
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json)
Hash identifier: XeIXVxoUZoTSuZwWnP27HmZ/MI9//JEPl6PLhiszt9c=
Subject key identifier: AC:CB:A4:BF:1E:BB:50:CD:B5:37:93:3B:CF:71:07:B6:0D:8C:99:D7
Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
Certificate serial: 094C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
Manifest number: 0943
Signing time: Sun 26 Jul 2026 20:43:17 +0000
Manifest this update: Sun 26 Jul 2026 20:43:17 +0000
Manifest next update: Sun 02 Aug 2026 20:43:17 +0000
Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: vzcpRoNH7MlYD442E5aZjNu4MtHivGpc6JsAVrFIRPo=)
2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: 6ncKBCqo1ayjhGZxmAp9UT9uWl983hRZQCjMjOFuhy4=)
3: _C2qZGQRdxbB-EVgCGJcDbRyMes.asa (hash: IxEMv8Kn38KYCCPZnTbWPmfntYJmZkaOkAG+N+HYR8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl
rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
Validity
Not Before: Jul 26 20:43:17 2026 GMT
Not After : Aug 2 20:43:17 2026 GMT
Subject: CN=6a667165-d8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:c0:c1:48:fa:9e:79:99:55:b2:8f:b4:a5:
db:8f:bc:3b:1e:17:f1:23:f5:46:90:38:1a:9f:05:
34:8c:f5:78:a6:60:07:29:f9:25:72:ca:e6:18:a2:
1d:cb:ec:9c:4c:a4:74:b6:b7:a9:51:d6:5e:53:e4:
52:15:a6:da:2a:0b:89:b4:3f:26:4c:08:c6:54:35:
4f:f0:98:bf:38:f9:ca:02:44:05:b4:3e:77:9c:3f:
be:b5:7c:eb:64:28:bd:1e:b6:1c:f4:fa:3b:d8:78:
9b:ec:f8:44:f3:55:3a:63:20:ef:0b:ca:49:87:ec:
f3:62:4c:dd:d8:5f:1e:54:3b:48:db:1a:6a:2c:af:
f7:8c:9f:7a:d8:29:3d:e9:9c:46:74:df:fe:c9:8e:
a9:64:11:65:63:fd:38:90:24:78:d2:8a:60:62:5e:
16:c0:78:67:cc:7a:30:2b:dd:bb:3c:77:72:bd:d1:
dd:ad:f0:e4:b4:68:52:dd:c6:f2:cb:4e:26:43:c6:
a8:c7:7e:d2:1b:c0:b0:f1:21:07:43:1d:4f:4d:05:
bd:74:90:36:c5:74:3a:89:aa:c6:a1:f4:8d:b5:33:
02:6c:6b:10:f9:5b:6c:d3:d6:32:85:93:94:82:57:
43:5d:4d:e9:e0:b3:11:36:fa:b0:73:19:aa:d4:48:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:A4:BF:1E:BB:50:CD:B5:37:93:3B:CF:71:07:B6:0D:8C:99:D7
X509v3 Authority Key Identifier:
keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fc:19:75:d0:bc:ce:79:4a:97:a2:e1:4a:93:c3:00:03:bb:
01:86:60:84:d0:73:b6:cc:af:6b:c3:a6:96:f1:29:96:99:f8:
ed:a7:1d:9d:ef:65:15:4b:09:59:72:19:9b:a5:a9:cc:21:60:
32:0b:86:13:63:09:9f:c6:96:0e:61:76:e0:53:20:49:3d:39:
98:eb:6d:61:8d:2a:47:27:84:65:f3:4d:8d:a6:ea:8c:d4:48:
63:ba:88:bd:9d:cd:7c:9e:19:e2:66:3f:a9:4a:88:44:5d:01:
f0:d8:4d:8c:8f:08:6a:f1:9c:0a:97:f8:1d:45:bf:80:47:db:
ea:8b:f5:e5:ad:4a:ef:39:16:b5:65:ef:84:62:03:11:67:78:
0b:17:1e:a8:9a:66:47:64:58:ec:88:43:07:de:4b:72:58:b3:
54:8c:69:06:a3:5d:9e:24:08:40:d4:f8:34:7e:4b:6a:d7:e0:
4c:65:7b:8e:00:bd:ca:a0:15:19:55:b1:1d:76:2b:34:47:d7:
8d:f5:1c:46:c2:48:2f:94:60:0b:5a:f5:04:1f:78:58:55:b9:
41:8a:4e:4f:6a:d9:22:25:70:01:ec:fe:30:b1:41:fd:57:5a:
58:90:ee:2e:aa:d3:97:15:56:f3:2c:0b:37:74:7d:22:1f:db:
0d:7b:f5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:52 2026 by rpki-client