
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier: /4Cnk1yblnJp3NE6RQW9mUI3wzj5/ctzq/tasQMTtsk=
Subject key identifier: 2C:9F:A5:0A:58:9E:64:4F:51:A9:8C:45:B4:6E:05:F6:07:27:94:D1
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial: 154C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number: 1520
Signing time: Tue 28 Jul 2026 16:55:06 +0000
Manifest this update: Tue 28 Jul 2026 16:55:05 +0000
Manifest next update: Tue 04 Aug 2026 16:55:05 +0000
Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: J/aJSOSJmhCX+SoYKt52MMfF+m4T173BXqsf5bNLjOE=)
2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: 8O8JY2NXJlU6iXynIm/TOWGZDFkAjSbZghW1iOqNz4A=)
3: 89567AD686F011F19E006003A7EE528E.roa (hash: dUSLzMUqDsxRAiIEeaK8+FCiCh/s3L2CzoYAjuY8X34=)
4: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: QEZRuL5g83zcIEE/jZzGGZwIsCMj1qeuX3dlcLFnIEA=)
5: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: uoO9Im5pkYbvz3VL3E29jCslGLRvKNamupOW6QMeXM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5452 (0x154c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Validity
Not Before: Jul 28 16:55:05 2026 GMT
Not After : Aug 4 16:55:05 2026 GMT
Subject: CN=6a68deea-6d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:b3:52:b5:ed:a7:13:27:d3:fd:98:da:87:
0e:a1:83:4a:24:52:b7:f3:5d:c3:c6:12:45:21:7a:
92:e8:2f:c9:bc:6d:43:49:75:4f:ca:c6:64:f3:00:
56:cf:8e:43:88:23:01:15:b4:0c:2a:c6:66:bf:21:
8f:b2:57:00:78:2d:d9:01:98:2c:fa:24:83:c7:99:
02:33:1f:36:b1:1c:ca:fd:43:a4:4a:c4:bc:9c:90:
0f:cf:fa:3f:9f:b5:0f:af:6e:0a:76:3d:49:7e:12:
e0:1f:48:ef:8c:62:27:8f:5e:10:e7:af:b0:65:78:
f4:a5:1b:0f:03:25:50:5f:9f:27:ba:68:76:35:e1:
24:b4:ca:50:8b:f6:54:55:ef:f7:75:b9:ab:45:d9:
b8:64:87:5d:c1:f7:8f:1d:e4:56:77:f5:e6:63:5f:
5d:82:df:81:d1:b6:b2:e8:e4:7a:a4:05:43:93:50:
e8:1b:b9:87:23:e3:80:73:10:ff:33:67:9a:e0:67:
1d:ff:74:1f:ef:fe:40:b3:fd:da:9f:5d:0d:fb:11:
93:17:24:de:ef:dc:00:69:47:3b:8b:dd:df:a3:31:
f1:a6:44:d9:d5:ff:b8:93:1a:d0:5b:64:f2:34:c8:
34:e3:72:2f:c3:73:10:bf:b7:d4:9c:26:21:67:ed:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:A5:0A:58:9E:64:4F:51:A9:8C:45:B4:6E:05:F6:07:27:94:D1
X509v3 Authority Key Identifier:
keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:e5:7f:8b:4d:48:d9:8f:58:fd:4d:64:cf:06:df:c0:ba:97:
4b:25:a6:cd:24:17:83:b8:3e:b7:17:24:49:8b:45:80:ff:38:
84:2d:48:93:d8:1f:a5:30:ff:b2:6a:74:be:85:be:3d:d4:3b:
bd:e0:3a:8f:06:65:f6:96:5a:13:00:f0:41:01:0a:0e:9d:ea:
d4:c2:a7:fd:98:76:85:53:84:f7:a9:64:e2:3b:dc:c8:0f:1f:
96:2f:7a:7f:8c:7b:22:c0:2e:71:45:02:58:c4:43:48:3f:27:
81:1e:1d:2c:84:68:ee:26:cd:71:e7:01:37:dc:93:f4:9a:3c:
c8:cc:02:44:1c:39:14:88:a8:03:5b:a2:57:9a:77:17:44:0a:
64:bb:8e:70:15:f5:24:da:25:0f:66:7c:6a:cb:22:1a:36:4b:
6a:0e:05:15:df:85:02:1e:dd:14:0c:1b:c9:51:4c:e4:ca:6d:
5a:de:86:34:38:5e:b6:a9:ce:3b:92:4a:c3:22:ef:1b:98:a9:
73:41:b1:0c:d3:ab:7a:a5:75:32:ab:56:36:44:b1:af:fb:fa:
5f:50:45:44:e4:4c:a2:dc:c9:c4:fc:63:e3:62:28:12:4e:55:
e5:02:1f:14:ca:ac:50:99:4b:0f:f2:70:52:e9:97:d4:18:a2:
6b:1b:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:25 2026 by rpki-client