
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json)
Hash identifier: FCq0CqwNk2ffFFOMGsPGsyH+VEfZMOX6LyDtlwQ8LzA=
Subject key identifier: 80:2F:A7:BE:BE:6A:3D:45:39:02:A5:47:20:0D:A7:0E:16:43:DA:0F
Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Certificate serial: 227D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
Manifest number: 2270
Signing time: Wed 14 Oct 2026 15:53:03 +0000
Manifest this update: Wed 14 Oct 2026 15:53:03 +0000
Manifest next update: Wed 21 Oct 2026 15:53:03 +0000
Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: M7HqIwc8E0PPHeFW+W8ftW7KtzK3T+a7+7WpeVo/SZI=)
2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: 3t4txeSZlYa+37JaV5Cr2zGhA3jRnET+dGT9cx2QlTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 15:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8829 (0x227d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Validity
Not Before: Oct 14 15:53:03 2026 GMT
Not After : Oct 21 15:53:03 2026 GMT
Subject: CN=6acfa55f-cbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:70:8d:25:98:b0:00:bb:90:9e:10:40:0e:
01:84:bd:29:e4:14:79:60:4e:cc:3b:0f:d0:3c:f4:
62:c9:92:27:4b:58:41:45:6a:18:e7:86:92:8f:f1:
d4:55:6e:4d:7a:93:c4:ff:41:cb:a1:4e:ca:8a:78:
86:5d:e8:d3:46:92:4b:27:bc:f6:53:6c:55:3c:9f:
98:d9:fe:da:38:91:d7:8e:11:b2:1e:85:19:6b:cf:
32:bd:a4:e5:49:c5:58:7f:17:e1:ba:df:90:b2:d3:
5a:4b:b2:5f:9b:df:b2:f4:ea:e9:a2:00:65:b7:0f:
46:d6:a9:b9:c3:da:dd:ac:28:8a:7e:b6:98:e9:18:
c4:98:1b:fa:24:9f:7a:df:77:ed:71:40:3b:6e:a9:
23:1a:a6:d7:13:9a:c3:a4:d3:58:26:ea:93:2e:65:
fd:c7:82:97:85:06:19:d8:4a:25:8c:86:48:ed:3e:
f0:a8:4e:c5:0f:6d:22:93:7a:08:bb:83:47:32:b8:
9b:ec:b5:68:db:ca:c0:11:76:44:ac:c1:c6:74:70:
7c:cf:3a:53:18:f1:bc:13:bd:f5:fa:d0:4f:99:9f:
e4:e7:7a:3c:68:f3:56:76:31:9b:e3:af:c7:ac:04:
d0:b4:23:59:8e:87:8a:3f:d5:c4:d9:27:7a:41:65:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:A7:BE:BE:6A:3D:45:39:02:A5:47:20:0D:A7:0E:16:43:DA:0F
X509v3 Authority Key Identifier:
keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:34:47:99:97:95:e4:57:55:1e:5d:c1:dd:8b:71:66:0f:42:
83:44:66:25:97:c6:f8:06:34:62:73:0f:19:d2:4c:f7:86:b2:
eb:8a:34:09:57:16:0c:af:3d:1f:ec:64:db:60:77:4c:7a:cc:
22:8f:59:e3:17:c4:32:be:ac:7a:02:12:2f:0c:ca:a0:17:5f:
e7:aa:ed:ef:66:98:1c:14:e7:4f:3f:85:f2:0b:1f:7f:18:27:
1d:47:a6:c2:28:f4:03:0f:98:ed:c3:2e:8c:7b:d5:a3:1e:9f:
f3:48:31:f6:46:16:8f:60:49:fd:2a:d2:1a:fd:d4:40:82:28:
97:5f:75:20:0c:91:fa:6b:74:ee:80:04:ee:e9:2c:2f:94:26:
5e:56:57:21:ec:cb:88:52:b0:a3:a7:b4:1d:7d:ac:54:46:27:
c2:1f:9f:f1:bf:08:7d:03:91:53:62:48:e5:e0:6b:67:fc:f7:
5c:ce:7f:8e:86:36:dd:c5:3d:2a:dd:80:b7:58:39:ed:c2:7b:
e0:36:7b:35:bd:c6:51:3b:53:57:16:43:a9:ac:e8:db:b4:bb:
85:1c:31:a1:4b:1b:e8:f9:b7:e5:f7:d5:33:b1:98:4f:be:70:
a6:68:25:c7:22:3d:e5:74:80:45:77:b4:07:18:a4:32:d1:28:
a1:aa:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:01:57 2026 by rpki-client