
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: 8xu61PFqrwwCztcvyb1KEldk466tCQjVKdxh/MY1w6M=
Subject key identifier: 4D:8B:99:35:1D:25:45:70:50:13:31:14:1C:6E:3B:51:76:BF:26:77
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 04AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 066C
Signing time: Sat 03 Oct 2026 00:12:56 +0000
Manifest this update: Sat 03 Oct 2026 00:12:55 +0000
Manifest next update: Sat 10 Oct 2026 00:12:55 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: NIivGveiDKSnFEIEUfPoBiWjB9Nm9UtDIaHG9WoXj18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Oct 3 00:12:55 2026 GMT
Not After : Oct 10 00:12:55 2026 GMT
Subject: CN=6ac04888-4072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:5e:4c:92:78:1b:41:ae:48:5c:45:73:95:
36:74:11:59:a7:10:89:1b:f1:b2:b1:d7:c3:e5:7a:
39:b5:51:b8:46:28:29:82:49:64:b6:6f:3d:4f:92:
d6:bc:17:56:8a:0f:e5:de:9b:4f:7b:cc:b2:42:a3:
79:fb:d2:0d:a6:83:38:13:ae:07:64:12:72:78:45:
dc:b7:9e:ba:e3:72:bd:5d:49:19:b3:26:86:20:26:
14:f2:e6:fb:97:d0:9c:48:f4:2f:c1:4a:df:5c:fa:
5a:48:d3:9f:7b:90:35:d8:9b:c0:12:f3:88:7c:78:
9b:2f:4d:de:21:5d:9b:9c:ac:db:4b:93:b2:7b:a0:
f3:71:ce:7e:28:58:34:77:1e:25:8f:f1:59:9f:2d:
b8:6f:e7:71:f3:2e:f8:18:34:4c:b8:fc:27:f0:df:
dc:28:7e:51:e0:97:dd:b4:5c:8d:b5:97:97:c8:e8:
a3:5a:c7:6d:30:d3:69:85:75:75:f5:ab:92:5b:bc:
2c:e8:37:d0:6f:19:b3:25:66:ec:ff:3f:67:94:40:
12:53:d3:51:23:8a:d0:08:a3:65:83:36:2c:fb:77:
8e:77:7e:34:30:a3:ff:11:98:ef:f1:b4:ef:77:0f:
a6:59:cd:73:ce:5a:f4:51:1b:21:7a:db:61:b6:5b:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8B:99:35:1D:25:45:70:50:13:31:14:1C:6E:3B:51:76:BF:26:77
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f3:be:15:3e:26:b8:d9:f5:fe:20:e1:b7:25:24:fe:74:c4:
05:6d:0a:e2:ca:e8:f3:bb:5e:97:7e:a2:ce:1e:4f:55:cf:03:
37:9b:ef:49:c2:ab:16:89:89:79:76:0c:99:2f:7c:51:4b:e0:
11:98:eb:33:1c:86:59:7f:b3:fa:73:d8:6f:6a:df:82:15:81:
06:05:a5:89:ca:a5:c7:83:5d:97:c8:44:59:22:af:10:76:15:
41:af:97:8f:b7:cb:1a:d2:d4:97:eb:10:f2:6d:9d:41:43:d0:
28:24:53:99:0b:34:71:19:18:3b:10:90:f7:30:3b:03:9c:b1:
ab:62:6c:5a:37:c5:ae:b3:5e:63:37:09:b2:81:21:b0:1f:34:
e0:38:a8:d4:99:86:59:0b:84:7b:56:81:bd:1f:7f:51:59:af:
c9:39:e2:73:92:e9:1d:83:94:77:eb:0b:b6:22:7e:77:a8:a4:
bd:06:80:af:22:be:69:e4:80:77:6e:b9:f7:88:d4:9d:8c:9d:
ce:71:25:66:16:4f:13:ea:65:68:68:c8:2b:f5:98:90:bd:93:
91:4e:e6:34:03:e9:78:fc:d0:bf:fb:f2:0c:56:60:d5:f1:60:
fb:75:f2:01:40:48:14:cd:4b:96:f7:9a:f5:8f:67:23:67:72:
46:44:bf:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw
NTBGRDFENDYwHhcNMjYxMDAzMDAxMjU1WhcNMjYxMDEwMDAxMjU1WjAYMRYwFAYD
VQQDEw02YWMwNDg4OC00MDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkFJeTJJ4G0GuSFxFc5U2dBFZpxCJG/GysdfD5Xo5tVG4Rigpgklktm89T5LW
vBdWig/l3ptPe8yyQqN5+9INpoM4E64HZBJyeEXct56643K9XUkZsyaGICYU8ub7
l9CcSPQvwUrfXPpaSNOfe5A12JvAEvOIfHibL03eIV2bnKzbS5Oye6Dzcc5+KFg0
dx4lj/FZny24b+dx8y74GDRMuPwn8N/cKH5R4JfdtFyNtZeXyOijWsdtMNNphXV1
9auSW7ws6DfQbxmzJWbs/z9nlEASU9NRI4rQCKNlgzYs+3eOd340MKP/EZjv8bTv
dw+mWc1zzlr0URshetthtltYzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2LmTUd
JUVwUBMxFBxuO1F2vyZ3MB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1
NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF
MGM2MTA1bWxBYllGRDlIVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD/O+FT4muNn1/iDhtyUk/nTEBW0K4sro87tel36izh5PVc8DN5vvScKrFomJ
eXYMmS98UUvgEZjrMxyGWX+z+nPYb2rfghWBBgWlicqlx4Ndl8hEWSKvEHYVQa+X
j7fLGtLUl+sQ8m2dQUPQKCRTmQs0cRkYOxCQ9zA7A5yxq2JsWjfFrrNeYzcJsoEh
sB804Dio1JmGWQuEe1aBvR9/UVmvyTnic5LpHYOUd+sLtiJ+d6ikvQaAryK+aeSA
d26594jUnYydznElZhZPE+plaGjIK/WYkL2TkU7mNAPpePzQv/vyDFZg1fFg+3Xy
AUBIFM1Llvea9Y9nI2dyRkS/Pg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:29:36 2026 by rpki-client