
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
File: 0F9LZe-AtS0_ehTy3BlczyY5I8M.mft (raw, json)
Hash identifier: HvVEhAegunR7aw3EPCH98jw9J7QCXspS/5/SI7h3+Mc=
Subject key identifier: 12:93:22:42:BF:55:C0:FF:EC:DA:1B:E2:52:69:FC:B7:64:AB:F4:34
Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3
Certificate issuer: /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
Manifest number: 08
Signing time: Mon 27 Jul 2026 11:35:01 +0000
Manifest this update: Mon 27 Jul 2026 11:35:00 +0000
Manifest next update: Mon 03 Aug 2026 11:35:00 +0000
Files and hashes: 1: 0F9LZe-AtS0_ehTy3BlczyY5I8M.crl (hash: DRnsF1/j6fmzlhSm4oMjplFniWnIUIE1Fwoo58V2mt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl
rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
Validity
Not Before: Jul 27 11:35:00 2026 GMT
Not After : Aug 3 11:35:00 2026 GMT
Subject: CN=6a674265-cfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:cf:8c:c5:77:83:2d:e5:57:09:6e:00:81:
ea:ae:23:c3:a4:cf:3a:2b:da:c2:4e:11:31:b1:30:
e6:97:5b:2f:10:22:15:d6:95:55:76:a7:05:4e:3a:
f9:4b:a2:64:6e:50:1c:b1:1b:a9:49:39:d7:40:e4:
ee:66:69:d9:48:68:5e:27:d5:be:38:bd:52:9f:d1:
67:0a:ab:dd:97:5b:a5:00:60:88:c8:44:0e:ba:4b:
7d:2c:ae:25:4d:a1:ef:82:c3:11:69:0a:14:36:17:
ea:57:0c:06:a7:36:72:69:83:d5:d0:11:1a:09:38:
cb:b2:75:03:a2:e6:ce:01:17:ff:eb:24:9a:3a:b6:
b9:6f:46:e6:e4:4e:c0:bc:5d:0e:16:59:04:a0:4d:
b0:fd:88:f6:44:c5:f2:8c:d8:0d:c7:40:df:f8:09:
eb:00:f2:88:89:03:75:64:e5:e6:4f:9d:e9:7b:41:
2d:d0:49:f5:1b:8b:2f:b5:9e:67:a3:6a:22:2d:e5:
d3:41:73:2e:62:ac:ee:8c:1e:31:57:39:96:bc:34:
1e:e3:1b:53:63:cd:a1:16:70:48:23:08:bb:ca:af:
4c:bc:7e:17:b4:f5:7c:1d:1f:61:1b:f3:79:a4:5d:
65:f4:53:b2:1d:f8:ac:fe:cb:fa:39:f2:99:42:ad:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:22:42:BF:55:C0:FF:EC:DA:1B:E2:52:69:FC:B7:64:AB:F4:34
X509v3 Authority Key Identifier:
keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7a:36:1a:0d:2b:58:4a:9b:e7:e1:41:1f:d7:f6:fa:2c:9d:
6b:8b:62:ad:9f:6b:04:14:e4:31:64:6f:f8:5d:f2:b7:17:96:
ec:90:bd:ed:b9:b2:12:dd:55:9b:1e:ee:bd:f0:c1:c8:5b:5f:
61:02:05:29:be:a2:18:fc:38:4e:fa:cf:e9:95:95:b1:96:43:
21:ff:f2:a8:ea:31:f3:a2:4c:62:0c:82:f1:c6:11:63:6e:73:
bd:c3:a2:bf:bc:e3:60:08:68:3c:8d:8d:78:b3:92:2f:41:3d:
ea:5b:32:fd:73:dd:b6:d2:bb:43:f5:f1:75:56:6a:60:59:00:
e1:67:b1:9f:cc:61:34:04:56:3f:c8:2b:04:2b:b6:83:cf:63:
64:04:63:69:9b:ce:2a:d6:7f:ea:f2:cb:75:a1:53:17:80:f7:
ef:d5:be:6e:f3:cc:06:fa:51:b4:b0:71:73:7c:87:c2:f1:6e:
ed:41:38:b2:8a:a4:45:06:1a:6c:17:90:bf:c7:9a:39:1b:a4:
47:1e:de:45:a0:d8:94:86:41:de:21:a8:98:9c:0f:86:24:06:
83:1e:8f:12:76:84:2b:be:e5:d1:c6:f8:fc:42:df:bd:94:7d:
8e:72:fc:d0:da:e0:7a:b5:a0:8d:94:a3:52:9b:ae:61:f7:f3:
ef:2e:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:05 2026 by rpki-client