
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
File: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft (raw, json)
Hash identifier: xnaz08FCxHLT7MuSO/GVaFe14ZpjfVl1YjYdhCBMmwQ=
Subject key identifier: 48:BB:10:11:07:0A:A3:22:6A:A8:EC:0A:0A:2E:F2:4E:9D:D2:E6:17
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Certificate issuer: /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
Manifest number: 47
Signing time: Wed 19 Aug 2026 07:22:48 +0000
Manifest this update: Wed 19 Aug 2026 07:22:48 +0000
Manifest next update: Wed 26 Aug 2026 07:22:48 +0000
Files and hashes: 1: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl (hash: Q1I3PRdYAUMbPEehurPme5t/zWlXYRy0N5wej4stVuE=)
2: 45BF99708C5811F1A357FB3A5A11F970.roa (hash: RPzJA2BPqoay2JqVAuv3o77KmWTYC1VndN9GobK8Jt0=)
3: 981FF46892AB11F1A333A10B5511F970.roa (hash: Do/lS6kWKqq9Tkqvs74KbgaQXctOq8lqX9YjBdlQv60=)
4: B5D64EB28AB811F1B074B7205811F970.roa (hash: qKd5afymQZlM/cId8LRp1Y4TdmnDpuG0QiI5DBVe0Uo=)
5: 979C13E692AB11F1A333A10B5511F970.roa (hash: +lJ8fH0HCSF5VU80NqbfpoZtmXjsieAi+koysdMKtPA=)
6: 9704608292AB11F1A333A10B5511F970.roa (hash: d666AZtciD9TC0SffMpGXXguyTM8DDzjhiraFNQTqTA=)
7: 4302A4EA9AFC11F1B7F600875911F970.roa (hash: Qax2zyC3D4kXwNYbSFHJRFkXJvaTsOR7hCX7dVLIwPM=)
8: B5F64DA092AD11F19B27DCBA5511F970.roa (hash: 9vPbPCkRbn7Hj/8z6ysXrTD7Tz1UoR8uqP+/G8fif54=)
9: 98B1AB6092AB11F1A333A10B5511F970.roa (hash: JKQHgGN19BzIR/HQmxNIMJHDKXETup4uH2VSXW31aUA=)
10: 6F13D28C800011F19BCC74A193A30FBC.roa (hash: b26oTHcM2szwGRCV9xOFRjDwz8UHReqIJKERGGoXCKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Validity
Not Before: Aug 19 07:22:48 2026 GMT
Not After : Aug 26 07:22:48 2026 GMT
Subject: CN=6a8559c8-bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:67:83:93:d5:36:08:fa:9e:48:84:21:81:
97:ed:80:65:2e:81:d1:33:de:3f:e0:0b:f7:2b:51:
9c:eb:c6:72:13:39:88:0e:5d:32:42:56:82:69:ed:
30:bc:a7:42:e6:34:97:d1:17:17:21:88:95:56:36:
49:ed:16:18:1e:74:e7:f9:1a:b5:f8:f7:e1:d3:e7:
8d:d0:9c:58:f4:1e:bd:45:d3:40:a6:b7:fc:0a:cb:
96:41:13:b7:94:34:e6:69:9a:ae:4f:50:bd:b8:f1:
c0:8a:f5:2f:5e:24:75:38:c9:62:48:54:e1:05:18:
4c:e0:d7:fa:d3:49:a2:57:b4:20:94:f0:65:32:79:
2f:9d:1c:a2:ea:7e:37:1f:1c:b2:56:20:cb:63:ce:
10:35:97:e9:d8:56:cd:c5:61:75:35:06:24:70:8d:
11:0b:12:2e:90:eb:72:f8:26:43:0b:00:5b:fa:ef:
94:36:d5:87:6e:eb:18:54:3d:0b:c2:fa:8c:c5:49:
3a:4f:19:56:c9:80:27:b2:16:71:70:09:2e:79:0d:
1b:81:49:d6:27:45:51:1c:60:ac:29:ba:90:76:46:
c9:9e:4b:4c:6b:60:e1:1b:8e:7a:66:e6:9f:de:93:
3c:9e:36:b3:20:1c:f4:27:9e:48:d2:47:2c:41:27:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:10:11:07:0A:A3:22:6A:A8:EC:0A:0A:2E:F2:4E:9D:D2:E6:17
X509v3 Authority Key Identifier:
keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:ff:38:b0:59:08:5e:8e:de:d7:bb:2a:04:2a:4c:27:e6:
1d:70:71:a8:44:7e:12:98:9f:be:bd:b7:07:7b:17:1e:34:38:
e6:c1:dd:0a:d2:6e:73:ce:d8:7a:22:f7:7a:11:7f:8a:e7:e7:
04:8d:29:05:88:89:4f:51:1f:21:a5:c4:94:68:e3:f6:7c:09:
47:9c:56:03:88:0f:0d:8c:b5:ff:a8:3c:e7:f1:36:2d:47:c8:
1e:00:61:fa:31:1a:53:0e:9b:18:7d:12:64:44:46:54:cd:c5:
13:2a:0b:51:52:9d:af:5c:ba:b7:52:93:dd:f3:89:a5:c6:5a:
cc:34:42:da:dd:98:98:1b:c2:15:d9:dc:19:a5:1b:b6:35:1d:
69:2d:43:4d:24:f0:1f:ff:69:72:99:0e:3d:85:bf:45:f1:63:
6b:c7:7c:91:35:52:fd:15:81:eb:f3:47:b8:4c:ac:e1:d1:9d:
68:27:45:a5:5a:54:4e:5c:21:16:ee:07:82:5f:77:e8:6d:91:
ff:7b:67:45:5c:b2:be:02:ce:2f:01:7a:dc:0d:89:9b:fd:76:
0b:a6:8e:9c:cb:66:84:3e:5a:31:44:b0:ea:5f:c9:2f:03:8a:
e6:97:d5:9d:37:ab:25:71:36:a0:9a:2d:28:46:c2:27:4a:53:
e6:62:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:55:22 2026 by rpki-client