
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
File: 8WJXDJs0J9iIMy8qJEOCiAfghyM.mft (raw, json)
Hash identifier: wNSgNbe2TIotsimb1ivu+V09yAXnwmuVl9O8cxIWCrM=
Subject key identifier: CA:59:46:62:73:B9:21:CF:1D:03:DD:72:25:AC:CC:7F:41:F1:0B:6C
Authority key identifier: F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23
Certificate issuer: /CN=A91EA850/serialNumber=F162570C9B3427D888332F2A2443828807E08723
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
Manifest number: 59
Signing time: Sat 13 Jun 2026 08:17:51 +0000
Manifest this update: Sat 13 Jun 2026 08:17:50 +0000
Manifest next update: Sat 20 Jun 2026 08:17:50 +0000
Files and hashes: 1: 8WJXDJs0J9iIMy8qJEOCiAfghyM.crl (hash: 9ZQE6OBrXQHoW2yn3H5D8N96QyiYmczt/PIY4TgXPi0=)
2: 59A00586ED3B11F0828F39A04B6F56BC.roa (hash: EgWrQHGbU31Uz75+qWGvTeIJzWumnz7hpQn1ooNpH0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl
rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA850, serialNumber=F162570C9B3427D888332F2A2443828807E08723
Validity
Not Before: Jun 13 08:17:50 2026 GMT
Not After : Jun 20 08:17:50 2026 GMT
Subject: CN=6a2d122e-33b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:c5:43:dc:ae:01:fb:61:0c:18:ee:fb:3b:
a9:3d:2f:5a:32:78:d1:f5:81:9d:2d:28:36:91:5a:
6d:97:34:2e:0b:cf:33:57:ce:9a:a5:33:37:ae:14:
eb:57:82:3d:5b:0e:7d:c1:2b:bf:de:bd:cb:4e:37:
82:a9:f5:cf:c4:4c:5a:a0:18:b3:52:22:db:05:9f:
13:fa:af:e2:94:2e:e2:3a:b4:81:90:06:23:7b:a4:
62:96:ad:ab:db:a2:63:1b:c0:1e:04:df:5c:ca:35:
fa:92:cb:c4:d6:21:07:c9:21:9a:9f:c0:63:a0:45:
17:7a:b2:5e:d8:30:fa:3c:4e:67:d3:78:05:25:1a:
ac:3b:0f:4e:fd:ad:09:b3:62:80:8e:29:a8:dd:07:
11:54:7d:ac:87:7c:d9:79:d6:9c:4b:d1:38:93:1b:
8c:73:9c:ed:82:42:39:45:d5:a1:a0:fe:a8:61:b2:
e5:49:ab:62:ba:90:32:fe:52:5d:57:3b:ea:44:d6:
3d:17:26:fc:a4:b4:1a:f7:8b:0e:90:0d:57:d5:f4:
68:73:07:a6:0b:75:28:5d:d4:de:e4:24:ca:45:5d:
23:8e:a6:10:c2:71:26:2f:d2:d5:9a:a4:b8:50:39:
5c:bf:7f:7d:64:04:f8:cb:07:83:d7:76:43:67:9e:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:59:46:62:73:B9:21:CF:1D:03:DD:72:25:AC:CC:7F:41:F1:0B:6C
X509v3 Authority Key Identifier:
keyid:F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:7d:7a:d5:a1:4d:89:a9:df:17:4d:d9:e5:d4:a5:af:65:d6:
7e:68:b2:7f:9d:88:63:35:55:3e:35:75:c9:8c:59:dc:e4:eb:
91:8d:ae:e2:7e:b3:80:4a:33:5a:2f:f4:d9:87:81:e4:49:11:
d3:6f:3e:08:dc:e3:75:cd:4c:d3:aa:d4:0a:aa:75:29:82:0d:
8c:e3:80:ec:3a:4f:6b:c3:97:07:6c:8d:ee:4b:aa:fc:af:1f:
eb:e6:bb:7a:2e:a8:e9:f8:b1:34:f4:b2:b0:f2:34:15:29:cd:
a0:48:c2:31:83:e3:40:46:9e:63:a6:12:b2:a7:6a:b9:bf:5c:
35:5b:e5:2a:7c:1e:ff:f7:1e:fa:20:7d:12:43:91:d5:61:63:
7d:c1:e7:5a:cb:0a:90:3f:30:30:8d:6a:09:02:ad:1a:21:4f:
44:33:ab:8d:e1:01:66:90:6a:a2:db:53:0d:b9:94:95:14:06:
b8:bc:0a:76:99:9f:b9:ae:be:6b:54:ba:73:33:c8:f2:ed:ba:
1e:e6:e1:bb:a5:62:db:80:2a:ab:87:61:2c:91:0c:bc:5b:18:
6b:bd:4c:df:32:b4:a4:a4:1c:77:1b:85:f0:50:8b:fb:7a:62:
a1:8d:82:f8:36:f1:ca:8d:90:25:f8:a4:38:e2:27:cc:67:d4:
93:86:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:42:49 2026 by rpki-client