
$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier: 2C9w94V1I66KHVSLp4zuLAUDaizQrGVORB5hMaN9JVU=
Subject key identifier: 1A:CA:53:11:23:75:38:FB:B9:9F:29:CA:A7:92:1F:66:3D:41:40:F6
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial: 0AA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number: 0AA1
Signing time: Tue 18 Aug 2026 19:47:40 +0000
Manifest this update: Tue 18 Aug 2026 19:47:39 +0000
Manifest next update: Tue 25 Aug 2026 19:47:39 +0000
Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: BuN9WowEWXsI8MzLdT0rCesISMvmNHSNWcPYxmU2Aww=)
2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: fJPw+8jILHi38OrKB/eoJlQncOyg85Mi4es0uePIWEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2729 (0xaa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Validity
Not Before: Aug 18 19:47:39 2026 GMT
Not After : Aug 25 19:47:39 2026 GMT
Subject: CN=6a84b6dc-19b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:7a:97:c0:8e:56:b5:a8:33:85:79:ee:36:
71:31:c6:91:47:3e:58:91:1d:20:91:16:41:ee:6c:
05:7a:f6:80:be:15:fb:d5:5d:80:80:40:11:60:1a:
6c:27:b0:1c:fe:7f:6a:15:c5:78:74:c4:3d:01:ef:
66:ad:ec:32:1b:cf:97:d4:2e:66:ab:6f:5d:5c:be:
a2:7b:61:46:ba:ff:22:fa:06:bd:46:4c:e6:96:5d:
2f:c1:1e:03:c2:14:69:fb:5d:8c:1b:4c:c7:d0:03:
0b:76:6b:97:58:e4:ac:1f:f1:fa:6a:a9:09:89:34:
07:06:5d:3e:2f:d5:0d:5f:00:6a:31:63:db:25:d6:
2e:0f:85:e0:a2:66:a3:61:35:ea:b7:7d:80:6d:74:
ff:f5:60:21:4c:c6:35:e5:2f:51:9a:1c:c3:d6:eb:
38:71:44:d6:3d:55:a8:ac:55:45:d4:66:2a:c1:f8:
1b:12:dd:18:ff:a4:a5:5e:bf:c0:6e:33:e5:ba:ae:
1c:22:e8:72:25:2f:ba:a7:5f:f6:33:8f:f0:68:97:
63:d7:33:a9:4e:b3:57:3c:06:bc:4c:41:b4:76:ff:
7a:bc:82:9e:8c:ce:02:14:7c:04:2f:1f:ec:64:f2:
f6:ff:87:7f:25:e8:26:00:95:bd:78:0c:30:99:ac:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CA:53:11:23:75:38:FB:B9:9F:29:CA:A7:92:1F:66:3D:41:40:F6
X509v3 Authority Key Identifier:
keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:ce:6f:25:23:45:f1:c1:3c:d7:db:f7:c9:d1:ab:b6:6f:
60:02:20:15:c7:9b:c9:e2:64:54:7a:e9:73:c9:df:2d:57:48:
c3:da:8d:38:52:52:5a:2b:ca:32:7c:7a:11:1c:f5:02:51:b4:
a1:b0:58:87:55:52:a0:a8:60:cb:ca:e0:06:b7:b5:02:6c:4f:
3d:60:6c:d4:fd:3f:d0:21:43:42:5e:26:98:05:dd:39:a2:05:
3c:41:56:ea:51:cc:c1:aa:d4:e5:36:e4:8a:be:e7:ee:af:bf:
52:9e:b3:6a:0d:43:11:a1:b4:c2:e3:c6:7c:c0:bd:7d:b4:0a:
55:63:b1:a6:e8:37:fd:db:5f:a4:4a:a8:93:51:af:dc:7d:16:
3a:06:6d:de:ed:97:e9:79:42:eb:09:3e:f7:5c:0e:67:d6:bc:
21:c5:12:b3:9b:da:8c:67:f1:c9:fd:04:ef:ef:dd:3e:2b:f0:
d8:69:ce:9c:95:fe:18:db:b6:53:ad:35:04:05:9e:13:c7:bb:
e6:e6:6b:97:70:85:8c:d5:ab:75:fb:b3:95:ac:22:e8:92:a2:
53:f3:95:d9:96:9a:1b:cd:16:51:a3:92:af:22:40:f0:32:12:
10:ed:4f:5c:17:74:6d:12:a3:43:e4:1b:1e:58:fd:86:3d:bd:
0a:93:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:07 2026 by rpki-client