
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json)
Hash identifier: Ez2CLuKlUSHxv+Fg+ycLyHe4g0ee537D325hwQlglH0=
Subject key identifier: B8:97:CC:84:AC:C9:A8:09:B6:7C:D3:18:F3:DE:3F:E9:B9:3C:E7:24
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
Manifest number: 02DA
Signing time: Sun 27 Sep 2026 01:28:35 +0000
Manifest this update: Sun 27 Sep 2026 01:28:35 +0000
Manifest next update: Sun 04 Oct 2026 01:28:35 +0000
Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: L79qwfg1ofl8AW5/0N+cy+nGMej+7IGVBhEqNplNeQ0=)
2: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=)
3: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=)
4: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Validity
Not Before: Sep 27 01:28:35 2026 GMT
Not After : Oct 4 01:28:35 2026 GMT
Subject: CN=6ab87143-ad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:3f:86:2e:40:8b:0a:ed:36:f1:8a:10:5f:
9c:5d:5b:1f:97:9d:04:26:de:48:39:6e:10:5b:a0:
dd:bc:59:97:d5:ca:18:c4:98:8f:56:c7:29:97:1e:
61:a2:2b:37:2d:fa:29:3e:45:57:9d:76:91:8c:69:
13:5b:b5:45:b3:50:51:e6:45:4b:66:a4:82:9f:a7:
a3:46:50:fe:40:2c:2e:29:af:6c:66:15:1a:7d:15:
22:3f:08:ba:ea:8d:4f:54:ff:f5:b6:be:f8:52:f7:
a2:5e:00:6c:ba:3d:1e:39:72:69:84:f6:6e:93:21:
85:83:f7:a9:e6:35:82:e1:fd:73:b9:4b:1f:a2:5d:
18:8a:20:69:e5:07:27:90:90:09:7a:59:89:a9:94:
87:ed:6b:26:45:b9:d4:8c:1b:1c:9e:71:56:74:a0:
f7:94:7c:83:0b:5a:c6:0c:87:f2:2f:a9:72:a4:ab:
a6:a0:c5:b4:68:2c:5c:62:34:6e:df:54:a6:34:2b:
06:70:df:0b:1b:40:18:1f:14:fe:6f:ea:ab:02:d3:
cc:70:01:c0:17:61:42:42:ed:41:65:a1:f4:22:83:
bd:09:b8:f8:1b:c4:0a:d8:ca:bd:e5:c8:37:98:1c:
56:12:4c:c9:58:ed:37:c9:0a:51:c5:24:67:8c:fb:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:CC:84:AC:C9:A8:09:B6:7C:D3:18:F3:DE:3F:E9:B9:3C:E7:24
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:93:92:10:ee:cb:85:1d:9d:15:87:6f:84:37:d8:6a:f6:33:
b2:c2:8e:37:09:14:c1:16:b1:c5:21:45:0d:bf:ff:8a:12:40:
b2:bc:ff:68:cc:6e:0a:e8:b5:0c:2a:a4:36:f9:73:0a:64:f2:
d3:dd:aa:da:45:2d:84:8d:1b:38:24:b9:fe:e5:da:3c:f8:47:
75:c8:32:83:e8:91:b9:56:e4:6a:d1:62:71:b4:89:d1:86:a8:
0d:e7:32:bb:18:39:e9:01:c8:3e:8d:ef:ab:15:67:a5:2d:48:
d6:44:d4:55:4b:17:4c:94:8b:e4:5a:d8:e7:51:0a:2c:3d:27:
46:9f:d8:16:5b:59:6b:bc:b6:67:a3:1a:f3:c5:f7:ed:7b:f6:
fc:de:a3:ae:20:a5:b9:f6:df:00:4c:ce:05:ca:cc:92:0e:81:
5d:16:40:24:a1:19:31:b4:88:98:a3:87:01:61:00:52:71:6c:
f5:3a:e2:6c:8e:b0:a2:e5:fb:05:ae:d5:f1:0d:c1:f8:ab:b1:
2f:e1:d3:f0:79:b5:cc:0d:61:61:73:80:b7:6e:21:78:3c:9c:
8c:ae:65:c5:a0:4e:06:68:7a:e0:5d:41:62:2c:aa:de:6f:5f:
4f:a4:c2:fc:16:fe:6b:2d:4f:57:46:44:2d:18:1a:e2:06:b5:
14:c3:06:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF
M0FFODAxMzQwHhcNMjYwOTI3MDEyODM1WhcNMjYxMDA0MDEyODM1WjAYMRYwFAYD
VQQDEw02YWI4NzE0My1hZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzk4/hi5AiwrtNvGKEF+cXVsfl50EJt5IOW4QW6DdvFmX1coYxJiPVscplx5h
ois3LfopPkVXnXaRjGkTW7VFs1BR5kVLZqSCn6ejRlD+QCwuKa9sZhUafRUiPwi6
6o1PVP/1tr74UveiXgBsuj0eOXJphPZukyGFg/ep5jWC4f1zuUsfol0YiiBp5Qcn
kJAJelmJqZSH7WsmRbnUjBscnnFWdKD3lHyDC1rGDIfyL6lypKumoMW0aCxcYjRu
31SmNCsGcN8LG0AYHxT+b+qrAtPMcAHAF2FCQu1BZaH0IoO9Cbj4G8QK2Mq95cg3
mBxWEkzJWO03yQpRxSRnjPu7twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiXzISs
yagJtnzTGPPeP+m5POckMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD
MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2
N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkJOSEO7LhR2dFYdvhDfYavYzssKONwkUwRaxxSFFDb//ihJAsrz/aMxuCui1
DCqkNvlzCmTy092q2kUthI0bOCS5/uXaPPhHdcgyg+iRuVbkatFicbSJ0YaoDecy
uxg56QHIPo3vqxVnpS1I1kTUVUsXTJSL5FrY51EKLD0nRp/YFltZa7y2Z6Ma88X3
7Xv2/N6jriClufbfAEzOBcrMkg6BXRZAJKEZMbSImKOHAWEAUnFs9TribI6wouX7
Ba7V8Q3B+KuxL+HT8Hm1zA1hYXOAt24heDycjK5lxaBOBmh64F1BYiyq3m9fT6TC
/Bb+ay1PV0ZELRga4ga1FMMG7Q==
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:22:58 2026 by rpki-client