
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json)
Hash identifier: H9UsWHm5rYwHHVnwQ9O9IfB5pCsHyKphaJXBcK62FoY=
Subject key identifier: 87:F8:0D:7F:97:9C:4C:78:C7:D4:18:8F:D4:C7:07:05:BC:B3:39:34
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
Manifest number: 02E0
Signing time: Wed 19 Aug 2026 01:39:32 +0000
Manifest this update: Wed 19 Aug 2026 01:39:31 +0000
Manifest next update: Wed 26 Aug 2026 01:39:31 +0000
Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: /B+ba6Jzm96ubleDDIpqIhR0u0pkK1L7v9q2BX8N9qo=)
2: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: CYGWWz/nixHL5zlXfnZLMHoHJguF5UwXiTUzH6J+3lQ=)
3: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: GzxKXa3buEq11SyhBYB0QOC/CAu38GX6nYU4rsrNTsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Validity
Not Before: Aug 19 01:39:31 2026 GMT
Not After : Aug 26 01:39:31 2026 GMT
Subject: CN=6a850954-ce51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:79:73:47:ca:ba:9a:89:31:fa:b8:a3:7f:
8e:82:50:0a:27:83:ae:69:07:5b:17:0b:ed:e3:f1:
ef:b1:4b:dd:df:ed:76:fb:6f:0e:0c:6c:6d:14:77:
6b:34:f4:30:71:a6:f4:bf:41:96:d1:3f:d6:d2:ac:
5e:2d:87:2e:83:d8:b3:c9:b0:6e:a6:a0:7f:c8:14:
cc:87:8d:7a:a5:78:50:25:1c:5f:64:c6:76:f3:29:
2f:37:ea:f4:07:95:47:dc:80:9e:24:c5:fb:6b:ea:
ef:fc:88:18:3c:a0:db:8a:95:9d:9b:84:dc:22:ba:
2d:fc:04:25:09:34:37:e8:fa:b6:eb:56:79:d5:d4:
29:8b:c1:d1:ee:16:06:ed:d5:f9:e7:22:4a:f0:96:
b2:12:4c:63:2b:ba:f5:73:44:f4:68:df:2a:de:52:
d3:c1:7a:f9:d0:ed:a7:60:1b:ed:96:f5:d4:5d:28:
46:35:13:51:94:5c:fe:b4:e0:25:32:02:59:73:1d:
56:76:51:0f:67:fb:54:c3:b2:f6:e9:d0:bf:c6:0b:
d8:c5:fd:73:41:09:b2:1c:b1:9b:16:89:b9:a2:e1:
e7:43:1c:aa:b2:0e:9e:36:c8:91:13:0c:28:90:ab:
e0:2c:42:a8:e9:7f:bd:bd:42:d5:04:59:54:a7:d6:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F8:0D:7F:97:9C:4C:78:C7:D4:18:8F:D4:C7:07:05:BC:B3:39:34
X509v3 Authority Key Identifier:
keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:23:59:e9:22:88:28:ad:2a:dc:c1:bd:59:3e:dd:f3:30:64:
c3:09:a0:72:06:6a:44:c7:b7:f4:bf:55:40:ca:2e:83:16:a2:
0d:b8:8a:5c:dc:70:47:7b:89:4d:08:66:86:5f:66:7a:f2:e8:
1d:eb:c7:55:d7:de:be:35:e0:4c:c1:c5:26:17:72:a4:8d:c6:
ff:af:2c:90:5f:5a:8c:79:2e:9e:2e:71:e8:de:64:e3:00:b7:
27:15:49:b1:34:6c:9c:54:53:0c:1c:e8:ff:74:31:e6:91:eb:
4f:d8:bc:a3:44:76:53:93:de:c1:28:26:a9:cf:2e:97:c8:59:
e1:b4:68:56:03:9e:00:5d:98:27:3f:ba:26:d8:35:bf:47:a4:
67:ad:c5:00:3e:ab:21:16:32:c8:b4:59:a2:25:71:82:79:7c:
c3:4a:16:0b:dc:53:d8:0d:57:40:19:82:20:ef:62:3e:74:cc:
df:9a:f1:6e:ed:94:d7:08:1d:28:74:18:14:f2:4f:aa:b2:11:
21:11:90:27:5e:72:0a:58:23:8b:96:cc:e0:db:c7:12:31:51:
0d:a0:f1:05:46:9a:61:5d:c8:fb:14:3c:fd:2b:08:dc:ed:94:
2f:e6:1b:6a:41:af:cd:54:9e:6a:1c:19:79:c2:a4:3a:cc:d3:
3c:59:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:25 2026 by rpki-client