
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: rqdDWOKqiRk64mx3ZxrhaFsJ/YIEql26tnGV3lyEhYU=
Subject key identifier: BF:CF:49:BB:F4:D6:CB:5E:21:22:C9:58:4B:92:CC:DD:61:7D:13:00
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 2515
Signing time: Fri 12 Jun 2026 15:44:34 +0000
Manifest this update: Fri 12 Jun 2026 15:44:33 +0000
Manifest next update: Fri 19 Jun 2026 15:44:33 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: C3EQFbSek2rIiwb+cpKPRFMgoACbBg0D2U+Z2mwtfVY=)
2: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: 2IWuioS/nodqvph5IdFPsL2bu4c6VdvpfkdYbMecCC4=)
3: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: PfTF6IXqi6hNaj695aj5hjmooNnHrg5/s0sD8is22ZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9528 (0x2538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Jun 12 15:44:33 2026 GMT
Not After : Jun 19 15:44:33 2026 GMT
Subject: CN=6a2c2961-d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:74:87:f2:20:50:47:98:9e:60:61:47:8d:
2b:af:8e:d6:1b:0a:5e:a8:da:a0:ce:78:e0:03:60:
8c:33:29:87:6f:b1:7d:64:31:f0:08:ff:98:73:fa:
fb:d2:2a:b7:95:15:72:b2:bb:cd:85:b1:04:eb:eb:
21:45:0e:27:89:e7:a4:bb:4e:ca:6d:a2:e0:4e:0d:
9d:10:c2:95:6c:d7:0c:df:ec:b8:1d:d2:dd:0c:63:
e0:e2:a3:ed:12:bd:6d:46:e8:3a:16:bb:d8:75:0d:
fe:8b:a8:be:49:00:1a:f3:d9:75:9b:9a:85:7b:c8:
56:81:36:95:be:f7:93:e8:4c:0f:ee:86:e5:e8:ba:
f8:23:ec:8e:06:57:f8:4f:49:ab:de:54:fd:29:69:
9b:91:31:07:fa:e0:9f:c4:23:ae:a4:bb:79:d2:a2:
82:1f:f7:75:8b:c5:80:ec:83:28:5c:08:c8:99:9c:
a3:94:90:7b:b7:68:14:2d:ce:bd:03:86:c7:c4:f1:
81:24:c5:9e:69:cd:f2:89:38:eb:1e:e7:41:0e:20:
9f:c7:58:e8:85:66:5e:d2:cc:4d:5b:e9:34:40:da:
01:50:a4:02:f9:c3:08:d7:94:3b:14:37:d3:24:2c:
6a:69:27:97:a3:b3:d6:57:82:b7:90:67:32:aa:6f:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:49:BB:F4:D6:CB:5E:21:22:C9:58:4B:92:CC:DD:61:7D:13:00
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:49:88:63:a8:44:7d:96:89:28:16:b7:c5:7d:d8:6d:18:11:
c1:ed:ea:6a:69:65:41:80:75:13:80:2b:da:8f:71:b9:70:34:
15:a7:b2:5a:86:ae:92:0a:6a:c3:2d:19:13:db:20:a6:f5:e3:
69:91:88:1d:02:a8:56:e1:ec:ca:25:58:59:25:7b:c4:66:1b:
21:2a:9c:4e:b0:d3:19:67:2c:0e:da:55:aa:91:ed:e1:d0:b3:
f0:af:ad:b4:ca:74:9d:f8:fa:4d:57:1a:43:6e:31:e7:14:1e:
71:9c:e5:b3:f3:66:d8:de:ac:a1:82:50:d8:77:ac:a7:9d:1f:
dc:25:b6:5a:e7:79:db:bb:6b:56:9d:86:15:6a:78:a9:97:bf:
2d:6f:16:8f:78:7a:92:ff:9d:05:46:cf:64:59:4e:9b:ac:1d:
47:bb:aa:22:80:e3:17:fb:2e:d7:b5:64:f3:ca:40:a1:85:e2:
c1:1e:9f:c3:7e:a6:d6:50:67:09:0a:f0:a2:81:77:68:15:b3:
6f:02:39:47:bc:fc:6e:b6:ca:8d:b2:d1:cd:d4:ee:b6:7d:b3:
c1:46:3b:a8:9b:95:8d:ec:4d:a9:c5:31:b2:92:2f:d9:7f:8a:
19:f0:72:81:fb:04:e8:a4:c1:0d:ae:c8:72:55:92:ef:89:92:
04:a9:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:14 2026 by rpki-client