
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
File: f8xPf-awzDq4ikFPiUwnT6ebK4o.mft (raw, json)
Hash identifier: e6ni+K+zWU/V8vhombxbIMISEpT4jCdbLqAOmrvo0M8=
Subject key identifier: DA:37:E6:2A:CB:03:0D:19:9F:E2:9B:26:EE:36:2E:A0:07:05:DA:96
Authority key identifier: 7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
Certificate issuer: /CN=A91DB6F5/serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
Manifest number: 0B
Signing time: Mon 27 Jul 2026 11:33:36 +0000
Manifest this update: Mon 27 Jul 2026 11:33:35 +0000
Manifest next update: Mon 03 Aug 2026 11:33:35 +0000
Files and hashes: 1: f8xPf-awzDq4ikFPiUwnT6ebK4o.crl (hash: XxjBg5ZYOzOCsZN14IVZip6rfca3fJWckftuJrG+yGs=)
2: FB8302CC7B4311F1A6C72CC794A30FBC.roa (hash: O3P+wCLcSaZeVnz8hU5Gns4U/UBq9VDtYeZsJeUmjAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6F5, serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Validity
Not Before: Jul 27 11:33:35 2026 GMT
Not After : Aug 3 11:33:35 2026 GMT
Subject: CN=6a674210-ffa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:50:af:bd:d0:10:f2:ad:11:5a:26:40:85:
a7:da:3e:2c:69:05:a8:3e:bc:8d:cb:ee:d0:5d:4a:
9f:fc:7b:f1:f7:7f:7c:f3:e9:b1:b0:c7:bc:63:9d:
8c:39:c6:f4:29:2e:6f:b7:1c:46:95:14:7c:1f:96:
9f:3b:d6:1e:b7:17:7b:41:ce:9f:b9:91:eb:12:ea:
c3:49:d2:b1:db:4c:60:7a:40:cd:11:5e:dc:20:1d:
2e:bc:48:24:7e:1f:ff:48:18:b3:43:41:e4:dd:f0:
a4:c9:e0:57:a6:c7:a2:45:c5:2b:9b:78:ae:5e:28:
38:4d:24:98:d6:e3:50:a5:b0:b2:87:7a:a3:3e:7a:
20:bf:42:65:ab:bc:e6:89:64:2a:d5:9b:03:06:66:
0c:49:c2:96:b9:01:f8:f7:ff:0d:eb:9c:52:c9:76:
85:43:9c:fb:48:b8:26:2a:e1:db:de:88:96:d4:77:
92:68:b8:98:50:f4:9e:b2:1e:4e:6d:6f:2b:9f:7d:
21:06:50:0e:5f:1c:81:7b:48:15:d5:1f:6d:1d:f5:
68:db:0a:26:c7:72:ee:6a:64:f4:d7:24:69:44:4c:
21:98:e3:70:64:1b:80:4f:e8:dc:63:07:70:a6:d9:
c6:b8:37:50:75:0b:01:e6:04:be:58:f4:e3:c4:67:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:E6:2A:CB:03:0D:19:9F:E2:9B:26:EE:36:2E:A0:07:05:DA:96
X509v3 Authority Key Identifier:
keyid:7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:f3:7e:d9:af:68:e8:39:63:ae:7d:f2:ef:64:56:37:e9:69:
59:29:7f:65:a2:1b:7d:71:ec:85:bc:ec:76:fb:e5:ab:a7:d3:
5a:5d:b0:c5:1a:07:f8:6f:15:c0:fa:b2:ea:97:02:23:26:e8:
cb:6e:8e:de:59:df:b7:58:7f:8f:3a:9c:89:f5:74:07:ff:80:
94:af:04:b4:bd:26:b8:95:11:65:bd:2f:11:22:ae:0d:45:61:
80:4b:97:4c:46:24:2d:a0:f4:49:4c:9c:33:ba:66:9b:20:ef:
53:c3:58:33:65:50:65:92:87:33:9d:b3:dd:fb:da:d5:c8:29:
a4:84:38:cc:bd:9c:79:15:ff:1b:88:8e:f7:ee:70:89:ed:ca:
47:a1:df:2d:33:9f:74:ee:05:81:73:ba:ae:26:99:37:29:35:
9d:34:ac:90:79:8b:cb:ac:40:72:8d:0f:d7:92:0d:53:e9:0e:
c0:61:01:16:24:c1:e4:52:a4:b3:78:2c:57:7b:3d:e7:09:51:
78:2f:16:98:00:57:03:9d:58:29:c1:84:af:b8:33:e2:8c:d6:
e1:bb:00:a4:2a:29:1c:41:c1:74:b2:4c:e4:87:00:cf:8b:61:
c6:b4:12:1d:4b:ab:d2:ff:5d:64:bb:c5:63:3d:17:13:77:d8:
28:75:05:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:40 2026 by rpki-client