
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json)
Hash identifier: Z8CtbLNLTTolsYNNQfwudAv9oK7v77sbuoVOBqtBjWI=
Subject key identifier: DC:D6:0D:0E:2E:85:43:37:C7:94:CE:C3:6D:6A:D3:5C:CB:D3:7B:BB
Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F
Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
Manifest number: 85
Signing time: Mon 27 Jul 2026 09:49:37 +0000
Manifest this update: Mon 27 Jul 2026 09:49:37 +0000
Manifest next update: Mon 03 Aug 2026 09:49:37 +0000
Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: oD/mfa80bEAAmddtTkznTqwB3tOrQaYpsT5vffznUtw=)
2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl
rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
Validity
Not Before: Jul 27 09:49:37 2026 GMT
Not After : Aug 3 09:49:37 2026 GMT
Subject: CN=6a6729b1-b02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:a8:da:ca:18:26:6a:52:c8:6b:76:1d:49:
16:7d:21:67:3c:35:30:65:a5:56:66:b0:bf:15:fc:
fd:1e:8b:0a:46:f2:30:d5:b8:88:18:4d:13:f2:d4:
40:1d:a4:10:4c:af:3f:8b:26:a2:c9:44:b7:2e:3e:
14:1a:30:8b:c2:a4:25:f5:ec:08:7a:ba:c5:b0:9d:
72:f0:a9:19:cf:e9:87:2a:88:79:db:b9:5d:41:5c:
1e:44:ab:26:3b:41:5a:e5:78:41:6c:d9:c3:01:b6:
df:aa:66:99:9b:75:a5:70:d9:c7:96:37:f5:97:d1:
5d:2b:e0:c7:f2:e6:79:e1:80:00:0c:bc:8d:58:2a:
e3:ae:40:f8:4b:f2:70:6c:ce:0d:67:9e:dc:d0:93:
3c:84:ce:c1:63:f4:d1:31:e1:88:c7:5b:99:06:37:
d1:ed:f0:27:a0:b0:40:2a:06:43:a9:b5:56:98:a9:
ca:50:3d:db:84:50:e1:34:ee:2b:16:2c:0f:04:35:
64:21:71:9d:bc:0e:10:b2:a8:83:2b:75:bb:bb:e3:
8b:1d:ec:c1:b2:e5:0c:74:70:ed:76:d4:ce:ad:7f:
e9:37:52:5d:e0:ca:9e:54:1f:89:e1:37:7a:a1:0e:
a2:a9:1d:84:3b:2a:86:9b:18:c6:dd:cf:ed:b3:13:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:0D:0E:2E:85:43:37:C7:94:CE:C3:6D:6A:D3:5C:CB:D3:7B:BB
X509v3 Authority Key Identifier:
keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a4:86:1e:26:10:77:f6:e8:85:62:1d:ad:78:29:75:7b:ac:
30:50:cc:44:3e:38:48:0f:27:7b:09:da:ef:8e:43:39:9c:ac:
2c:2f:66:5b:7f:a8:73:0f:76:0d:a9:e7:56:5e:f1:35:d7:10:
00:e0:d4:e2:25:76:0c:3f:b6:af:46:7d:c7:36:87:be:1d:ff:
cd:b0:0e:5a:3d:1d:f1:ec:d6:4c:64:46:f8:6f:49:e0:db:9b:
5b:08:10:c0:97:74:93:81:54:4c:ad:d8:31:b9:76:e8:7f:78:
50:5d:05:a4:0c:69:73:95:9a:28:83:a8:72:9c:df:5f:0a:ac:
1c:17:ff:52:8b:57:76:0e:ee:8b:45:02:c2:ea:db:7b:06:4f:
3c:8a:04:1b:8f:da:32:7f:f4:0c:3a:29:75:28:6f:61:5b:41:
ae:aa:eb:b1:02:2e:b0:60:ff:86:37:0d:0b:44:8e:e7:ce:f5:
e5:7d:77:1e:d2:97:19:6b:bb:e5:e0:74:41:c3:28:3d:69:b8:
c4:4b:d0:4d:9b:40:24:24:ed:19:5b:23:5e:2d:1e:47:c9:ca:
72:8a:6b:e6:57:eb:e3:c6:f8:b2:e9:65:a5:ce:af:b9:c7:ab:
0b:35:74:33:90:e5:71:83:99:52:b1:dc:e0:1d:9e:62:27:39:
a9:d5:fd:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRDODQxMTAvBgNVBAUTKEYwRkQ5RTVBNkRDOTQ1OUE4OEUwMTEzRjI0RjU2MUE2
RkRENzQwNUYwHhcNMjYwNzI3MDk0OTM3WhcNMjYwODAzMDk0OTM3WjAYMRYwFAYD
VQQDEw02YTY3MjliMS1iMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Y+o2soYJmpSyGt2HUkWfSFnPDUwZaVWZrC/Ffz9HosKRvIw1biIGE0T8tRA
HaQQTK8/iyaiyUS3Lj4UGjCLwqQl9ewIerrFsJ1y8KkZz+mHKoh527ldQVweRKsm
O0Fa5XhBbNnDAbbfqmaZm3WlcNnHljf1l9FdK+DH8uZ54YAADLyNWCrjrkD4S/Jw
bM4NZ57c0JM8hM7BY/TRMeGIx1uZBjfR7fAnoLBAKgZDqbVWmKnKUD3bhFDhNO4r
FiwPBDVkIXGdvA4QsqiDK3W7u+OLHezBsuUMdHDtdtTOrX/pN1Jd4MqeVB+J4Td6
oQ6iqR2EOyqGmxjG3c/tsxNKRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzWDQ4u
hUM3x5TOw21q01zL03u7MB8GA1UdIwQYMBaAFPD9nlptyUWaiOARPyT1Yab910Bf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM4NC9ERkI0OUM0OEM1
MTAxMUYwOUQ4REI3NUZDNEY5QUUwMi84UDJlV20zSlJacUk0QkVfSlBWaHB2M1hR
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REM4NC9ERkI0OUM0OEM1MTAxMUYwOUQ4REI3NUZDNEY5QUUwMi84UDJlV20zSlJa
cUk0QkVfSlBWaHB2M1hRRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO6SGHiYQd/bohWIdrXgpdXusMFDMRD44SA8newna745DOZysLC9mW3+ocw92
DannVl7xNdcQAODU4iV2DD+2r0Z9xzaHvh3/zbAOWj0d8ezWTGRG+G9J4NubWwgQ
wJd0k4FUTK3YMbl26H94UF0FpAxpc5WaKIOocpzfXwqsHBf/UotXdg7ui0UCwurb
ewZPPIoEG4/aMn/0DDopdShvYVtBrqrrsQIusGD/hjcNC0SO58715X13HtKXGWu7
5eB0QcMoPWm4xEvQTZtAJCTtGVsjXi0eR8nKcopr5lfr48b4sullpc6vucerCzV0
M5DlcYOZUrHc4B2eYic5qdX9cQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:13 2026 by rpki-client