
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft
File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json)
Hash identifier: IdO+WvaMKWa4xErWIQFiBo7Irf94tUutcRzjEBV8oAA=
Subject key identifier: 68:9B:9C:F2:BD:E8:42:99:07:F0:85:FA:52:20:2B:0C:67:08:AF:9D
Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D
Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D
Certificate serial: 080B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft
Manifest number: 07FF
Signing time: Fri 12 Jun 2026 21:16:56 +0000
Manifest this update: Fri 12 Jun 2026 21:16:55 +0000
Manifest next update: Fri 19 Jun 2026 21:16:55 +0000
Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: ocD8wjAyHL6at0ofG4ZeosY0ZHV1R/NswWWooL3cn+E=)
2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: CCeYRNeMxbpOCPaIE3BqCoWORj/K4Cmf/wyUKaeIcyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl
rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D
Validity
Not Before: Jun 12 21:16:55 2026 GMT
Not After : Jun 19 21:16:55 2026 GMT
Subject: CN=6a2c7748-9e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:c2:88:a8:13:bf:d5:b9:7a:a6:11:f9:91:
7f:f2:e2:e2:7d:a5:05:2f:bc:9d:28:4c:9f:1d:6d:
71:8e:2d:7a:c7:3d:78:2a:5c:93:10:bf:24:1f:12:
29:f2:dd:4d:bf:29:4d:55:55:30:3d:3c:78:e2:16:
78:88:ad:02:03:eb:ef:30:08:b7:e2:35:7d:e4:77:
d7:2c:99:3f:7d:58:5e:52:0f:c0:d7:1b:1e:27:cd:
b7:a4:a9:b5:92:84:b6:fa:52:c2:68:d4:5b:e9:e1:
24:62:6f:46:a5:f0:83:38:55:cd:cc:67:f7:4a:31:
65:01:e5:2d:98:bb:e4:06:21:39:a3:52:0f:94:dd:
00:fd:48:53:9b:58:88:cb:b1:30:9e:ad:d8:07:72:
20:a4:3d:0f:4e:cf:97:21:5d:99:2a:97:46:e9:51:
f7:9c:23:32:94:81:97:da:7c:00:a4:37:d6:1f:d0:
e8:b9:99:1b:c0:e5:c6:bb:62:ed:ce:6b:0d:36:65:
50:91:60:ff:99:cf:f6:7f:44:a3:6c:56:a7:ca:9b:
69:3b:d3:38:51:23:65:31:eb:e8:e0:de:3a:fb:ae:
50:d6:1a:b7:4b:59:6a:fa:da:28:2c:d2:b5:eb:8d:
c8:91:4c:67:c0:f9:f9:9d:d0:d3:d0:0f:d9:a3:3f:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:9C:F2:BD:E8:42:99:07:F0:85:FA:52:20:2B:0C:67:08:AF:9D
X509v3 Authority Key Identifier:
keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:87:7a:74:ab:6e:16:8e:54:22:79:6c:00:69:63:56:c8:2d:
37:23:31:15:49:fb:b0:cf:2e:30:24:a4:fd:6d:88:9d:4a:cb:
eb:ac:0f:36:bb:44:56:2f:1d:67:01:bb:82:2f:c8:0c:35:21:
55:b7:cc:cf:31:0e:17:60:c6:3d:fa:d9:80:5d:29:9a:39:b2:
ff:e8:65:c8:72:10:25:4b:c1:18:fd:ef:45:8c:99:71:98:3a:
d7:76:dc:58:d3:0c:37:e5:54:16:14:cc:7b:a3:59:0f:99:68:
b6:ee:fe:48:83:b6:e5:b6:f8:c0:6c:47:16:a9:e2:96:4b:37:
17:91:3d:a9:07:79:0a:ca:a4:32:27:93:cc:86:e8:41:f8:ae:
dd:e9:9c:13:b9:87:cf:2c:42:1d:3b:83:49:7a:b0:51:db:54:
aa:c1:80:35:f0:04:6a:42:ec:1f:c1:70:29:3f:87:55:58:7f:
35:dd:8a:a2:c1:35:58:61:c3:fe:1f:8c:6f:31:35:b2:c1:77:
18:93:fc:00:a7:ef:69:ae:c5:46:24:b1:e6:fa:5a:bc:e3:5f:
5e:dc:69:18:a1:7a:4c:45:10:58:0c:83:b5:6b:11:a9:3c:9b:
04:cb:d0:30:38:d3:df:a1:dd:dd:cc:02:4b:80:b1:35:e6:9b:
38:83:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:36 2026 by rpki-client