
$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json)
Hash identifier: NDn0Fm/bnTX12roiWujvsT94VuA09BXsXplwQ+MwiMY=
Subject key identifier: 96:37:E9:81:12:40:42:75:A0:FC:DD:89:E9:CA:BD:7E:4C:A8:4F:39
Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Certificate serial: 078E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
Manifest number: 0785
Signing time: Tue 18 Aug 2026 21:55:11 +0000
Manifest this update: Tue 18 Aug 2026 21:55:11 +0000
Manifest next update: Tue 25 Aug 2026 21:55:11 +0000
Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: OCfGLyLtG+NZeStEPG6BNnVGKmOWoBKY9uGwZsuvIf8=)
2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: te1kdq92VgFygTtdop1iQjv7JxZOQ/Lth61MfMSAoiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Validity
Not Before: Aug 18 21:55:11 2026 GMT
Not After : Aug 25 21:55:11 2026 GMT
Subject: CN=6a84d4bf-feaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:0a:d2:03:f0:ec:43:87:94:9b:8d:90:ba:
0b:1a:9c:e5:e6:a6:0b:7c:ab:e1:39:ab:ea:51:7c:
d5:bc:2d:5e:b7:90:d9:16:bd:b2:55:a6:db:b5:29:
17:14:c7:3a:6c:90:df:6c:07:fe:ea:22:9e:ac:d3:
d9:9b:e4:33:bd:c5:7f:43:c0:26:1a:57:06:53:14:
d2:15:90:30:1d:ba:32:f0:60:ab:94:ba:42:85:ea:
10:4d:db:8c:65:06:a9:9a:bc:fb:fd:e6:c4:20:8a:
dd:6a:97:94:16:5c:2b:4e:77:6d:24:35:65:e2:7b:
b6:89:3f:1a:3a:fc:7e:8e:ba:7c:dc:ad:1b:7c:5b:
44:b6:ef:41:8c:13:ba:82:50:2c:c8:19:aa:69:c6:
ad:6e:22:94:0b:59:fb:d1:27:29:8f:1a:e0:48:1d:
ce:ac:2b:6f:36:41:63:18:fd:ee:37:76:7a:fe:f7:
6c:32:b1:df:1f:e5:31:ba:ca:8c:df:31:18:0a:ae:
30:46:fb:3a:16:dd:a5:5f:d1:ed:6f:93:17:1e:59:
d8:60:0b:08:bd:74:aa:a4:df:4c:63:a1:ba:5f:ad:
db:ef:78:b6:d7:ff:37:3f:a7:25:2f:65:f5:d5:ca:
33:61:99:5e:5b:eb:bd:5c:7d:c4:09:95:84:c1:53:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:E9:81:12:40:42:75:A0:FC:DD:89:E9:CA:BD:7E:4C:A8:4F:39
X509v3 Authority Key Identifier:
keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:33:6f:0a:7c:06:86:2c:81:a0:1e:02:df:13:24:84:5f:
a1:ca:4b:e5:fe:af:79:20:eb:f7:59:8e:51:91:c6:6c:3e:a3:
1e:9f:6f:6c:43:ac:ed:16:01:46:46:88:3b:2e:fa:b0:3e:e5:
82:d7:57:6d:98:ea:2a:18:e8:23:9e:d1:25:3a:62:a8:87:8a:
e0:e4:41:78:c4:ab:6c:96:19:45:cc:50:2d:d8:97:e9:3c:b8:
c3:4a:c6:fc:f5:36:50:03:27:c0:e3:40:1c:14:46:68:fe:18:
2a:62:bf:fb:1c:ed:1c:d0:f8:9f:34:bd:3c:ce:0d:f7:52:4e:
97:13:21:5b:41:50:8a:f3:91:00:63:88:35:ae:9d:7a:f5:fc:
1e:90:1d:22:82:bc:6b:21:fc:a8:8d:6f:db:3f:c5:21:22:da:
b0:bd:d0:21:6f:e4:a8:da:ef:32:84:d1:e4:67:6a:81:71:0a:
68:d0:5f:f2:3a:1e:d3:d1:ae:ef:fa:86:00:84:bf:1a:c2:c4:
31:98:fe:f7:b3:ad:49:9a:69:e9:29:1e:c1:69:42:6b:21:ff:
de:ce:a8:e5:ff:08:3c:1b:7a:e1:23:50:4e:3e:c0:25:69:13:
8c:f5:62:a4:eb:14:0d:74:de:9d:ee:2f:9e:90:ff:08:e9:0c:
3d:1d:62:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4
QzRCNTlFMTIwHhcNMjYwODE4MjE1NTExWhcNMjYwODI1MjE1NTExWjAYMRYwFAYD
VQQDEw02YTg0ZDRiZi1mZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTgK0gPw7EOHlJuNkLoLGpzl5qYLfKvhOavqUXzVvC1et5DZFr2yVabbtSkX
FMc6bJDfbAf+6iKerNPZm+QzvcV/Q8AmGlcGUxTSFZAwHboy8GCrlLpCheoQTduM
ZQapmrz7/ebEIIrdapeUFlwrTndtJDVl4nu2iT8aOvx+jrp83K0bfFtEtu9BjBO6
glAsyBmqacatbiKUC1n70ScpjxrgSB3OrCtvNkFjGP3uN3Z6/vdsMrHfH+UxusqM
3zEYCq4wRvs6Ft2lX9Htb5MXHlnYYAsIvXSqpN9MY6G6X63b73i21/83P6clL2X1
1cozYZleW+u9XH3ECZWEwVPyjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJY36YES
QEJ1oPzdienKvX5MqE85MB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC
OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz
eGVkLUhiajdhaldNUzFuaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcNszbwp8BoYsgaAeAt8TJIRfocpL5f6veSDr91mOUZHGbD6jHp9vbEOs7RYB
RkaIOy76sD7lgtdXbZjqKhjoI57RJTpiqIeK4ORBeMSrbJYZRcxQLdiX6Ty4w0rG
/PU2UAMnwONAHBRGaP4YKmK/+xztHND4nzS9PM4N91JOlxMhW0FQivORAGOINa6d
evX8HpAdIoK8ayH8qI1v2z/FISLasL3QIW/kqNrvMoTR5GdqgXEKaNBf8joe09Gu
7/qGAIS/GsLEMZj+97OtSZpp6SkewWlCayH/3s6o5f8IPBt64SNQTj7AJWkTjPVi
pOsUDXTene4vnpD/COkMPR1iog==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:33 2026 by rpki-client