d4:7f:6b:61:fd:8f:ca:b7:eb:5a:cf:19:55:4a:09:
8c:db:04:64:10:79:e6:6b:fe:67:07:b8:1f:46:aa:
06:79:da:b6:84:00:c0:d6:1c:83:d4:67:bf:8d:43:
80:cf:dc:31:67:5d:1c:a9:34:cc:0d:98:76:55:07:
d4:42:d0:9e:96:d9:ba:1d:a0:19:68:a5:3a:73:a7:
50:eb:f6:cc:07:99:4f:10:c3:1a:43:c1:22:31:3b:
d9:01:e4:ff:ef:ae:f9:f5:c7:df:b3:9d:44:c6:cc:
4f:bc:01:88:00:94:27:58:81:7d:58:29:2d:14:bc:
99:2f:6c:8a:78:24:8b:59:d8:ef:8d:02:30:5e:b0:
cd:7c:b7:37:42:c5:1b:69:fb:3b:cf:a5:4a:cd:39:
eb:38:d6:d5:c2:d4:5e:56:bd:f8:1a:15:dd:a1:b9:
0d:bf:d4:eb:15:a8:89:b2:62:9f:98:b0:ef:b7:1a:
af:1a:67:2c:fc:01:b7:bc:a9:f2:ff:53:39:e9:5f:
8a:84:bf:fd:1e:30:61:09:0b:e8:7e:44:70:c7:9f:
03:70:f3:93:af:2d:f3:ae:b5:9f:a8:04:f7:d5:49:
a1:02:eb:b9:9f:2d:6a:9c:1f:fe:65:7c:20:21:e2:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C1:AC:DA:0F:05:EA:6A:BF:DD:73:80:AC:EF:2E:28:83:4E:86:E8
X509v3 Authority Key Identifier:
keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:c2:5d:b8:50:fb:f3:0c:4f:d6:3b:6d:d2:20:2f:22:59:65:
67:a6:21:57:6a:45:11:b6:d6:09:b3:b9:74:88:4d:20:00:c2:
91:35:df:17:80:a9:b1:45:03:aa:92:a0:d9:1d:c8:ca:ea:fe:
9d:51:2b:96:d7:b8:a0:e7:54:5d:a4:05:7c:90:86:c8:c5:f7:
fb:15:fa:be:bf:d6:63:b6:8a:15:05:b7:0e:f2:08:41:13:52:
cd:1f:c1:06:74:ab:22:7d:5b:75:9a:6f:55:92:13:42:dd:cf:
6c:0e:d1:e9:5b:76:86:cd:f8:03:09:92:f8:0f:4b:7e:c6:0e:
7d:5f:43:c9:32:18:24:31:a9:55:fc:dd:cc:0b:ba:ca:18:07:
6d:dd:69:24:9d:4b:5d:19:3a:fe:9f:66:eb:f3:f7:8e:21:8c:
17:a1:c3:cc:e2:b5:b4:0f:43:7a:fc:41:92:d4:ec:f9:48:53:
eb:3d:03:9d:cf:2f:5d:65:55:d9:57:da:ca:db:25:86:80:41:
0c:66:d3:f5:4c:71:3e:64:39:ed:ab:57:63:ea:ec:55:37:05:
e2:a9:c8:bb:55:00:6c:76:dd:93:50:26:61:50:e3:44:11:77:
2d:37:e8:db:bf:e3:ab:4e:61:d4:58:77:04:35:be:f5:a7:a8:
63:3d:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:08 2026 by rpki-client