
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json)
Hash identifier: 1uPnFDbf+CJsuwHalIGkeJnc7WWynPArlBxEAyC8PVQ=
Subject key identifier: 17:A0:FB:E7:D4:9C:29:64:B6:1C:0F:5E:C1:75:68:C2:AB:D2:2C:16
Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Certificate serial: 057C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
Manifest number: 0573
Signing time: Mon 27 Jul 2026 00:16:23 +0000
Manifest this update: Mon 27 Jul 2026 00:16:22 +0000
Manifest next update: Mon 03 Aug 2026 00:16:22 +0000
Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: Iu7jTZIdm8EmI5oH8/0Hzv9Os/8Dk/XA32O1NC56ABM=)
2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: IciT28SUjRQ0I2gdini8FnT61/04yJg06IILVj5+2rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Validity
Not Before: Jul 27 00:16:22 2026 GMT
Not After : Aug 3 00:16:22 2026 GMT
Subject: CN=6a66a357-9603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:78:8d:d4:19:82:fd:04:23:94:cb:3a:07:
bd:0a:c1:c5:5e:15:99:0a:54:81:e1:fe:ba:d1:c3:
50:7b:81:cd:a3:35:0a:b5:83:25:bd:e8:72:73:0d:
3b:bc:fb:34:88:a9:e0:6b:ac:99:1d:05:7c:c8:00:
16:a2:a2:14:12:92:6f:8e:4d:2c:4d:4f:6e:59:50:
1b:17:41:e9:15:98:fa:9f:fe:4e:7c:7a:f3:02:27:
33:80:e1:62:ac:4a:ef:31:f7:fc:aa:77:87:1e:61:
ae:ef:36:4b:4d:b9:01:b6:a8:df:23:e7:01:a1:71:
f1:ac:26:e7:fc:31:f1:61:04:88:1f:ba:e1:b8:a5:
1f:8d:de:a1:7b:3c:0e:19:c5:1f:35:50:fe:d6:1a:
81:76:a5:6f:21:53:ae:f4:1f:bf:ac:c5:6c:2e:fd:
52:ab:1f:e7:c2:cb:f1:0a:a0:14:97:24:9e:03:f1:
73:cd:65:56:7c:6e:af:d6:18:d7:ee:cb:cf:fb:05:
03:36:74:a7:5f:e6:5e:d7:86:73:9b:d6:7c:12:0c:
45:e1:03:8a:0f:e6:f1:0b:c3:98:2d:27:ae:83:bf:
3c:26:2e:1c:fe:37:60:68:11:dd:31:12:ce:ee:bb:
24:73:9b:80:e4:b1:9b:05:7a:ba:7d:5c:b5:d0:3c:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:FB:E7:D4:9C:29:64:B6:1C:0F:5E:C1:75:68:C2:AB:D2:2C:16
X509v3 Authority Key Identifier:
keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:32:ed:40:05:23:f2:ae:11:b9:9a:ce:da:3b:74:4d:8d:ab:
62:d2:d0:b7:d2:74:ea:42:5d:9b:ca:a0:58:4d:59:b4:f6:1e:
4e:a2:9f:d0:cb:2c:8e:7c:12:77:15:a0:85:38:c4:02:ef:28:
26:54:c9:5b:df:e3:25:55:85:65:2b:0f:cf:98:4e:10:d1:b4:
1e:a3:23:2f:3e:05:95:c0:a1:26:73:b6:23:0b:52:c6:ce:c8:
ab:86:97:ac:41:f0:c5:da:f2:c2:f7:ed:6a:18:9c:5c:63:c1:
67:97:84:b1:72:17:84:54:ce:18:05:41:e0:ad:9e:8a:4d:1f:
32:f6:11:73:75:f8:9e:e8:b4:71:bc:2f:8b:47:b4:f8:f7:27:
67:3a:9d:0c:b7:b0:dd:a3:92:4c:d6:50:41:1b:ce:57:45:a9:
47:35:4d:3c:67:05:13:79:25:27:bb:76:7b:3e:e2:6a:49:ae:
2f:c3:f0:d2:a5:38:13:3a:9a:63:18:22:7c:aa:f6:53:8b:eb:
ee:dc:12:7d:4a:f0:47:67:27:c8:3e:f3:e9:ac:ba:f9:a1:91:
ee:ef:bd:34:1f:ee:72:de:c1:d4:0d:42:67:a7:6c:f1:ce:80:
98:27:cd:5a:77:eb:8c:0e:f7:77:90:27:ae:61:da:5d:35:10:
e7:a5:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:46 2026 by rpki-client