
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json)
Hash identifier: memiskOKGGwCuKCAIVAiVnCAay6Yj6odwaw3YzWfqvg=
Subject key identifier: 14:75:7F:A7:43:54:1B:11:7D:B6:EC:F7:D9:6A:9E:B2:33:87:6C:EC
Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Certificate serial: 083B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
Manifest number: 0831
Signing time: Tue 18 Aug 2026 21:25:28 +0000
Manifest this update: Tue 18 Aug 2026 21:25:27 +0000
Manifest next update: Tue 25 Aug 2026 21:25:27 +0000
Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: N64JTmCbIhWuFfmIPeidGvYkBz9cUtmis52M6sKG4rw=)
2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: MGp5NvaWmsdbvQARv7j0xLY5ZLqFaH4JtDxSWJQ+zS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107 (0x83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Validity
Not Before: Aug 18 21:25:27 2026 GMT
Not After : Aug 25 21:25:27 2026 GMT
Subject: CN=6a84cdc8-bae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:db:6a:fb:ac:93:8f:3c:41:e8:00:10:e4:
2a:95:ba:48:92:e1:5a:94:5b:ae:63:d4:1b:e4:a1:
fd:3b:f2:c0:9f:b2:fc:4b:e7:90:08:60:0e:0f:03:
32:26:64:06:dd:d3:df:b9:0f:02:04:00:23:b1:00:
61:47:1f:d9:fd:31:b0:79:83:44:20:07:d1:a9:ea:
16:5c:a7:a3:92:6f:2c:de:69:5c:34:f9:a1:fc:b9:
42:d1:58:af:0b:90:e4:db:24:de:bd:40:6b:7f:8d:
21:cf:48:35:0f:45:b9:d6:15:d7:d2:af:74:68:d5:
d2:42:84:19:58:2f:1c:05:e6:72:1d:0e:dd:23:17:
4d:67:5c:af:70:0a:60:08:d2:b8:29:07:f4:1f:3a:
08:10:a5:a2:69:80:1d:95:f2:3c:b0:98:ca:38:40:
dd:95:91:ed:ed:98:f9:0f:9e:7b:c0:be:a1:84:c8:
e2:c2:7b:02:b7:5e:51:91:52:e2:28:cb:ed:da:a5:
60:60:84:f5:9a:c8:43:bc:d2:a7:1a:c1:2e:91:9b:
da:6a:d3:02:b4:16:7d:e1:df:e8:bf:3a:f2:08:b9:
9f:bf:a0:99:3c:76:fc:94:3d:af:1c:58:a3:dd:38:
73:8a:39:f6:be:f0:96:76:12:42:32:92:70:cf:b7:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:75:7F:A7:43:54:1B:11:7D:B6:EC:F7:D9:6A:9E:B2:33:87:6C:EC
X509v3 Authority Key Identifier:
keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:82:54:ef:80:cd:57:5f:d2:64:4b:c4:d9:ab:76:f8:ff:
80:64:87:e0:5c:53:33:6c:c9:f9:86:0c:a3:6a:06:48:63:b3:
58:0a:e2:e0:7e:3f:2f:5f:73:0e:9a:e9:01:61:42:91:29:d6:
3b:44:de:50:f3:d2:ed:60:1f:8d:d8:ce:b9:5d:b0:d7:b7:ce:
1a:47:07:85:d0:aa:db:60:90:d2:34:08:de:21:4e:f9:d4:aa:
3c:fc:2e:36:91:ee:7a:24:34:a7:0c:31:97:90:75:b5:19:51:
e0:6f:2c:9c:b9:3d:9f:79:d7:38:0c:c7:e9:a4:ac:6e:20:75:
50:83:26:72:87:b1:24:e5:e6:03:b5:52:a5:15:4d:b0:dc:d4:
c5:7c:b6:3e:e0:c6:05:c4:d4:6b:3f:75:c8:8a:96:33:4f:42:
78:ba:c9:cb:b7:d9:5c:52:e0:28:65:47:d6:47:20:e1:c1:2f:
89:99:f6:73:e2:aa:1b:f5:c8:a2:44:f3:f2:13:65:08:6a:6e:
ae:c7:76:8f:f1:0c:55:94:36:5e:9d:36:d1:14:70:93:36:09:
15:ed:ac:d9:53:75:03:a2:88:52:d1:2a:27:d6:ea:95:32:0a:
ce:a0:cc:01:0b:d5:d5:ae:e9:f0:e8:36:38:51:2f:c9:58:56:
e9:60:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:55 2026 by rpki-client