
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json)
Hash identifier: E8I0IH1kypPm+AGJkpyGFd5q7BuzH2uKCK6iOfWIZxY=
Subject key identifier: 97:C8:BD:DE:8F:A9:E4:3D:04:D6:53:15:22:A7:1D:95:38:C5:57:40
Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
Manifest number: 024C
Signing time: Wed 07 Oct 2026 02:48:44 +0000
Manifest this update: Wed 07 Oct 2026 02:48:43 +0000
Manifest next update: Wed 14 Oct 2026 02:48:43 +0000
Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: NGIljwKL5cUF5kvOo8Nwlbwd2VZppZ4opdz15G4f9zU=)
2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: 7N2StUmPE70BVOLqSC1CSXVVp2n3H7wqr0u0r+i43tQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Validity
Not Before: Oct 7 02:48:43 2026 GMT
Not After : Oct 14 02:48:43 2026 GMT
Subject: CN=6ac5b30c-8ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:94:e6:84:7a:a9:c2:bc:e9:b7:8d:c7:2c:
3f:cf:52:55:52:99:f8:da:da:dc:da:30:f3:fd:6e:
89:b1:43:2a:47:27:f9:ad:3d:d7:ef:e1:3e:01:be:
3e:5d:38:eb:1a:40:20:78:c3:3b:ad:d8:0b:6d:ca:
bc:de:7e:ab:3d:b6:14:ad:f0:ed:81:31:0f:c9:f4:
5d:97:b4:8a:05:99:97:5c:b5:fe:54:8d:50:be:ed:
d0:9f:e6:22:c4:b8:76:3a:9a:e1:9d:03:74:64:e0:
d8:f5:d7:46:ef:c9:ed:cc:9e:71:39:81:ed:ef:5a:
b8:f5:60:e4:bb:7a:03:e3:5f:78:b4:fe:0a:ba:4d:
6c:42:5a:81:d3:6e:aa:87:1e:ae:5d:0b:ff:21:78:
66:72:9c:1f:09:d5:0d:67:f0:6b:9f:5d:45:3f:a3:
2d:89:09:40:b5:99:8e:b9:88:d2:90:85:ad:d0:7f:
6a:18:02:dd:b6:b0:c9:bc:d7:65:5e:f3:60:16:be:
6f:34:35:10:ae:97:ab:13:9a:63:7e:c3:fc:c9:e0:
ed:4a:4c:6e:a3:2c:10:b3:aa:77:4b:0e:2c:1a:4c:
11:09:51:e4:50:35:0b:46:4f:87:ba:01:a8:ef:95:
e3:81:21:d6:d3:5f:a1:d7:b9:fd:b1:b2:ef:5a:a7:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C8:BD:DE:8F:A9:E4:3D:04:D6:53:15:22:A7:1D:95:38:C5:57:40
X509v3 Authority Key Identifier:
keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:e2:c9:1e:aa:a7:ff:55:4a:ad:cb:90:d1:11:09:82:79:
33:2f:08:55:1a:67:1b:ec:91:6f:83:65:9d:8a:eb:89:47:37:
fb:2c:e5:af:26:ef:ca:d3:9d:46:5a:8d:74:a1:8c:67:dc:47:
29:ba:f3:82:76:41:f5:f6:d7:e6:cb:43:cc:e4:7f:31:bd:97:
ef:e8:f3:57:dd:92:ec:bc:cc:02:c2:60:7a:8a:9e:ff:30:b3:
a5:37:b9:7c:26:2f:6c:3e:49:56:07:13:73:55:d2:72:c3:0b:
e5:bf:e2:a0:41:c8:ce:cb:84:45:bd:47:fc:4c:6e:90:0c:a1:
d2:ea:a6:54:23:c4:75:28:10:9a:ca:e1:32:60:e2:dd:48:bf:
ea:9f:4a:7d:6c:f0:2e:2e:0d:c8:a7:01:c6:ab:17:e7:bd:75:
e1:fa:6d:ca:17:1c:85:e4:ff:2b:25:ec:38:3b:a3:00:23:cd:
c0:23:81:99:10:25:ce:5b:85:11:d6:e2:4c:94:78:d3:e4:f0:
fa:6d:39:ac:78:cf:d8:8b:60:ad:b4:dc:61:25:5a:0b:50:b0:
e7:cd:93:87:be:c9:1e:1c:51:7a:60:98:02:9e:58:89:aa:5b:
ca:a0:23:f7:af:66:04:56:fb:56:40:d1:06:19:01:ee:37:3c:
7c:6f:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:55:59 2026 by rpki-client