
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier: tx19Hkp5I7m5HEdepI4GVuy+hl5pLphXiQAJVWiUPZs=
Subject key identifier: 59:CE:DD:57:89:FF:B8:8A:BF:38:3E:91:05:FD:70:53:7D:90:B4:A4
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number: 0305
Signing time: Tue 27 Oct 2026 00:57:59 +0000
Manifest this update: Tue 27 Oct 2026 00:57:58 +0000
Manifest next update: Tue 03 Nov 2026 00:57:58 +0000
Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: FHgM/YgA6q+GZ8qQhSy+mYU8AbTX5HvlknY+Yvv3lTY=)
2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Validity
Not Before: Oct 27 00:57:58 2026 GMT
Not After : Nov 3 00:57:58 2026 GMT
Subject: CN=6adff717-9244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:f3:12:f9:3a:77:62:08:6c:ab:e8:e9:fb:
a2:3f:5f:29:04:62:b2:7c:3d:40:3f:f0:57:69:3f:
d4:4f:05:65:24:b7:02:ca:29:0f:24:ff:41:61:16:
12:e2:e7:00:a3:97:74:dd:47:2a:4c:2f:f7:4c:14:
34:a3:37:da:a9:57:6f:8e:55:e3:ae:22:c0:60:10:
24:49:d3:c3:bb:93:30:99:58:ef:83:a8:ff:01:4f:
85:ea:a1:2a:a2:36:89:96:87:ae:57:21:29:bc:5a:
a3:04:5a:d4:72:c8:de:e4:a1:98:5a:c3:47:92:ce:
c7:a3:8b:8c:02:db:5f:6c:62:c2:78:29:aa:d0:5a:
f1:52:ff:b4:a1:37:cb:34:34:c5:27:7f:4e:9d:8f:
2c:6c:ac:02:74:54:9b:ca:39:cb:13:75:9f:f2:5c:
ae:e3:9f:82:14:a1:b3:01:75:05:36:55:14:52:b3:
14:e0:cc:6a:fe:40:f7:47:e3:54:66:1d:42:ec:fa:
00:d8:38:f8:a1:57:7b:25:1a:a7:e9:dd:e0:61:8d:
2b:93:22:eb:60:bb:66:98:a6:d8:30:87:c0:a7:7f:
d4:38:24:22:cf:a3:41:d7:2c:0a:42:d3:dc:5d:81:
6b:ce:58:8d:d1:71:c0:29:1d:eb:28:4f:a2:0e:1a:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:DD:57:89:FF:B8:8A:BF:38:3E:91:05:FD:70:53:7D:90:B4:A4
X509v3 Authority Key Identifier:
keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:24:9b:af:0c:d1:41:8f:d3:ec:71:bd:fb:de:0e:bd:48:b7:
91:bd:1e:f0:48:13:47:05:c2:16:6f:b2:f7:9b:ed:6c:e0:50:
da:0e:01:a5:2e:5f:81:1f:63:1b:cd:9d:d0:c7:f1:8e:66:88:
4f:79:ea:98:f3:80:bc:a4:10:44:96:fb:98:4a:55:1d:85:28:
a2:11:58:d6:76:e4:ab:eb:7a:e4:70:4b:6d:4a:bf:bc:d5:6f:
d3:30:e2:54:2d:f2:0f:48:58:ad:ad:ef:86:ff:ae:f3:74:64:
d0:23:2c:82:12:28:9b:d0:84:d7:02:a0:e2:f4:5c:85:d8:5d:
30:6d:49:89:bf:ba:18:05:55:83:92:96:58:a3:d9:43:66:b7:
a7:80:b8:02:a1:9d:c6:ab:19:be:a9:6c:60:d0:f3:c3:40:27:
26:16:f5:ab:4c:ba:79:2e:81:d3:55:1d:b0:0d:03:cf:6c:36:
21:d7:29:9f:6b:14:21:dc:a7:00:df:10:c7:4d:94:5e:a4:51:
5a:2e:8b:a4:14:bb:54:1f:cb:31:8e:26:8c:20:d1:be:e8:df:
96:cb:ec:a8:cf:6c:80:84:d4:1c:9f:e4:01:59:0d:ae:33:4e:
a9:dc:33:c8:c9:eb:21:24:35:d4:a2:de:af:8a:91:60:6d:33:
ab:e8:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:55:34 2026 by rpki-client