
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json)
Hash identifier: uYbq38EbieiG9gdJtSg7C2TpCm11idxD3AXBsf/zchY=
Subject key identifier: 51:64:13:2F:D6:0F:CA:31:F9:17:A6:A0:4A:AA:51:DB:36:BB:3D:4E
Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Certificate serial: 0D34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
Manifest number: 1676
Signing time: Sun 04 Oct 2026 18:18:14 +0000
Manifest this update: Sun 04 Oct 2026 18:18:14 +0000
Manifest next update: Sun 11 Oct 2026 18:18:14 +0000
Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: PVQ0qDxD2gvho/ePH4A2AvRcz90I6bxOMcShjR3OPQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Validity
Not Before: Oct 4 18:18:14 2026 GMT
Not After : Oct 11 18:18:14 2026 GMT
Subject: CN=6ac29866-427f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:f6:7e:de:f5:87:0b:7a:31:d4:54:4f:6e:
75:2b:1e:f6:6e:55:aa:ce:73:42:07:cc:fe:12:13:
4c:e5:86:02:cb:52:5e:74:81:a3:c7:6c:4d:45:68:
7b:6b:51:52:d3:4c:e6:8b:45:ed:cb:e0:c9:46:ae:
0a:51:7c:56:fb:d8:ba:5c:3c:a8:ed:12:4d:ec:fe:
31:d7:35:00:eb:c7:2b:a9:5a:a0:78:94:76:7b:ae:
22:31:ba:71:31:5d:cb:f9:89:9e:2b:48:f0:f7:8b:
1a:99:4b:43:ec:e7:3f:19:9b:01:9d:77:67:97:f2:
f1:5c:a0:8a:22:34:ab:68:d9:42:00:17:5f:ec:d5:
f5:fd:dd:1f:b6:3a:53:c3:a7:88:60:b1:8d:1d:07:
79:14:8b:3d:ac:75:2d:0c:42:59:72:8d:73:59:4c:
63:13:fd:60:8f:71:d3:4e:58:b9:a0:56:36:75:2c:
11:d1:42:58:2c:80:d8:aa:46:7e:99:55:38:fb:df:
ce:b7:cf:8f:7c:00:5c:70:1b:21:c0:45:5c:a8:a2:
79:d5:a0:3e:a4:0b:df:ca:00:37:20:9b:19:d3:b4:
55:87:f2:cc:6b:1f:9c:48:c6:03:df:b4:f9:8a:52:
a8:6e:2c:1f:ab:d8:87:55:82:a1:5b:7f:43:d9:8e:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:13:2F:D6:0F:CA:31:F9:17:A6:A0:4A:AA:51:DB:36:BB:3D:4E
X509v3 Authority Key Identifier:
keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:a5:c3:1e:71:d6:8e:e2:39:fa:39:3d:ae:0d:06:c6:68:
1e:79:09:48:3e:3b:b5:6d:17:c0:f9:69:b4:d6:fa:d7:66:b6:
d4:e1:4b:59:c9:53:3a:ac:ae:1b:69:4b:84:88:f9:d6:f3:10:
71:25:70:1a:d9:91:45:3a:d5:e6:b2:3e:7b:55:08:63:4c:65:
b4:40:1b:c7:cb:d2:f4:db:33:ae:b3:c4:64:06:3c:e3:6e:5e:
f5:b0:70:e5:c3:1e:0f:29:1c:29:a8:49:7f:a6:ad:1b:ba:97:
7b:9a:69:72:7d:97:d9:c0:c7:13:68:ad:ab:5d:d0:0a:68:b3:
ce:98:15:6d:ba:88:75:ee:a6:15:4b:82:b7:3b:a7:26:50:b6:
ee:d6:95:64:b2:a8:9d:1f:3e:a4:94:3e:4b:f8:2a:cb:6c:57:
04:c2:86:35:3d:41:7a:23:26:65:fc:b2:2c:f1:e9:07:41:2c:
d2:45:78:fe:f9:0a:ac:8a:9e:21:88:76:14:c3:c5:dc:c0:f4:
07:c5:74:40:2c:8e:a5:2f:e6:ad:9f:b3:7f:37:99:5f:54:2b:
65:d7:b2:77:2d:31:7e:2f:3e:15:b4:61:47:56:94:6e:e3:b7:
2e:f1:fe:b2:34:4a:f3:a2:8a:56:f9:33:b3:e4:91:36:f2:1e:
c9:e1:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:08:25 2026 by rpki-client