
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json)
Hash identifier: TMCSL5xzLYfZ5RwoXJTmHY9ei38mee2sV8JOkQo6axg=
Subject key identifier: B9:02:9C:81:66:3B:24:9A:CB:2F:28:EC:91:97:97:C8:30:B1:7C:4B
Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
Manifest number: 8C
Signing time: Mon 27 Jul 2026 09:41:19 +0000
Manifest this update: Mon 27 Jul 2026 09:41:19 +0000
Manifest next update: Mon 03 Aug 2026 09:41:19 +0000
Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: OH+9Hjn8jalNOsJLcpHO534OkImgqySnwd1Hw3CJTFc=)
2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Validity
Not Before: Jul 27 09:41:19 2026 GMT
Not After : Aug 3 09:41:19 2026 GMT
Subject: CN=6a6727bf-f5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:09:da:b2:b9:17:77:bd:b1:21:d7:50:d2:
fa:19:60:72:59:0d:d8:36:72:b5:09:48:26:be:36:
27:37:2d:f2:34:33:88:1f:ec:f7:26:fa:01:09:a8:
2e:d2:ff:90:9b:2a:9e:61:eb:94:a4:b2:30:96:e3:
88:ed:84:20:d3:18:90:fa:9c:16:e7:84:0b:40:df:
94:0e:bb:c5:ef:07:9d:24:29:25:69:ca:95:ac:c5:
77:2c:66:38:0b:57:ab:27:4c:fc:13:d0:13:53:97:
be:68:dc:bd:2c:7a:22:5b:30:bc:9c:c9:8b:0e:30:
84:1f:17:80:77:21:57:76:18:fa:26:75:d0:9d:6e:
4b:cc:6d:5b:1f:95:28:40:15:99:20:5d:73:2b:38:
79:a8:97:70:63:c7:11:98:c7:5a:a0:3a:07:2b:e7:
da:e4:d0:09:7a:1c:34:ce:69:5e:a7:f2:a5:e3:85:
15:a9:76:97:b0:2d:2e:3c:62:94:4c:9d:c0:22:34:
1e:49:f5:79:5b:42:34:2b:c8:02:e2:54:55:16:75:
7d:66:ce:f3:52:c8:e8:7c:d7:2e:37:0a:a6:36:43:
4f:55:2c:b4:30:0a:8d:68:4b:24:25:f2:78:aa:c7:
38:cf:7c:c6:4a:61:8c:e1:ae:04:6e:7a:77:51:50:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:9C:81:66:3B:24:9A:CB:2F:28:EC:91:97:97:C8:30:B1:7C:4B
X509v3 Authority Key Identifier:
keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:13:ac:30:22:5d:0f:4c:73:6e:30:eb:05:52:90:8c:0e:c9:
de:0c:fb:cc:d8:3e:c4:1b:b8:01:dd:e4:34:3f:9d:6c:61:b4:
23:da:73:8d:d7:c2:9f:8b:ed:22:9a:2b:cb:8b:38:37:08:2b:
bc:de:dc:7a:c8:ea:fa:f1:55:9d:ac:fd:b3:16:b0:53:0a:1e:
96:46:8e:8a:23:56:57:48:78:21:bd:e3:a5:89:ec:c4:dd:ec:
33:b3:62:f5:a4:b2:b4:b3:68:5c:f6:54:23:ca:2d:1f:3f:5f:
ca:1a:58:54:f4:a9:7b:6b:85:a0:38:a8:b3:f8:14:c4:24:3b:
29:fd:a8:2d:b8:53:6c:79:9e:e8:24:bb:5b:69:c9:81:58:b8:
48:2f:2e:fe:a0:73:b9:c9:d6:44:1a:d8:e0:f8:a7:5a:f6:01:
71:09:82:96:e5:1f:4b:b9:1a:a7:6c:41:c9:c2:ac:4e:87:69:
08:3c:77:d7:c4:2f:6d:7a:cc:4b:06:02:e2:78:5a:4d:33:d7:
2a:bd:16:0b:a1:74:53:70:fe:77:17:b7:a8:10:8b:65:7b:31:
7c:e3:55:83:4d:c4:9f:91:26:14:71:e9:6a:c3:f5:3b:89:aa:
3e:84:d0:81:c1:70:79:41:ad:a7:a9:1d:17:e4:26:ea:1c:c4:
c2:c2:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:29 2026 by rpki-client