
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: COr1IDuBYLT/DfuCwL6gZRmYkliMs7NuJkKjcnHwHjw=
Subject key identifier: 7B:03:11:38:19:2E:F7:2E:07:83:51:7F:74:77:45:03:15:25:45:D4
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 254D
Signing time: Fri 18 Sep 2026 15:43:47 +0000
Manifest this update: Fri 18 Sep 2026 15:43:47 +0000
Manifest next update: Fri 25 Sep 2026 15:43:47 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: HEIOFQg8Id1No6m7YWydrCE5TmDvcVVvczBxn3oSRyU=)
2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: rycLk4UK+xxvgQxEjrUg94ft0J4vTpCCFPONGxFmmI0=)
3: rvms7SMLwgO_3iqGevwVvKwKAMA.asa (hash: 03mIt6sx2N4kyRDmtrywhu7q0g8YM9WZvJByyOjFrj8=)
4: GiZqVXDFkfTOw9KbgmpHw5SLUWY.asa (hash: vDu9havXbmwfHPU3SNHzDoX5rB2pHYEh/QKpZcZTGtM=)
5: 0F15CD3AAF4011F1A81565FF6911F970.roa (hash: Xz7eZ1SV8R4oYvn9Xlw6Pv4LszQ2ezhKLHykoR+8jxw=)
6: CE7B5902AF3F11F186796EF16911F970.roa (hash: IHWM6RFhPrMmsqVLsW0iVew5UfTXyAVb0zZ4b4QqZQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9590 (0x2576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Sep 18 15:43:47 2026 GMT
Not After : Sep 25 15:43:47 2026 GMT
Subject: CN=6aad5c33-41bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:a8:ee:4c:4b:af:42:8f:1a:33:27:46:ec:
ce:2a:22:83:3d:1b:f2:82:8d:e3:32:d6:49:80:e3:
3c:dc:c2:39:10:9e:ce:12:fb:27:0d:d0:4c:e9:b4:
ee:dc:37:87:19:a8:8e:5e:66:77:15:2a:d9:79:fa:
c9:35:7f:39:e8:c4:b3:b3:6b:79:ec:6d:25:e8:58:
7c:c3:6e:3f:5f:24:fd:cf:39:4b:b4:b5:c8:d7:25:
9e:9e:4f:71:0c:08:05:74:35:34:c8:c6:da:fc:ea:
48:6d:a8:3e:b9:64:11:f6:16:92:ab:16:ff:fc:3f:
2a:3a:ee:b0:03:72:94:19:db:51:b8:59:78:4a:74:
0a:b1:a0:ff:d6:d4:2f:60:d9:d2:1b:10:b9:a2:00:
b2:76:d5:45:f2:11:22:93:43:ca:16:05:a2:33:fc:
b7:47:e0:4c:30:3e:bc:c9:8e:f5:a1:ea:e7:94:7e:
12:90:a8:e7:4f:14:85:02:98:fc:e2:d6:92:1a:1a:
eb:84:07:c4:f1:f3:cb:d8:3e:3f:60:0c:56:cd:24:
c3:41:87:f9:f2:75:42:fd:8f:e9:2a:de:97:10:d7:
01:46:10:1b:40:0e:97:4b:50:6c:8b:7e:c4:b3:d6:
78:3d:e2:9a:d6:82:ed:e4:13:76:d4:42:14:fb:d9:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:11:38:19:2E:F7:2E:07:83:51:7F:74:77:45:03:15:25:45:D4
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:df:6d:90:34:a5:dd:02:53:74:da:7d:0d:14:8a:5a:70:
06:d0:b7:31:b1:1c:a1:7b:8c:46:93:d9:36:7c:9a:89:0a:8f:
d5:ed:6f:85:88:20:27:ce:81:f0:3e:55:ee:7b:19:44:47:92:
b8:6b:7c:2a:aa:9b:6f:ff:86:08:25:5b:ca:88:ab:9c:53:68:
7a:a9:83:9a:c1:73:1d:7c:f1:a5:d7:9a:37:b1:79:61:32:c4:
91:dd:f1:2b:f3:be:06:5b:82:f9:8b:31:70:7f:d0:c4:e2:88:
07:fe:c2:62:a5:41:1b:f1:5e:b6:68:d5:9c:c1:f3:1a:f7:c6:
a4:d7:7e:8a:37:55:78:98:08:ae:36:b7:82:36:30:3c:a7:fe:
ca:9d:ae:33:a0:70:0e:09:8e:ad:c1:10:36:fe:99:a8:21:41:
b0:10:8d:f2:bb:42:5a:b4:8e:43:06:51:c5:d5:f0:0c:d8:ea:
c8:b5:39:40:61:d5:b3:cd:4e:5f:ed:6b:9e:77:77:ef:fa:81:
c0:0a:b8:3e:84:6a:d3:70:31:33:95:29:82:c9:f3:42:72:66:
17:f6:a9:5e:f9:14:08:53:3b:d9:2a:ac:3b:19:bd:44:8c:77:
d6:d9:08:05:72:5c:30:fa:fd:0d:ce:cb:c9:a5:aa:5e:da:8a:
ba:c9:8f:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy
ODM1MkFFMjgwHhcNMjYwOTE4MTU0MzQ3WhcNMjYwOTI1MTU0MzQ3WjAYMRYwFAYD
VQQDEw02YWFkNWMzMy00MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqGo7kxLr0KPGjMnRuzOKiKDPRvygo3jMtZJgOM83MI5EJ7OEvsnDdBM6bTu
3DeHGaiOXmZ3FSrZefrJNX856MSzs2t57G0l6Fh8w24/XyT9zzlLtLXI1yWenk9x
DAgFdDU0yMba/OpIbag+uWQR9haSqxb//D8qOu6wA3KUGdtRuFl4SnQKsaD/1tQv
YNnSGxC5ogCydtVF8hEik0PKFgWiM/y3R+BMMD68yY71oernlH4SkKjnTxSFApj8
4taSGhrrhAfE8fPL2D4/YAxWzSTDQYf58nVC/Y/pKt6XENcBRhAbQA6XS1Bsi37E
s9Z4PeKa1oLt5BN21EIU+9mmFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsDETgZ
LvcuB4NRf3R3RQMVJUXUMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0
OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1
NEN6STJSa3B0dFVvTlNyaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU4LfbZA0pd0CU3TafQ0UilpwBtC3MbEcoXuMRpPZNnyaiQqP1e1vhYggJ86B
8D5V7nsZREeSuGt8Kqqbb/+GCCVbyoirnFNoeqmDmsFzHXzxpdeaN7F5YTLEkd3x
K/O+BluC+YsxcH/QxOKIB/7CYqVBG/FetmjVnMHzGvfGpNd+ijdVeJgIrja3gjYw
PKf+yp2uM6BwDgmOrcEQNv6ZqCFBsBCN8rtCWrSOQwZRxdXwDNjqyLU5QGHVs81O
X+1rnnd37/qBwAq4PoRq03AxM5UpgsnzQnJmF/apXvkUCFM72SqsOxm9RIx31tkI
BXJcMPr9Dc7LyaWqXtqKusmPyQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:10:37 2026 by rpki-client