
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json)
Hash identifier: Fq3sMzpTIpoDpgls+JNe7APTr8ASc4bb8jS7u5ERkoc=
Subject key identifier: 8D:B9:2E:53:1C:7A:3B:ED:37:9F:B4:C6:9D:F9:50:43:8A:A6:56:FB
Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Certificate serial: 0D1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
Manifest number: 0D13
Signing time: Fri 12 Jun 2026 18:10:21 +0000
Manifest this update: Fri 12 Jun 2026 18:10:21 +0000
Manifest next update: Fri 19 Jun 2026 18:10:21 +0000
Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: 2oNd2dIUpOlaWE9eyt0fYcv6NMVyzvVf5kwApxDQjTo=)
2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: h96ygBqP1HseQXwwUH62n5eNi2bKC3tu8QpUrxfOlvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3358 (0xd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Validity
Not Before: Jun 12 18:10:21 2026 GMT
Not After : Jun 19 18:10:21 2026 GMT
Subject: CN=6a2c4b8d-2cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:34:b1:61:5d:5c:7a:8f:c6:80:31:bf:71:
4a:78:ca:d9:f0:4e:47:56:c7:b2:0e:8f:2d:93:98:
e6:eb:ee:72:06:68:cf:e4:de:ce:61:ec:c1:66:a6:
79:fd:90:a8:32:f7:f7:06:83:1a:da:15:9e:13:c7:
64:a2:92:0e:1e:81:d8:58:16:2d:13:27:fe:45:c5:
7e:fe:c6:48:97:bd:d2:ee:94:28:88:7c:2f:95:65:
ef:2b:c3:5c:f1:47:d8:ed:e3:15:99:52:db:4c:1c:
fd:f0:53:a9:b2:94:06:09:2a:ae:2c:60:2d:1c:00:
dd:50:7a:23:c8:00:f7:6b:58:6a:50:8f:56:e6:1e:
0c:fa:37:06:c4:8e:98:a5:e8:55:47:68:d8:b7:c8:
ff:60:67:6b:dd:c3:b2:ff:cb:73:00:38:e1:9b:bd:
21:e5:40:79:18:1b:55:c3:4c:4a:21:a1:de:a8:c3:
89:cf:37:bc:2a:16:63:14:c8:8f:34:ce:4d:a3:75:
98:d8:60:f1:65:62:22:44:be:cd:d2:33:84:ed:0f:
e2:b1:cd:12:6e:68:3d:1f:43:a8:f7:f7:5e:ce:09:
d9:81:d8:73:3e:8d:7c:e6:45:bf:3c:d8:0f:af:bf:
10:d8:02:b9:3e:5c:74:28:a4:e2:ba:9b:e2:38:f2:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:2E:53:1C:7A:3B:ED:37:9F:B4:C6:9D:F9:50:43:8A:A6:56:FB
X509v3 Authority Key Identifier:
keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:d0:94:88:13:c0:b3:54:a0:9d:d7:c0:44:20:67:36:f8:51:
4c:b1:ae:b6:8a:4c:56:4c:ec:57:88:92:95:44:ca:86:a7:1d:
30:80:0e:3e:13:76:80:86:36:27:a8:32:1b:6e:69:1d:27:c6:
72:e6:ca:9e:38:42:7a:13:72:4e:ae:42:aa:30:3a:e3:d5:9a:
ec:de:02:2d:0d:46:9a:8a:f3:71:c5:36:07:5a:de:28:5c:aa:
22:eb:08:da:53:5a:c4:17:7a:44:c0:a6:2f:52:5e:0f:4a:9e:
15:7a:c1:78:b4:b1:bd:35:f6:d8:de:0b:49:7a:4b:24:33:c3:
55:4d:7a:c0:96:64:c3:a1:9f:af:9f:de:1a:f1:68:b8:37:e3:
08:3e:45:f3:49:35:cc:1a:0b:dd:6d:b9:49:1a:7d:30:8b:bc:
a0:2b:22:3d:45:8d:a4:b8:e1:16:ca:23:f9:ca:a0:ae:09:9d:
76:1d:38:ae:25:04:a1:0d:11:dc:09:61:ad:55:47:1d:7e:fe:
78:3f:53:af:bf:b3:98:8a:6d:59:33:0d:ab:29:4d:99:d5:91:
23:34:2e:09:61:63:78:3b:dc:95:18:45:30:ce:d0:ac:a1:90:
1c:ad:2c:17:0b:23:6a:86:fa:f5:4e:22:d3:a5:a8:ab:62:0c:
9b:7a:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:06 2026 by rpki-client