
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json)
Hash identifier: 5cSyxmgGSlQaBaO6TcX+grKOSE0pN3+9coPpbmyDvJI=
Subject key identifier: 8F:C4:2C:F0:CF:D2:31:AB:97:DA:AF:8C:99:A6:93:01:D9:04:91:50
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
Manifest number: 085B
Signing time: Fri 12 Jun 2026 20:53:35 +0000
Manifest this update: Fri 12 Jun 2026 20:53:34 +0000
Manifest next update: Fri 19 Jun 2026 20:53:34 +0000
Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: L+xkY9yvmDUyILp2UXTRC2vgDq0ql3+NQHWVH9oo2ak=)
2: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=)
3: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=)
4: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Validity
Not Before: Jun 12 20:53:34 2026 GMT
Not After : Jun 19 20:53:34 2026 GMT
Subject: CN=6a2c71cf-f670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:fc:aa:bd:25:55:bd:90:37:bd:e1:57:0f:
9e:0b:eb:ef:0b:e6:c8:6c:b1:cd:29:7d:c2:28:ec:
aa:0a:d4:04:cc:93:d3:ca:7e:45:f7:38:49:c2:b4:
0d:6d:c0:2d:d2:1b:bf:a4:78:01:da:cd:29:bc:4a:
0f:ee:fd:7d:e4:eb:31:3a:e2:ec:a4:ce:77:7e:22:
a0:e7:0d:02:64:b9:12:20:ed:ab:ed:fa:e9:5c:a4:
58:6c:39:ac:9d:6c:f8:12:4d:5f:e3:4f:b2:1e:c7:
f0:1f:a2:91:fa:82:98:e3:2a:d1:2f:3d:6c:64:3e:
86:ad:5a:b5:a9:c6:ef:6d:fc:f2:08:a5:c0:2a:cd:
bf:9a:92:43:15:77:df:47:42:96:84:2c:38:3e:18:
e6:79:54:50:0e:3e:26:41:89:72:98:73:02:50:b0:
84:16:e8:d1:81:0d:dd:6d:68:6f:2d:c6:6f:d8:8c:
70:38:62:62:04:a5:83:47:bd:38:b2:4c:4d:ff:09:
fa:cd:24:71:44:7a:a8:07:db:49:2c:d9:48:65:fb:
d2:b3:f6:9d:04:1f:84:2f:49:eb:24:73:b3:ba:f7:
c6:0d:77:b6:84:84:b7:2c:fe:b8:85:77:92:da:f3:
29:e4:47:21:db:d8:8f:3d:77:82:93:a9:07:ce:6d:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C4:2C:F0:CF:D2:31:AB:97:DA:AF:8C:99:A6:93:01:D9:04:91:50
X509v3 Authority Key Identifier:
keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:0e:b9:5a:a8:1c:61:9d:2e:88:c5:4e:75:86:9e:09:22:35:
36:53:85:8d:4c:7d:bb:08:22:0b:4e:a6:17:46:00:46:c5:b3:
f9:3b:29:06:c8:f9:73:df:21:5a:15:75:67:5d:65:60:6c:7d:
7c:67:86:db:36:10:67:ac:81:18:c5:f3:0e:91:60:8c:7d:20:
95:99:5b:b2:46:7d:51:79:8f:37:e9:99:e8:11:1f:39:41:82:
14:ef:1b:54:c9:68:2d:04:16:3c:95:2a:7e:86:3d:e6:d5:8f:
9d:a1:57:53:d6:d5:23:be:9d:91:a6:1b:a2:23:a7:11:1d:95:
3d:cc:e2:9d:a3:4c:b6:bd:6e:17:02:a1:c2:51:32:97:77:d9:
a5:84:34:f0:bf:79:a3:4c:ef:b3:41:39:c5:52:a9:ff:89:ea:
0a:06:83:ae:fb:b9:87:12:bc:27:29:46:77:d7:8c:97:ab:8f:
7d:e9:48:9e:36:bc:39:f4:37:6e:d0:ca:b7:6e:56:72:b4:9e:
2c:91:9f:eb:e5:6f:77:d1:6a:bf:7b:ec:71:64:4b:10:1d:97:
a3:48:10:92:87:57:64:3f:66:78:49:98:a3:27:32:f5:00:a8:
87:e9:78:ce:70:cf:45:fe:75:d7:a9:e1:cf:b3:1c:66:e4:79:
80:6f:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:22:06 2026 by rpki-client