
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
File: 8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json)
Hash identifier: YXlM+BwloDugcPvz3uOibOXK1gL0KGXqxVTROP4C5GA=
Subject key identifier: D0:8A:36:D7:14:77:B8:E8:8C:9C:6A:A8:D7:07:49:A7:15:5A:0F:67
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Certificate issuer: /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
Manifest number: 05C9
Signing time: Fri 18 Sep 2026 22:58:12 +0000
Manifest this update: Fri 18 Sep 2026 22:58:11 +0000
Manifest next update: Fri 25 Sep 2026 22:58:11 +0000
Files and hashes: 1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: Eg+A+zJ9GS6CBjkNYZwJ8FJ23M1E32sL72JVd7lSWzQ=)
2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: JC7lbeFnRnICzkSYuKq2WaMSqXlPZ3bBUzx31GKWCuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Validity
Not Before: Sep 18 22:58:11 2026 GMT
Not After : Sep 25 22:58:11 2026 GMT
Subject: CN=6aadc203-7935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:75:88:e7:34:e6:1b:5e:35:00:00:b9:76:
56:74:89:51:d0:47:9b:69:fe:44:de:da:aa:2a:ec:
ca:e1:df:ff:ea:87:7c:a1:4f:3a:7f:89:08:66:dc:
b1:66:04:b2:44:0e:fa:e1:5c:79:79:7e:85:51:2e:
53:60:45:f3:d1:30:af:d9:0e:8f:1e:12:58:a7:21:
a8:00:79:30:07:b6:fd:38:df:93:8f:92:46:d0:6c:
64:66:5c:67:dc:57:d5:09:91:c3:4d:f4:ce:e5:30:
1b:9f:51:0c:87:07:9b:fa:3c:80:cb:e5:0a:89:06:
ef:a9:ac:b4:51:c0:f2:32:dc:8b:5b:f1:e3:38:a5:
f3:09:2d:ad:d7:46:ee:45:0e:a3:45:21:ca:29:f0:
c1:a4:8d:b9:66:80:1c:3a:d4:b6:20:84:21:72:f7:
03:d3:82:2b:74:f0:4a:aa:07:e9:bb:82:c3:1b:45:
3e:51:7f:2a:a2:3a:74:3c:78:52:66:03:73:a0:f1:
11:b6:e3:b3:7e:74:1c:b0:a8:97:97:2c:d6:f7:71:
47:26:f4:a5:4d:f2:02:3a:ad:ef:06:b5:48:82:53:
f2:73:d9:2e:26:43:39:ad:42:a4:57:6b:83:fb:7b:
15:3b:96:26:78:cd:46:60:83:3c:ee:ea:a5:8a:a7:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8A:36:D7:14:77:B8:E8:8C:9C:6A:A8:D7:07:49:A7:15:5A:0F:67
X509v3 Authority Key Identifier:
keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9f:39:f7:34:9b:23:bf:7e:07:d2:34:cf:29:ec:11:5c:85:
80:f0:83:55:9a:67:0a:56:ba:7e:26:1d:de:bc:7c:31:a7:27:
69:db:26:94:c0:b2:82:7d:61:18:85:a8:ed:20:1f:00:b1:4c:
80:f8:79:f1:2b:85:3c:27:af:e5:b1:6c:75:49:05:5e:18:41:
4d:43:1b:66:dd:f4:7b:88:5c:bc:a3:30:fc:ed:86:62:44:9e:
b7:da:ee:30:33:b7:03:02:2a:27:65:ef:91:25:2b:ba:3c:98:
93:8e:b0:14:29:39:3c:5d:68:b9:64:e5:ec:55:73:af:5d:9e:
76:07:31:d3:9f:38:fa:09:7e:1b:68:88:74:69:f0:b5:4f:76:
4f:d9:09:ac:68:cd:9e:30:c7:9d:3e:0b:8c:b3:4e:3b:e4:08:
64:04:bf:a8:12:1f:4e:52:27:36:c8:4a:10:1c:d1:25:4f:55:
b1:5e:3c:4e:cf:2c:1a:d1:45:51:5a:d3:74:70:c2:87:e8:bd:
e8:93:ac:fc:1e:cb:46:79:52:22:9e:4d:45:83:ec:8d:89:10:
d8:34:a6:b3:9f:c9:a7:6d:56:a4:31:89:f5:91:e7:c4:20:96:
2f:f8:00:49:09:43:9d:b6:fd:39:89:da:ae:39:56:57:f4:8c:
87:bc:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:57:04 2026 by rpki-client