
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json)
Hash identifier: 58/X0NstrM4ZniZHuJ2n4CSiCEm3+QqTepXdrYsOTGs=
Subject key identifier: 07:53:79:DB:93:82:E2:72:21:63:8A:9A:7B:9B:0A:8C:38:42:23:B2
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial: 0418
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
Manifest number: 0411
Signing time: Tue 21 Jul 2026 01:15:38 +0000
Manifest this update: Tue 21 Jul 2026 01:15:37 +0000
Manifest next update: Tue 28 Jul 2026 01:15:37 +0000
Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: iL71DgcJ7hXXOT9qnm5CUbRRvoWOYHKY+JcH3hwSEbQ=)
2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: XV4+6RexVCN6qV3gQG680PT5iGhrAgYP0jd0N7lfisU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Validity
Not Before: Jul 21 01:15:37 2026 GMT
Not After : Jul 28 01:15:37 2026 GMT
Subject: CN=6a5ec83a-b9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:e0:f0:9a:6a:fd:eb:69:8c:13:28:1e:51:
e9:c5:cf:9b:9f:cc:43:ef:6a:d8:61:0b:0e:63:a7:
05:c4:61:21:25:98:b9:92:4c:b8:f3:de:8c:55:ec:
6b:c6:a2:06:fb:e4:81:fb:60:a8:14:1b:0f:26:06:
fd:2f:b5:a6:50:d2:48:ce:1f:e2:fb:0f:4c:68:f3:
ca:02:ee:1f:8b:c1:1a:39:00:f1:b6:06:9f:01:1e:
62:2e:2c:2d:c4:5d:57:5a:28:65:86:8b:3b:f7:48:
d4:7c:4d:93:d0:c3:c6:97:6d:f6:6b:d4:85:be:ae:
79:38:99:4b:21:c3:20:fe:01:3b:80:19:25:b3:05:
51:6f:42:60:04:12:4b:3e:73:3b:48:d9:93:ca:c0:
18:67:f4:f1:85:0c:95:6f:65:49:a3:b9:40:a1:d4:
bd:1e:ff:b8:3a:0f:25:1c:d2:da:e9:41:41:cc:33:
76:a3:f7:25:cf:bb:f8:53:17:c5:12:fc:87:d8:6a:
50:d2:0b:17:da:96:d3:6d:65:53:c7:69:b9:11:73:
49:2d:b2:e4:0c:70:78:89:29:a5:45:e7:04:68:0a:
61:d0:34:da:36:30:ae:61:89:20:a9:c6:e9:d4:a0:
3d:f2:5e:71:a0:f8:5d:69:92:90:cc:1d:cb:d4:90:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:79:DB:93:82:E2:72:21:63:8A:9A:7B:9B:0A:8C:38:42:23:B2
X509v3 Authority Key Identifier:
keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:33:45:89:f9:a3:25:cf:c0:b6:df:15:0d:5c:a8:38:6a:49:
b8:a1:a8:01:fd:82:6e:ff:3d:3c:95:7d:0a:63:96:c9:f1:e2:
a7:dc:24:b0:92:bc:36:1f:18:03:fd:b9:94:52:96:72:7b:57:
16:da:6b:ed:4e:80:c9:b2:2f:ab:e7:77:93:5c:61:fe:10:7e:
51:b8:02:c9:9e:d6:db:0b:87:c7:9a:fe:03:67:f9:77:b4:0e:
74:b4:0e:3a:a8:c9:2f:b5:6d:15:89:0a:89:69:fb:4b:93:3f:
84:21:40:0e:55:7e:e0:3e:16:60:8d:19:57:83:68:7e:3e:84:
79:b3:2a:85:a6:82:20:94:e0:42:6c:ad:8f:f6:d9:31:0b:9c:
c8:07:f2:90:b4:a4:5b:7b:5f:6a:4d:41:6a:5d:3b:3b:dd:20:
18:bc:be:5e:37:25:15:dd:ae:19:83:9d:48:df:49:03:b3:53:
35:4b:99:b0:89:8a:f2:3d:25:b6:04:fc:52:42:b0:df:e5:4f:
ff:fc:f4:ed:89:40:5b:bd:25:ed:e7:b6:98:03:6a:0f:d3:b4:
85:07:5c:98:aa:53:b2:87:9b:78:d7:8d:3c:a5:86:a5:cf:39:
0e:02:9a:22:46:ad:be:4f:51:61:02:7b:72:4f:a4:54:bf:4f:
a3:0c:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:04 2026 by rpki-client