
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
File: 8ghPeg88CpH4Jf79nxA18zVBWEw.mft (raw, json)
Hash identifier: hp3Kxs1tUY9ySZlVYt5doaySD+kFOXSzTSQP0Vk4CiU=
Subject key identifier: 39:80:0E:CA:FA:AB:AA:34:77:01:4B:AC:84:ED:81:B4:5D:8E:5A:74
Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
Certificate issuer: /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Certificate serial: 02FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
Manifest number: 02F2
Signing time: Mon 27 Jul 2026 02:24:05 +0000
Manifest this update: Mon 27 Jul 2026 02:24:05 +0000
Manifest next update: Mon 03 Aug 2026 02:24:05 +0000
Files and hashes: 1: 8ghPeg88CpH4Jf79nxA18zVBWEw.crl (hash: TIoW8jB4QQa2WNdv7HGaEXACpzZajurs6BR+5O6MVa4=)
2: EF0EFF5833F511EDA5C4F37DC4F9AE02.roa (hash: IG2v2fd9rTN5PBYJp2Z5UyST9QDIg6t5w3Te4y8DFac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAEAF, serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Validity
Not Before: Jul 27 02:24:05 2026 GMT
Not After : Aug 3 02:24:05 2026 GMT
Subject: CN=6a66c145-5478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:f1:8d:b8:bf:95:89:12:aa:70:13:12:af:
d2:76:36:6e:5c:b7:c9:ff:9b:ef:92:ae:9b:f1:39:
5f:70:ff:51:e0:54:00:ed:9d:e3:0a:d9:89:e5:6d:
33:18:d7:e9:bc:9f:1e:ff:80:db:6a:ce:c2:62:64:
09:d9:66:63:94:e1:5b:3d:62:f1:52:1b:02:3e:7a:
3a:2b:8b:ef:60:37:b2:22:09:b7:76:b0:01:47:ad:
4c:13:af:73:34:b3:62:69:4c:1b:6b:db:6a:8d:db:
58:18:50:22:49:6d:f1:e1:53:1d:dc:b2:9c:11:9e:
d3:bc:b7:89:50:d0:78:3a:de:e0:1b:ab:ea:a0:70:
48:f5:6d:5f:44:fb:cd:36:8e:ce:b0:a5:4a:73:39:
1a:93:75:51:45:62:47:de:c9:8c:62:e8:ba:f3:f0:
b5:02:e0:f3:39:4a:62:c2:92:85:13:2d:b3:3a:5b:
34:71:4e:af:22:5d:95:4f:22:2c:4a:21:7e:46:f8:
3d:1d:3f:58:e0:00:6e:76:35:a7:9a:19:8c:8c:91:
34:e3:6a:68:3e:f5:5a:dc:9a:3e:8d:6d:a3:ff:94:
27:af:d9:09:95:5f:00:98:93:3a:2b:84:a6:c3:57:
aa:65:94:2d:89:bf:e4:09:10:f8:12:54:13:6e:76:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:80:0E:CA:FA:AB:AA:34:77:01:4B:AC:84:ED:81:B4:5D:8E:5A:74
X509v3 Authority Key Identifier:
keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:2d:a0:84:8b:6c:b6:e1:98:e5:d0:b9:16:4a:44:ff:72:f2:
c4:08:03:2a:29:0b:36:44:b2:86:ff:82:56:16:8b:23:c8:bb:
f0:28:10:91:1a:64:9b:5a:4c:9d:4a:e4:8b:8c:01:9a:3c:e2:
30:aa:cb:7d:05:dd:18:04:b1:a7:d4:b0:fa:28:cd:e1:f1:37:
c3:8f:8d:ca:47:81:a3:dc:dd:ef:43:6f:30:27:b1:31:96:f0:
b2:91:e0:cc:88:7d:da:63:e2:32:09:61:17:17:de:b7:47:39:
8d:2b:0b:e3:6e:5b:5a:19:b7:86:ce:09:a3:9f:64:03:d0:47:
ab:e8:05:3e:14:6f:f1:61:81:b2:b3:7e:21:00:f5:75:5a:5c:
e0:c6:73:f4:cd:9e:ec:bf:11:f0:df:5e:f7:cb:d1:ee:c4:9c:
b9:6e:ce:17:b4:35:fa:36:f6:f8:53:d8:c0:7a:73:33:4d:c1:
b6:fa:80:ee:ef:cd:99:23:bd:f5:e5:0f:b9:3f:8e:e8:e6:43:
3f:4f:aa:b1:73:6d:51:80:1a:39:b7:50:88:73:40:50:ce:6d:
df:0b:5c:bf:d1:10:29:29:a4:4a:66:d9:66:9c:d3:9e:93:a4:
f3:1e:12:cb:ee:b1:9d:75:22:81:23:c8:3d:4b:d6:8c:dc:e5:
17:95:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:27 2026 by rpki-client