
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json)
Hash identifier: 1a87F0ZBXlYuiHnkj7VIAJbZbk8AH5XYZznjAkJzS7o=
Subject key identifier: 22:87:EC:9B:93:90:56:3E:68:37:8A:12:F3:1C:AB:8F:F1:2E:66:F4
Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
Manifest number: 012B
Signing time: Tue 23 Jun 2026 05:50:57 +0000
Manifest this update: Tue 23 Jun 2026 05:50:56 +0000
Manifest next update: Tue 30 Jun 2026 05:50:56 +0000
Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: bCT4mWLmFh0ciTQuivxi0J4i9F6LiJEQJuU8FZHtHkw=)
2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: uOIwGBtnkiFkTWiwV37tpuSWY4L6Fnh3Dr2QZu/SFEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl
rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
Validity
Not Before: Jun 23 05:50:56 2026 GMT
Not After : Jun 30 05:50:56 2026 GMT
Subject: CN=6a3a1ec1-fa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:45:0f:87:4f:f6:6e:ee:a5:f7:7b:d5:ca:
20:3a:ce:9e:3d:d4:9f:ae:da:05:80:4f:6f:39:c2:
3e:52:db:64:a4:01:9c:d0:89:ed:d9:46:32:8f:2f:
44:f1:b2:87:42:2b:b7:da:42:67:5e:9a:50:ea:82:
f7:57:65:f9:95:aa:d8:80:a4:ae:c6:c6:47:8e:83:
8d:84:02:6b:80:62:c5:48:bc:56:6e:3f:19:97:91:
ab:2c:9e:4f:d4:b9:8f:2f:11:b1:1d:56:51:b6:c8:
e3:b9:38:b4:5b:e6:c3:c9:3b:c9:ff:3b:4c:24:e4:
64:3b:7a:7d:d8:e5:e8:27:4b:c6:57:ac:6a:6c:ff:
04:1a:17:ad:ec:7b:b0:d2:a5:1a:0f:17:da:c6:8a:
97:18:0f:3d:c3:08:6e:2c:37:7f:60:50:c0:9e:28:
66:cb:89:ad:8e:3c:85:78:d3:74:74:24:54:bd:a1:
bb:80:1c:ce:83:87:98:3b:0d:64:5d:39:b6:e0:a5:
c2:8a:f8:95:0e:45:05:62:35:31:24:6f:bf:ab:bb:
e7:02:17:4b:f1:63:3b:99:f7:af:d8:85:eb:82:d4:
18:26:eb:45:d8:49:83:f9:69:9f:cb:5d:2c:5e:09:
53:fc:a2:33:c2:4d:2f:d3:04:c6:9e:62:00:7b:83:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:87:EC:9B:93:90:56:3E:68:37:8A:12:F3:1C:AB:8F:F1:2E:66:F4
X509v3 Authority Key Identifier:
keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:eb:f8:18:ec:69:dd:56:5c:60:09:78:ba:f2:08:13:ee:fd:
3e:fe:93:20:6b:f3:5e:e0:df:2f:81:de:95:00:b7:8b:df:52:
5c:ad:f3:b4:42:e7:4d:c4:98:e0:33:ac:ae:d3:75:7e:5f:4a:
00:a7:aa:46:3b:2c:c9:7b:c7:6e:63:29:2f:a0:61:1e:d1:05:
36:c3:d1:d9:3d:26:7b:13:2c:2e:07:0a:75:ff:68:61:c6:dc:
8b:44:2b:5f:30:e9:63:9a:66:3d:7e:93:26:e7:11:45:a2:02:
3e:46:66:e5:10:ff:5b:24:d5:54:9f:9f:ed:16:b6:ec:00:3c:
87:7f:55:1f:1b:8f:7d:c7:fb:00:51:64:1c:17:99:09:a4:2b:
45:d3:b2:c3:84:76:dd:9b:03:25:ec:c8:67:23:49:7e:b3:44:
b4:57:74:c1:48:a9:55:3c:e2:a5:c3:0d:95:e4:7a:07:82:e7:
62:9e:9b:95:1e:9a:5d:7b:33:26:dd:85:b3:e9:9a:69:73:a2:
a3:0e:db:6b:df:80:05:f8:fe:1d:c1:61:a4:ec:2a:01:c2:7d:
1e:a0:90:2f:8e:88:26:1c:3d:fa:ec:d3:9c:b6:6a:35:45:21:
c3:c5:b4:49:3a:5c:fe:c9:28:7e:73:45:43:6c:27:29:7c:22:
cf:02:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:47 2026 by rpki-client