
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier: 8VCqW3rlMRWX9e4RgzKT1twMxWurYDJuporFncQ86XA=
Subject key identifier: 91:6E:5B:B6:4F:43:8A:CA:81:46:C3:45:4E:46:26:C9:07:50:D6:AE
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial: 32C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number: 32C8
Signing time: Tue 28 Jul 2026 15:29:40 +0000
Manifest this update: Tue 28 Jul 2026 15:29:40 +0000
Manifest next update: Tue 04 Aug 2026 15:29:40 +0000
Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: jW4PFgpBQQ8uI0lIuuT1zf6w302AwMTlpWd+6R4f++Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13000 (0x32c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
Validity
Not Before: Jul 28 15:29:40 2026 GMT
Not After : Aug 4 15:29:40 2026 GMT
Subject: CN=6a68cae4-48c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:98:a3:aa:11:58:b2:45:19:71:85:98:4c:
fc:79:f2:ed:02:57:79:9d:5d:9c:6c:98:0a:e8:38:
82:67:f9:5e:67:a4:ba:9a:3a:4d:23:b3:6a:7d:93:
1d:f6:52:38:79:21:12:0c:86:c3:bb:7a:39:99:77:
48:7b:fd:69:49:50:f7:e5:82:a4:f2:c1:64:e5:23:
95:14:20:bb:b6:2a:27:7a:2f:1c:e8:d6:d9:ad:9f:
52:a1:98:61:9d:76:1d:93:40:03:3e:30:48:5e:19:
b1:8b:8e:5f:fe:b8:3f:4a:e0:da:02:60:0e:58:a0:
41:b3:aa:34:1b:fb:a2:7a:5a:df:e5:3e:0f:94:5b:
88:2d:13:57:eb:7d:ba:31:58:3f:e7:74:d0:52:d1:
42:fa:ee:ec:ba:e6:e2:a3:c2:ae:98:db:7f:98:a7:
d3:59:f7:03:5c:fa:ba:56:a0:c8:cb:81:62:4f:cd:
9e:b6:26:51:d1:fd:1e:18:4d:ea:d9:26:cb:5d:01:
0c:a1:57:3c:35:b6:b5:7f:5e:8b:90:a1:8c:6e:e0:
88:28:66:ca:d0:7d:a7:2f:8d:e2:3f:69:4a:2c:2a:
06:be:86:64:ad:6f:00:b1:92:e0:38:c2:43:c6:cb:
64:41:f1:31:9c:d2:17:34:25:30:22:14:52:82:cb:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6E:5B:B6:4F:43:8A:CA:81:46:C3:45:4E:46:26:C9:07:50:D6:AE
X509v3 Authority Key Identifier:
keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:3c:5d:ed:40:c5:75:a8:0f:88:46:79:cd:bc:9a:5e:45:
87:2c:db:95:73:54:ad:80:bb:21:1f:a3:ef:ca:4f:49:7f:c9:
48:81:54:b2:dd:06:5e:67:67:7b:84:32:e0:17:d5:82:79:e1:
cf:41:b9:bd:5d:5f:4c:c2:b8:16:8a:8a:bd:30:75:d3:2f:e2:
80:8b:7a:74:d4:75:c1:7f:2a:76:81:19:c9:6d:7d:2f:28:50:
59:71:e1:06:f5:58:7c:e2:82:ce:e6:f9:41:3a:24:4f:bb:6f:
96:32:69:4e:cf:bc:67:fb:0e:ca:61:21:85:5a:f2:9b:ab:cb:
1a:3b:1f:7f:39:04:dc:7c:85:88:f9:c6:f4:cf:9b:36:9f:f0:
3e:15:0d:db:94:52:d7:70:11:37:38:31:a0:8a:40:33:b2:b7:
1a:83:66:e4:3b:dc:44:88:2c:26:4a:15:d1:e9:00:5f:c5:38:
c5:79:fa:06:1b:65:85:88:50:00:ad:8b:e8:47:eb:f2:0b:6b:
04:c7:bf:7d:f5:0a:86:a6:2e:6a:94:96:d3:79:b9:f3:0f:48:
bd:3e:2d:3c:80:60:fd:85:30:06:a5:e3:35:b9:c3:57:2c:77:
c2:18:14:87:34:f9:e9:0b:5e:9c:48:f4:6a:9a:a4:0e:e9:25:
a6:3d:3c:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3
QTU2Njg2OTEwHhcNMjYwNzI4MTUyOTQwWhcNMjYwODA0MTUyOTQwWjAYMRYwFAYD
VQQDEw02YTY4Y2FlNC00OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJ6Yo6oRWLJFGXGFmEz8efLtAld5nV2cbJgK6DiCZ/leZ6S6mjpNI7NqfZMd
9lI4eSESDIbDu3o5mXdIe/1pSVD35YKk8sFk5SOVFCC7tionei8c6NbZrZ9SoZhh
nXYdk0ADPjBIXhmxi45f/rg/SuDaAmAOWKBBs6o0G/uielrf5T4PlFuILRNX6326
MVg/53TQUtFC+u7suubio8KumNt/mKfTWfcDXPq6VqDIy4FiT82etiZR0f0eGE3q
2SbLXQEMoVc8Nba1f16LkKGMbuCIKGbK0H2nL43iP2lKLCoGvoZkrW8AsZLgOMJD
xstkQfExnNIXNCUwIhRSgssmnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFuW7ZP
Q4rKgUbDRU5GJskHUNauMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG
RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ
YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAORE8Xe1AxXWoD4hGec28ml5FhyzblXNUrYC7IR+j78pPSX/JSIFUst0GXmdn
e4Qy4BfVgnnhz0G5vV1fTMK4FoqKvTB10y/igIt6dNR1wX8qdoEZyW19LyhQWXHh
BvVYfOKCzub5QTokT7tvljJpTs+8Z/sOymEhhVrym6vLGjsffzkE3HyFiPnG9M+b
Np/wPhUN25RS13ARNzgxoIpAM7K3GoNm5DvcRIgsJkoV0ekAX8U4xXn6BhtlhYhQ
AK2L6Efr8gtrBMe/ffUKhqYuapSW03m58w9IvT4tPIBg/YUwBqXjNbnDVyx3whgU
hzT56QtenEj0apqkDuklpj08YQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:43 2026 by rpki-client