
$ rpki-client -vvf rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
File: z8OBRZAZiWAcekIm8uBfuM-SloM.mft (raw, json)
Hash identifier: kQvQMfO3qX073I2KO+ZLDZCgpaw4X6VJXjFCcCMVBBk=
Subject key identifier: A7:1F:93:79:ED:5B:E6:2C:4E:F1:36:9E:7B:1B:66:CA:DC:AF:A2:A8
Authority key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
Certificate issuer: /CN=A91629D4/serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
Manifest number: 14
Signing time: Wed 19 Aug 2026 09:47:22 +0000
Manifest this update: Wed 19 Aug 2026 09:47:21 +0000
Manifest next update: Wed 26 Aug 2026 09:47:21 +0000
Files and hashes: 1: z8OBRZAZiWAcekIm8uBfuM-SloM.crl (hash: itwht71KVaIg2D62jE+T3fPl9B1NjExCCZiIs5Otz2Y=)
2: C12E80FC84AC11F188069C008EA30FBC.roa (hash: WPKl0RmubRsg2zOYR5o/LCEZKLKwHEqKhd2tRJMYw50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Validity
Not Before: Aug 19 09:47:21 2026 GMT
Not After : Aug 26 09:47:21 2026 GMT
Subject: CN=6a857baa-0091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:0e:05:4e:6c:fe:b0:42:ce:37:2f:d4:a9:
f6:55:a9:af:c8:df:e6:ae:01:f4:23:8a:7c:f0:eb:
be:b7:71:52:1f:54:e8:79:0a:7c:eb:ea:23:46:d3:
cc:b1:4a:56:13:54:9a:08:d9:5d:9e:0a:c0:f7:72:
70:e1:73:41:de:91:1e:4e:00:f4:59:64:69:d9:a9:
50:ba:15:6e:cb:3f:12:3c:80:ce:44:5f:42:3a:9a:
53:e8:1b:13:36:9b:21:f3:de:2f:4d:39:d9:39:77:
9e:dc:ab:d2:a5:f1:4c:ad:bc:94:53:c1:60:35:8e:
1f:97:e3:94:2a:2c:be:4b:18:45:b9:5b:aa:5f:7c:
9a:25:af:f0:68:cc:61:6b:f3:f9:87:79:a8:bd:54:
90:28:4a:41:7b:4f:f8:1d:b8:73:9a:c3:01:7e:54:
3b:3a:e5:84:23:bb:13:3d:9c:1d:b5:e3:db:08:c9:
75:2a:54:e9:f5:0d:3b:79:38:bd:67:54:78:ea:8c:
15:54:6b:89:09:d5:eb:e6:0b:64:9e:cf:8c:6d:76:
2b:cf:a6:03:61:64:4e:c8:ee:79:46:27:be:af:ec:
8e:13:29:2d:36:5d:3f:42:2e:52:29:cb:92:24:3c:
78:1c:8a:75:13:ee:60:b4:34:f8:de:7d:05:87:d9:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1F:93:79:ED:5B:E6:2C:4E:F1:36:9E:7B:1B:66:CA:DC:AF:A2:A8
X509v3 Authority Key Identifier:
keyid:CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:e0:f0:13:a2:44:e3:15:52:1e:63:16:4c:ee:e2:53:6e:
26:3d:3a:d8:1d:f3:d7:bc:1a:55:a0:9e:29:c4:2d:18:bb:bd:
93:77:1d:0b:25:a6:63:17:1d:4b:03:64:2b:c5:d9:fc:bd:b3:
eb:67:be:6f:ad:3b:2e:f4:e9:14:ba:5e:0b:f3:9b:6f:91:12:
b9:93:8e:fd:d7:48:71:07:3e:94:37:ce:eb:e1:f9:2f:1e:79:
a9:0c:67:72:0f:06:ce:e0:c6:be:ec:17:9b:47:aa:8d:76:82:
fb:a9:e4:88:d5:e5:06:7c:e7:85:8b:1b:77:0b:f4:d7:a7:d3:
ea:9a:c5:10:4a:46:c6:5d:13:19:cf:73:39:65:a0:11:f7:11:
8c:12:b9:15:45:6b:7a:ad:c2:a5:f6:23:c6:f4:27:4e:4d:3c:
d6:5f:8b:c8:98:b3:3d:34:fd:39:f7:c0:62:10:76:17:6d:00:
11:8b:06:34:14:b5:89:29:06:c5:52:47:b6:4e:62:d6:c3:ac:
33:9a:0e:75:26:86:7d:eb:86:d8:ae:07:cb:26:a0:6d:a1:36:
70:93:c1:cf:79:8a:de:d9:8e:b7:83:22:df:63:44:de:6c:77:
ad:30:55:6e:a8:c5:71:bd:71:07:2f:4a:c8:58:eb:53:39:d4:
48:82:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:43 2026 by rpki-client