
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json)
Hash identifier: jNnkjLWyRlaljhS1gEtIglvsipvycQyXgk/jGnTK54s=
Subject key identifier: 9E:3A:25:DB:87:E9:FF:03:32:9C:55:41:6C:E1:B7:8C:EC:90:DA:43
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
Manifest number: 82
Signing time: Mon 27 Jul 2026 09:52:17 +0000
Manifest this update: Mon 27 Jul 2026 09:52:16 +0000
Manifest next update: Mon 03 Aug 2026 09:52:16 +0000
Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: 2rANdQG10BS7hQQLpjlsji+hJerBt5u1b8Nqqkv0ttU=)
2: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=)
3: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=)
4: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Jul 27 09:52:16 2026 GMT
Not After : Aug 3 09:52:16 2026 GMT
Subject: CN=6a672a51-beb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:bf:eb:65:a0:38:bc:7a:2d:76:20:54:37:
23:f0:5c:b3:ed:80:04:1c:60:be:c0:1b:81:83:7d:
53:47:b7:4c:2d:72:41:e4:ec:93:10:23:db:a5:93:
1b:c0:bd:8f:6e:fc:03:9f:55:5f:5b:ab:bc:b2:33:
e9:bb:56:a2:db:9d:ba:69:33:88:43:f9:ca:e1:98:
76:c4:5f:c9:e8:23:67:10:a7:d0:a5:97:ff:39:c0:
01:75:22:20:90:1e:b1:7f:df:01:af:24:f4:9e:16:
5e:1d:f4:a6:d9:36:50:3b:76:67:67:25:4a:3f:12:
be:1c:85:5b:8b:3b:5b:d7:a6:b4:1f:91:25:54:ce:
5d:f0:0b:74:a9:87:ac:a9:5b:40:72:84:3e:03:4f:
4f:61:a8:04:4e:a8:36:0f:8b:e2:c3:01:f7:16:25:
ae:13:76:16:20:cb:78:d4:ec:2d:98:c2:44:ad:93:
d7:4e:a9:77:12:a7:eb:0a:b1:b3:df:1d:a3:2a:be:
a1:df:60:3d:9c:fb:88:d3:6e:f4:57:21:8c:ff:2d:
7c:1d:7b:b5:72:b8:ac:6e:ba:9b:bc:68:d9:f0:97:
04:29:0e:76:c2:d1:ef:87:97:35:06:12:f7:25:49:
88:ff:5d:62:03:ce:eb:96:29:6f:11:33:7b:fb:b9:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:25:DB:87:E9:FF:03:32:9C:55:41:6C:E1:B7:8C:EC:90:DA:43
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:62:7b:2a:ec:98:d4:9d:64:c0:a0:50:4c:d4:50:71:bf:a6:
b7:83:8c:ab:41:0f:ef:c5:13:64:2b:3b:63:e6:07:cf:8e:7f:
35:9b:0c:70:8f:c2:67:e2:57:3f:c5:73:36:62:01:08:35:ca:
91:84:60:f2:1a:68:f4:fd:a9:56:8c:63:51:d6:91:b7:f2:ea:
50:d9:90:ee:23:0f:ec:14:66:5c:3b:89:a9:2c:76:52:05:03:
ea:43:53:28:61:ec:0c:44:c0:fa:f7:c0:57:92:87:09:a0:a7:
d9:97:33:c7:5b:11:ea:49:19:ec:39:de:93:73:00:9a:23:c6:
33:85:f1:e4:be:26:de:da:6f:fe:a6:c0:c6:3f:89:c1:28:ba:
75:36:f5:39:ad:c3:e7:6b:5e:6e:17:72:b5:49:44:cf:43:f8:
c8:c9:81:39:43:16:bd:47:99:d0:88:f1:59:eb:b2:c6:46:d2:
b2:60:f3:0a:fa:63:7e:4d:9e:3b:09:54:f0:3f:97:ed:8a:be:
9f:56:1d:69:27:b9:92:9c:95:91:ff:90:86:9a:ec:0a:10:46:
b1:fc:1d:ac:a6:5a:60:c1:2b:b3:cc:4f:24:9f:c2:f0:ab:78:
2e:4c:99:e7:f8:2a:7e:ea:85:49:83:b6:ab:b5:82:60:81:02:
32:0e:e2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:18 2026 by rpki-client