
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json)
Hash identifier: 7ftelV0UrcpLapB/Eu3gpl0C8v0D8gnBq4g2vp2fTiw=
Subject key identifier: 97:83:60:34:67:51:E4:8C:4A:46:6C:73:6F:C0:B1:F3:2A:4B:F5:CE
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial: 0395
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
Manifest number: 0383
Signing time: Wed 29 Jul 2026 01:34:11 +0000
Manifest this update: Wed 29 Jul 2026 01:34:11 +0000
Manifest next update: Wed 05 Aug 2026 01:34:11 +0000
Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: QU255HX6IkW4g/8gGNcrqjFFssNimRr9dvKvgetkzSk=)
2: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: 2bSuW/W2EAJDExuMn72UQi0Hj4wXVmW13H/TPfYijPA=)
3: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wgip0DQGeaZ0QNSC6Osjp3LdtBXVxXRo5X2o3r8AIKo=)
4: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: BahbEschYMgJrMF0BLS9CUwIvpM5/L/G8tn8FPtp9ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Validity
Not Before: Jul 29 01:34:11 2026 GMT
Not After : Aug 5 01:34:11 2026 GMT
Subject: CN=6a695893-ee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:f1:f7:86:2a:bb:6a:e1:2a:71:c0:44:b6:
c9:04:5f:22:0e:36:32:23:b9:f7:9f:d6:f0:20:3f:
47:2a:8c:33:6f:42:00:18:64:8e:78:46:fd:e7:47:
ad:e5:3c:0a:f0:7a:1e:a6:b8:23:41:78:6b:4a:70:
63:bb:04:ce:c4:16:8a:35:d5:fa:f5:21:56:2f:6c:
68:47:5a:45:21:4b:da:1e:57:cd:02:84:21:e2:7a:
5e:a9:9d:4b:51:60:37:b5:e7:ba:2d:52:a1:f2:6b:
93:eb:d0:33:f4:cc:77:64:26:7c:aa:81:7a:0d:54:
74:8f:05:0e:73:db:f8:05:70:ab:7e:5a:85:04:ce:
e0:b1:8b:ae:d5:3a:98:5d:28:24:27:6b:0a:1a:8c:
44:c1:9d:58:3f:d7:75:e3:12:51:a6:64:fb:a0:0c:
54:54:47:1a:cf:43:a8:20:e5:68:c2:79:df:cf:c7:
f8:f8:93:e8:cc:90:3a:97:0f:55:02:fb:30:78:00:
5d:71:cb:a0:0b:d4:7b:69:c8:44:cd:f4:cd:0d:6f:
0c:4e:f3:be:50:2b:e7:f6:9d:0b:11:52:7c:82:0d:
3d:90:f4:58:6d:57:a8:ee:52:90:04:2e:a0:49:61:
30:69:d0:61:2c:d8:48:c8:9d:13:2f:39:1a:94:2d:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:60:34:67:51:E4:8C:4A:46:6C:73:6F:C0:B1:F3:2A:4B:F5:CE
X509v3 Authority Key Identifier:
keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:02:46:7b:73:ee:e3:ae:52:12:f4:7b:80:2e:0c:a7:b4:4a:
f6:31:36:fb:c2:5f:87:5e:81:45:a8:f7:4e:01:dc:16:89:41:
b7:77:27:7d:03:72:23:90:f8:e1:14:51:d4:f7:40:5d:ef:57:
fb:01:ff:af:4c:2b:e4:b3:36:2e:9b:68:4e:02:a2:05:7a:04:
bd:d2:14:ef:31:23:cd:22:83:b2:7a:6e:03:c6:34:55:0e:18:
c1:7a:64:6c:f3:bd:f1:c2:41:0b:be:eb:73:b1:6b:bc:1a:72:
8c:c1:28:88:c8:6a:02:c3:ea:e7:9f:ec:91:4f:5c:01:57:29:
b0:99:09:00:af:b5:97:2c:92:48:ea:8e:fa:c8:30:19:a9:57:
b5:98:e9:d0:8d:f6:57:a4:b2:b8:43:dd:26:a8:3a:95:c2:2f:
d8:ef:ac:ca:23:12:a6:26:4a:10:73:be:2f:d1:bb:05:37:84:
54:fc:56:68:29:cc:78:d2:68:b9:7e:b5:91:1b:13:35:60:13:
cb:8b:55:2c:97:97:81:5b:3e:73:78:83:c0:cc:bd:4f:03:e5:
ab:f7:cc:8a:3e:7e:5e:6c:72:ed:1e:51:0d:18:76:97:cc:d3:
d4:0f:73:cc:d7:08:d3:17:4b:36:52:35:2f:a7:70:a5:37:24:
c3:2e:d1:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw
MDJERTMxQTkwHhcNMjYwNzI5MDEzNDExWhcNMjYwODA1MDEzNDExWjAYMRYwFAYD
VQQDEw02YTY5NTg5My1lZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWPx94Yqu2rhKnHARLbJBF8iDjYyI7n3n9bwID9HKowzb0IAGGSOeEb950et
5TwK8HoeprgjQXhrSnBjuwTOxBaKNdX69SFWL2xoR1pFIUvaHlfNAoQh4npeqZ1L
UWA3tee6LVKh8muT69Az9Mx3ZCZ8qoF6DVR0jwUOc9v4BXCrflqFBM7gsYuu1TqY
XSgkJ2sKGoxEwZ1YP9d14xJRpmT7oAxUVEcaz0OoIOVownnfz8f4+JPozJA6lw9V
AvsweABdccugC9R7achEzfTNDW8MTvO+UCvn9p0LEVJ8gg09kPRYbVeo7lKQBC6g
SWEwadBhLNhIyJ0TLzkalC22iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeDYDRn
UeSMSkZsc2/AsfMqS/XOMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE
MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5
ZmdqeVpEaURjRFVBTGVNYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaQJGe3Pu465SEvR7gC4Mp7RK9jE2+8Jfh16BRaj3TgHcFolBt3cnfQNyI5D4
4RRR1PdAXe9X+wH/r0wr5LM2LptoTgKiBXoEvdIU7zEjzSKDsnpuA8Y0VQ4YwXpk
bPO98cJBC77rc7FrvBpyjMEoiMhqAsPq55/skU9cAVcpsJkJAK+1lyySSOqO+sgw
GalXtZjp0I32V6SyuEPdJqg6lcIv2O+syiMSpiZKEHO+L9G7BTeEVPxWaCnMeNJo
uX61kRsTNWATy4tVLJeXgVs+c3iDwMy9TwPlq/fMij5+Xmxy7R5RDRh2l8zT1A9z
zNcI0xdLNlI1L6dwpTckwy7RAw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:07 2026 by rpki-client