
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
File: A8hWADTpF_SEBrQEaVALI_OVa10.mft (raw, json)
Hash identifier: fY2LugQmAPJPXG8tig+BssaoBIpebC1vMRSPwR2MRT4=
Subject key identifier: EF:B7:DA:77:86:4B:39:61:A5:7E:77:DB:35:B3:EF:2F:67:A6:42:78
Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Certificate issuer: /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
Manifest number: 02F5
Signing time: Wed 07 Oct 2026 02:48:37 +0000
Manifest this update: Wed 07 Oct 2026 02:48:37 +0000
Manifest next update: Wed 14 Oct 2026 02:48:37 +0000
Files and hashes: 1: A8hWADTpF_SEBrQEaVALI_OVa10.crl (hash: YGWDWJzZBUgmD74qbxrI5FMKb854aewJWxmGUdEW1yQ=)
2: CAD00992C9C611F09C9EF018C4F9AE02.roa (hash: 1WK0pKqWk649s/jspmynYFwLv9eNrG6RsSK4CLXFtLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Validity
Not Before: Oct 7 02:48:37 2026 GMT
Not After : Oct 14 02:48:37 2026 GMT
Subject: CN=6ac5b305-2696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:aa:1b:c1:df:8b:f8:ee:4b:58:b4:9d:df:
cf:ff:c6:ff:e7:27:fc:f3:ef:fb:b4:08:f4:c0:18:
64:cc:9b:01:7d:3a:39:42:1b:db:43:99:fe:c5:74:
ff:b8:0c:b3:cd:49:bb:57:25:2a:48:38:c7:75:6e:
13:b3:50:3d:6c:81:e6:42:a1:fc:b9:41:f1:d9:32:
6d:a1:97:b6:3a:a7:ec:f9:b6:eb:5f:25:bc:d8:6c:
77:62:ee:b9:53:2e:68:44:05:1c:10:7e:cd:6c:f0:
4f:f8:6d:eb:c5:61:96:eb:e3:56:d5:6f:92:a5:1f:
2f:53:a0:a0:9f:cb:15:bd:e0:88:a1:c0:2c:98:9f:
f8:9b:42:b9:bc:ba:ee:8a:1a:4b:75:d1:17:53:0f:
68:78:ae:f9:9f:74:12:b6:8a:fe:5e:5c:b5:c7:bb:
25:ce:d4:31:fd:62:45:94:71:90:cf:b5:19:1e:bc:
0c:c2:16:c2:a3:fe:c5:a2:04:1a:c6:69:4d:00:0a:
fb:f1:19:42:da:f2:2d:35:8f:0e:2a:12:88:af:07:
55:f9:87:7a:5f:9b:bf:9b:62:7e:6f:7f:10:06:55:
37:84:c2:b9:52:4b:3f:ec:b7:a1:8c:0d:3a:81:5e:
1a:6e:4b:07:3c:77:f2:13:1a:71:85:2e:0f:61:d3:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:DA:77:86:4B:39:61:A5:7E:77:DB:35:B3:EF:2F:67:A6:42:78
X509v3 Authority Key Identifier:
keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:84:4b:f0:ef:4c:c9:2a:56:32:d2:d6:9a:a9:d2:0f:00:b2:
18:23:30:4f:6f:bf:a6:70:7e:6d:8a:f3:e5:e6:0e:3a:81:c8:
a4:e4:b0:97:6f:94:8b:0c:12:a0:03:c1:30:31:e2:c1:87:db:
2a:b1:01:77:28:c7:da:44:02:91:88:59:3e:c3:66:ad:29:fb:
1a:4a:31:20:8f:a4:da:a8:82:d5:e4:f4:30:de:9d:71:00:fa:
82:c9:15:d2:fd:7d:11:88:3b:b1:df:76:db:e2:01:0f:53:27:
c8:53:e3:d4:6f:3f:0d:67:01:c9:03:ea:13:30:7b:a9:c2:a0:
dc:a4:1a:e2:0d:23:53:0c:80:e5:bf:45:92:3c:28:63:91:11:
fa:1d:87:ad:97:3a:52:af:fd:c6:24:2d:ca:70:70:77:97:8c:
bc:7d:ef:c9:ca:78:20:b6:33:f1:51:1f:03:69:9a:97:0e:a8:
73:26:4c:cf:1a:ba:83:25:e1:7c:b6:40:57:4a:7a:c0:32:53:
2d:3e:89:ef:74:4d:6f:2a:aa:9b:67:6c:70:31:d0:26:8a:e4:
1b:06:b7:d2:ca:3d:a3:51:3a:ca:b4:05:07:b7:72:e9:2c:9c:
cc:2b:98:a7:d6:ec:21:fb:e3:b5:df:dc:8b:26:29:c5:51:5b:
4d:7e:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:58:57 2026 by rpki-client