
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json)
Hash identifier: cpGScy2dboe4Qy798LQfkxcPidO0WlFJbLdGQp3/iXE=
Subject key identifier: 6C:91:E2:27:F4:FD:F5:4D:6F:46:A9:96:C2:46:87:98:B0:77:76:2C
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial: 08B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
Manifest number: 099B
Signing time: Sat 10 Oct 2026 20:39:57 +0000
Manifest this update: Sat 10 Oct 2026 20:39:57 +0000
Manifest next update: Sat 17 Oct 2026 20:39:57 +0000
Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: Dd2seSRQL8MBm3SbX5uO1uYMXInQgk+l9bgTK6HNxgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Validity
Not Before: Oct 10 20:39:57 2026 GMT
Not After : Oct 17 20:39:57 2026 GMT
Subject: CN=6acaa29d-dc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:4e:0f:da:02:1f:f7:82:cb:3f:3e:e6:0f:
b2:29:95:e6:de:4d:50:0b:32:c6:3a:62:39:7d:05:
17:01:d9:c5:2c:aa:ad:d3:d3:5a:0a:e1:dc:2b:7c:
2e:4b:dd:b2:a1:80:71:ce:cd:e3:9a:e9:c0:7d:08:
0f:9a:ba:9a:79:33:fc:2b:32:cb:04:12:f5:21:f9:
19:1e:e5:9e:ec:16:9e:64:65:61:32:a9:88:93:e6:
70:49:5c:46:40:a4:15:17:21:96:e6:bc:19:f9:a0:
d7:7e:1c:7d:ba:a0:af:5e:b1:bc:f2:61:69:70:df:
7f:30:0e:29:b3:5c:8c:1c:ae:5d:f3:9b:ab:f3:32:
75:7d:20:f7:2f:6f:be:76:7f:5a:aa:d0:fb:c1:d0:
14:41:59:5e:79:66:ab:d7:03:b6:99:df:3b:4a:64:
cd:32:09:71:59:4c:b8:e1:fd:20:36:99:43:3e:d4:
1f:08:44:bb:c0:c8:5f:b7:27:6f:60:b5:fa:d4:2f:
95:bd:84:3c:1c:be:33:ca:b4:37:48:4a:7a:c3:74:
88:65:96:39:cc:b1:89:66:e2:c9:7d:1a:84:f9:af:
0c:98:ed:8c:0e:0c:55:80:33:13:a8:5b:fc:5f:0d:
06:dc:d3:a7:89:9a:84:a4:28:33:26:39:a1:28:36:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:E2:27:F4:FD:F5:4D:6F:46:A9:96:C2:46:87:98:B0:77:76:2C
X509v3 Authority Key Identifier:
keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d1:8f:52:17:11:a9:18:f6:a2:22:03:b4:fe:c4:7c:98:e2:
ed:df:cb:07:ba:3e:13:04:a3:1e:34:e6:6b:51:a9:29:05:7b:
83:7d:7b:13:7a:70:44:aa:a4:d9:b4:cb:8c:7a:40:35:59:a3:
6e:08:c8:6e:35:0c:82:b7:d3:62:25:2a:dd:71:7b:4e:19:4f:
70:d6:1f:97:fd:16:e6:ba:3e:d5:e6:20:52:f8:d3:78:f6:de:
f8:13:a5:3c:fa:78:ba:65:2a:13:93:48:35:3f:2d:8f:35:dc:
54:aa:c2:b2:08:05:29:bf:90:e5:34:90:3c:7b:40:ed:d0:68:
2e:31:20:cf:d3:fb:fb:53:58:77:2c:3b:23:14:ac:31:1b:8c:
ac:9c:ab:30:63:34:65:f4:5a:04:75:be:f8:c8:3f:0f:26:67:
00:e2:e5:ee:c0:34:81:9d:e8:7f:cc:e4:92:8d:87:63:de:6b:
23:b1:2a:dc:5d:10:b4:66:3d:9c:53:68:00:58:ff:08:d7:74:
5b:7c:b9:1f:52:b5:cd:f8:7d:1b:06:85:6c:2f:b8:0e:a5:df:
34:7f:8d:48:90:a9:b6:3a:cd:09:53:3f:7b:89:56:e2:51:c0:
8b:db:2e:63:44:c9:29:b1:af:20:3c:99:ff:11:93:d8:1f:85:
83:ad:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:57:10 2026 by rpki-client