
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json)
Hash identifier: E0nz4/QlCWHclelFVn91iDwkGs/t54oxYxsOgioAuDk=
Subject key identifier: 02:4C:36:96:F5:34:7D:81:DF:C8:A4:8B:16:86:06:E6:DE:EC:1A:9E
Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87
Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
Manifest number: EB
Signing time: Wed 19 Aug 2026 07:05:49 +0000
Manifest this update: Wed 19 Aug 2026 07:05:49 +0000
Manifest next update: Wed 26 Aug 2026 07:05:49 +0000
Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: BnfQyxk5Fl8GyxIv9g9BF3+H54yi8AXtwSbbw2swpdM=)
2: AE67395858D011F1B2604194A2833773.roa (hash: 0/14bImAgE2URSR4c1VW0n5tknPVytdkPxXZ0kflIto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
Validity
Not Before: Aug 19 07:05:49 2026 GMT
Not After : Aug 26 07:05:49 2026 GMT
Subject: CN=6a8555cd-0794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:b7:c5:26:22:c6:14:bc:49:e5:bc:66:e8:
8c:62:43:af:38:e2:b1:56:3f:1c:57:d1:06:97:ef:
57:5d:8f:39:29:34:70:d4:37:fb:4a:d6:c5:d8:e8:
ee:f6:75:56:4d:92:9b:cd:0e:64:ac:06:4a:df:5a:
40:5b:b6:70:45:8b:70:14:c1:e2:df:6e:b8:75:c9:
46:84:6b:75:ab:5a:c8:67:08:a1:1f:a2:97:80:42:
5b:b9:fa:93:0f:ef:2f:be:c5:c5:0f:63:07:3a:30:
c0:82:6e:39:c7:b5:2e:4b:56:e2:c1:8d:56:8e:e3:
ae:71:01:d6:fa:79:79:46:b7:1e:e9:dc:fa:f2:4e:
92:d7:f8:36:02:cb:98:b2:ae:28:71:b6:a8:8d:67:
bb:da:5a:cd:cc:d4:57:16:b8:d8:82:f2:76:54:39:
bd:38:a5:a8:5e:b8:ac:3d:a6:1f:68:52:9a:80:e5:
98:fa:6a:e9:cb:3c:a5:6a:59:d1:1d:90:97:1b:1e:
b9:fa:9d:f4:37:95:03:98:f1:ec:17:de:17:23:d7:
03:e6:0c:63:35:d7:15:0a:41:67:a9:79:fd:15:d3:
f5:cf:05:41:7a:77:24:26:5c:ff:b6:8d:1d:8c:d8:
8e:d1:59:0b:c9:5d:09:d2:33:ec:cd:ed:83:f1:93:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:36:96:F5:34:7D:81:DF:C8:A4:8B:16:86:06:E6:DE:EC:1A:9E
X509v3 Authority Key Identifier:
keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:00:5a:4d:1a:d8:6e:ab:d5:df:11:66:36:e3:dd:d6:5b:f7:
d2:18:89:a3:0a:f0:b1:9e:79:a3:5a:2a:ab:53:0c:99:e0:52:
8f:98:a2:03:2f:ea:23:e6:55:5d:24:05:2e:4f:db:f3:27:c5:
fa:cc:4f:a7:34:4e:5d:0d:b7:b3:c7:6b:30:51:03:31:56:5c:
21:3e:ca:07:8a:46:f3:24:82:6f:0d:17:7b:b2:9b:90:0f:22:
af:63:6b:c1:d5:20:14:24:95:5f:3d:6a:18:ab:f4:30:d2:18:
8c:56:40:41:f0:a6:96:2f:10:00:ed:89:cf:cd:da:60:c3:ee:
83:78:61:60:5f:99:ca:4a:a3:ae:69:44:ce:15:35:b9:9d:65:
e3:6b:4c:6e:5f:32:e8:d7:58:a3:52:0c:4b:7d:e8:76:80:da:
08:bc:f3:dd:5d:26:72:ab:50:ba:d3:b2:c9:68:e2:40:71:91:
e5:ee:f4:92:5a:d1:4a:da:c9:f3:8a:4b:3e:83:06:9f:b5:b0:
0d:64:61:e0:98:d4:a4:89:f3:c5:6d:18:1b:66:d6:f9:80:a3:
3f:6b:18:0b:25:f2:b1:be:9b:3e:b2:90:71:a4:a4:b1:d7:fd:
ea:f0:93:c4:ba:96:83:08:66:60:de:8a:e7:0c:65:50:7a:77:
21:56:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:44 2026 by rpki-client