
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: 7OS9QtUCwHH+JrmVVmvfbg+N8NapKHT2/2PC7cHQDSg=
Subject key identifier: 89:32:3F:52:72:49:88:AD:58:09:CC:BA:A2:02:C0:E9:03:2D:09:13
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2553
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 252E
Signing time: Tue 28 Jul 2026 15:51:20 +0000
Manifest this update: Tue 28 Jul 2026 15:51:19 +0000
Manifest next update: Tue 04 Aug 2026 15:51:19 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: jrpgg5Jhe2s4bzD9DeSr4ygClx9TmcQC+bP50YJfmyI=)
2: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: +gP/p1k0sh2C300+RvnruBX+xdYqj1376qs/G2NEuaU=)
3: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: rycLk4UK+xxvgQxEjrUg94ft0J4vTpCCFPONGxFmmI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9555 (0x2553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Jul 28 15:51:19 2026 GMT
Not After : Aug 4 15:51:19 2026 GMT
Subject: CN=6a68cff7-1646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:c3:9f:1b:8b:63:51:a2:e0:f7:88:d7:ec:
74:f1:a3:8f:15:9f:8b:6f:1c:0a:ef:3c:42:06:50:
f6:d6:b2:ec:71:b1:87:66:2a:8c:be:30:de:01:82:
11:d9:5a:4e:34:c3:7e:3e:0f:d9:a8:1e:ff:dc:01:
5c:da:df:63:f5:d7:f5:ed:7a:12:81:51:a7:ee:00:
fe:9b:ac:99:94:42:19:1b:36:86:60:1e:0e:91:fe:
3c:eb:bb:08:8d:f6:fd:84:85:8e:9d:75:e5:c2:d6:
45:b9:0d:c6:31:f2:86:ea:75:70:30:6c:40:1e:17:
67:7e:f9:3f:70:25:9d:1b:2f:94:51:ba:62:0f:41:
8b:cf:d2:ed:98:49:c4:b2:37:92:c4:0c:a9:9e:0a:
ab:9f:a9:40:ed:81:a7:72:ed:25:35:e3:cc:d6:b5:
72:10:58:4a:59:21:b2:c5:22:56:1a:3d:f6:47:90:
8a:99:7f:75:bc:df:3a:2e:75:7b:14:b7:4b:d4:79:
62:8e:b1:9b:c7:5c:ae:8e:16:d0:ae:5e:8e:6c:3d:
cf:83:66:28:8f:bb:56:59:ca:f6:99:98:4f:d6:6b:
47:27:ea:f6:03:71:52:f0:1a:4e:2e:06:5f:d6:91:
75:a8:76:78:ac:75:52:65:ed:4c:8a:56:7d:15:5b:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:32:3F:52:72:49:88:AD:58:09:CC:BA:A2:02:C0:E9:03:2D:09:13
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1d:64:eb:4b:73:07:9c:39:16:5c:7f:af:86:b4:53:f1:d7:
8f:42:9a:b9:19:d2:33:6d:0f:8f:fa:4f:50:88:c4:81:b1:68:
1d:a3:46:ce:72:bf:90:6d:79:c3:9a:87:ba:7f:ec:83:d1:20:
ae:39:4b:0e:5b:c2:93:dd:7a:cf:96:50:ff:b1:f5:31:58:17:
82:e1:f2:bd:54:61:1c:77:ea:73:b8:9d:1d:9e:66:3d:f2:e3:
84:db:4d:c5:94:48:3d:1e:1b:9e:cc:f7:15:f8:a2:52:44:e9:
42:44:08:65:2c:0e:f7:62:f2:ba:2b:00:ca:f0:08:df:a3:bc:
83:52:6f:db:d3:99:0f:7b:f2:89:05:5e:e8:fa:a5:bc:17:f4:
83:fa:1b:0f:dc:3b:12:fa:56:8a:78:54:2d:f1:dc:19:ee:07:
87:a9:ee:1a:48:f4:f3:84:24:ba:ed:77:f4:5d:67:a9:35:f9:
8d:4a:90:98:23:4a:b0:ac:6a:4e:5e:70:9f:a5:23:37:ee:b8:
49:21:25:2e:bc:b5:f3:87:b8:76:9e:ef:7c:e8:1d:81:5a:ac:
ca:5a:0e:90:69:8f:dc:83:79:37:11:b4:fd:39:b4:de:92:b3:
02:4d:c2:f6:f7:d4:bc:0e:bb:34:20:2d:3b:69:6f:04:dc:36:
b4:76:32:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy
ODM1MkFFMjgwHhcNMjYwNzI4MTU1MTE5WhcNMjYwODA0MTU1MTE5WjAYMRYwFAYD
VQQDEw02YTY4Y2ZmNy0xNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjezDnxuLY1Gi4PeI1+x08aOPFZ+LbxwK7zxCBlD21rLscbGHZiqMvjDeAYIR
2VpONMN+Pg/ZqB7/3AFc2t9j9df17XoSgVGn7gD+m6yZlEIZGzaGYB4Okf4867sI
jfb9hIWOnXXlwtZFuQ3GMfKG6nVwMGxAHhdnfvk/cCWdGy+UUbpiD0GLz9LtmEnE
sjeSxAypngqrn6lA7YGncu0lNePM1rVyEFhKWSGyxSJWGj32R5CKmX91vN86LnV7
FLdL1HlijrGbx1yujhbQrl6ObD3Pg2Yoj7tWWcr2mZhP1mtHJ+r2A3FS8BpOLgZf
1pF1qHZ4rHVSZe1MilZ9FVu6WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkyP1Jy
SYitWAnMuqICwOkDLQkTMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0
OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1
NEN6STJSa3B0dFVvTlNyaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxB1k60tzB5w5Flx/r4a0U/HXj0KauRnSM20Pj/pPUIjEgbFoHaNGznK/kG15
w5qHun/sg9EgrjlLDlvCk916z5ZQ/7H1MVgXguHyvVRhHHfqc7idHZ5mPfLjhNtN
xZRIPR4bnsz3FfiiUkTpQkQIZSwO92LyuisAyvAI36O8g1Jv29OZD3vyiQVe6Pql
vBf0g/obD9w7EvpWinhULfHcGe4Hh6nuGkj084Qkuu139F1nqTX5jUqQmCNKsKxq
Tl5wn6UjN+64SSElLry184e4dp7vfOgdgVqsyloOkGmP3IN5NxG0/Tm03pKzAk3C
9vfUvA67NCAtO2lvBNw2tHYy4w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:54 2026 by rpki-client