
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File: 8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier: SyiMTxFx7zXdt747On+rlx7BUlmbqICXHfYobsMWn4c=
Subject key identifier: EE:8C:AB:F2:A0:17:D2:01:7F:1D:A9:79:A8:CF:32:65:B2:BD:82:E6
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number: BB
Signing time: Sun 25 Oct 2026 07:22:28 +0000
Manifest this update: Sun 25 Oct 2026 07:22:28 +0000
Manifest next update: Sun 01 Nov 2026 07:22:28 +0000
Files and hashes: 1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: Qw2q5DR1d/aLPvCeGJYeB4/p6yZXlguokGXkj/ave9A=)
2: avcnNk0Svr4rdAVCP0aGwo0YLS0.asa (hash: m28mvr458ObPdJVayhq8d1ucBWQhP+gI69eSt6MlFKI=)
3: F8309360B31411F1836BA7DEA8EE528E.roa (hash: q2AuTnFNg9kXhKe7dFa23qHrCyJOuC7F1p8DiBKw7Gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Validity
Not Before: Oct 25 07:22:28 2026 GMT
Not After : Nov 1 07:22:28 2026 GMT
Subject: CN=6addae34-5190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:db:ca:8c:8e:f3:11:92:29:61:e5:40:45:
b1:3b:dd:92:d3:8a:b2:66:63:1a:d9:31:95:47:42:
48:88:2b:e5:1b:36:06:16:88:95:3a:45:a1:d7:9d:
81:93:13:52:9d:4f:17:8a:8c:e7:e8:c9:ce:dc:f0:
d1:69:03:2d:3e:f5:e8:2f:16:59:c2:a2:8b:f2:19:
88:f8:18:18:b4:2b:f7:da:97:6e:11:f7:41:c5:d2:
5c:02:92:d6:25:78:94:9e:a4:94:09:07:5b:73:9e:
61:2e:eb:32:a7:33:a3:fe:ed:00:7c:00:5a:5c:9a:
22:55:2b:0e:77:a1:69:45:84:1e:8b:47:82:a0:20:
e8:df:c5:eb:b0:a8:55:7f:b7:12:d4:2a:9a:a2:cb:
11:bc:a8:c0:fd:6d:c8:55:7e:b0:72:7a:bf:b5:2a:
02:79:cc:98:9c:9b:ca:66:3c:07:fd:80:d0:b6:60:
7d:9e:31:bc:13:7d:22:ee:69:51:cb:ee:fb:d4:ff:
1b:02:ef:9b:1f:44:55:58:97:cf:d6:a8:15:8f:a7:
74:1e:82:bb:44:fa:0b:ab:91:47:be:65:6f:53:d7:
5e:c0:95:ec:53:52:24:95:c7:32:ba:c1:1b:cf:94:
4c:89:3b:d5:bb:86:2c:3b:f7:da:e9:80:c1:68:de:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:AB:F2:A0:17:D2:01:7F:1D:A9:79:A8:CF:32:65:B2:BD:82:E6
X509v3 Authority Key Identifier:
keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:43:55:bf:92:d5:86:f6:ab:71:74:e7:61:e1:55:40:d1:44:
5d:db:f5:a9:93:5d:3d:78:06:8f:2a:2a:d5:1d:f9:a5:7a:4a:
a6:04:99:04:61:06:64:2b:80:eb:74:36:4a:a9:60:a2:9a:c5:
16:b1:1a:b3:38:27:18:b0:57:35:32:ab:4f:55:de:49:51:d6:
79:df:ea:c7:52:06:b0:a5:5d:ee:d3:96:c0:fa:4a:c4:0b:0b:
85:f2:52:27:3b:87:f1:43:45:21:d3:6b:49:40:02:33:04:04:
b4:5a:ba:0d:33:9c:c5:df:e2:d0:d8:b8:7e:d3:b5:92:f1:39:
77:f4:22:92:20:44:5d:7a:98:e5:a7:b8:b2:b6:8f:53:21:34:
17:af:2b:94:c3:90:83:1e:77:36:91:96:4d:16:bf:40:65:27:
4c:ad:8f:d2:a3:ea:dd:24:05:98:f7:24:e4:b9:9b:da:2c:16:
02:12:0d:b7:cc:19:5c:a9:79:e1:b1:68:a4:1d:73:fb:05:5e:
a9:0a:1d:6a:0e:40:9f:a3:5a:0d:88:69:5d:d6:58:18:db:9d:
72:1f:69:b0:14:9d:20:24:23:45:09:15:a0:fa:d6:a0:66:82:
53:76:d4:2e:1f:c3:8b:0a:73:a4:da:5f:a4:63:a8:59:d2:97:
9e:59:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:58 2026 by rpki-client