
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json)
Hash identifier: QqY9/DZQgPqmxXibzuQx2Mx+MykT4KONZFPlJYRQXYI=
Subject key identifier: 67:7E:37:35:55:E7:ED:79:F7:6B:C7:AC:0F:FD:84:20:0F:37:A7:1C
Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52
Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
Manifest number: 8D
Signing time: Tue 28 Jul 2026 14:48:14 +0000
Manifest this update: Tue 28 Jul 2026 14:48:13 +0000
Manifest next update: Tue 04 Aug 2026 14:48:13 +0000
Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: x5xiREwvbyPR3ZWtOd1aKBKM1ZmKrOmO3HQD4BPgj9E=)
2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: 2fuL5HR83y1lHVu02OBTTtqwAHQ9hwGuikZsXGexJqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52
Validity
Not Before: Jul 28 14:48:13 2026 GMT
Not After : Aug 4 14:48:13 2026 GMT
Subject: CN=6a68c12e-1d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:e4:17:37:a8:89:9e:f1:4b:a2:67:54:8b:
1e:f6:45:79:ac:02:e1:ed:f1:a8:97:0d:16:ed:87:
d3:75:8b:b2:86:4b:28:db:2a:0f:a5:cc:60:e8:df:
f7:50:b2:2e:85:91:26:7c:41:46:21:c1:27:44:0a:
80:fa:5a:b3:86:04:28:6c:96:d5:60:a6:3d:af:63:
f8:94:fe:5c:73:a5:90:8c:11:d8:12:ab:5a:a1:80:
4c:b7:78:39:a1:1d:17:9b:95:b2:06:78:49:56:3f:
e8:9f:33:ad:a1:4c:d3:cc:a9:92:1c:97:7d:be:f4:
9e:79:33:83:4e:55:fa:2b:e8:5c:4f:e1:58:75:5c:
0a:48:01:f5:12:0b:e4:93:f5:7c:b6:6b:17:84:51:
0a:b9:1f:c4:8b:f1:e3:10:fc:d5:d2:e3:c6:f2:45:
f5:77:f6:7d:35:6d:e2:a4:87:83:0b:34:5a:01:ec:
1d:fd:a9:f9:5c:9f:c2:fa:1a:a5:a9:c2:f2:70:c0:
c2:d3:f9:bc:27:df:ca:6b:32:f4:9a:75:3c:3c:80:
de:85:2a:c5:a5:ad:14:4f:f2:74:40:2f:a1:e0:41:
cd:e8:61:b7:a7:a3:b7:49:aa:3a:ee:b3:79:23:8a:
09:12:cc:e6:ef:24:c3:44:c1:31:82:38:6a:4b:cb:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7E:37:35:55:E7:ED:79:F7:6B:C7:AC:0F:FD:84:20:0F:37:A7:1C
X509v3 Authority Key Identifier:
keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f7:20:9c:fb:b5:a9:1d:6f:6c:dc:f3:5f:40:54:54:09:bb:
08:41:ec:4a:9a:19:01:2a:ff:f6:2e:ee:46:3d:12:11:3d:01:
bf:5e:d3:07:a9:63:15:b3:9c:68:92:da:54:d4:6b:a9:13:b0:
24:e6:9f:ac:c3:c9:15:73:b8:87:18:b2:8c:2c:00:98:be:47:
94:fe:e7:b0:c0:6d:5b:3f:13:77:bf:83:72:23:18:a6:f7:81:
c1:8f:90:f6:60:03:1b:0a:9b:45:4f:71:33:2b:9d:6f:4a:8a:
8c:f5:9d:7d:7e:13:83:b4:54:5e:49:98:b6:91:3c:3e:d6:ba:
55:ee:9f:40:b4:67:a7:09:c5:cf:1a:63:7e:2a:72:b8:21:8b:
4d:d8:d6:2f:58:dc:68:eb:50:cd:4a:16:ab:70:0b:3a:1d:fb:
46:51:86:0a:79:23:b2:33:2e:50:dd:f2:3d:a2:8f:0e:96:34:
b2:fb:0e:b5:bb:54:62:c7:91:9d:f5:fd:6e:48:82:eb:8d:76:
07:b9:5e:b6:c0:9d:ef:46:2e:4d:ed:83:04:39:52:2d:19:69:
00:db:1d:8d:66:88:af:e6:3f:5e:f0:99:6c:c0:7b:1b:04:f8:
e7:d9:9c:b2:02:35:70:d3:a1:7e:6f:13:de:3f:c8:26:02:da:
c1:7c:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:39 2026 by rpki-client