
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json)
Hash identifier: xeXpbS/qq4c1OhF9Bc2+S4azuvRwCHoDcO+Pyj/X4GI=
Subject key identifier: 4F:1A:70:1F:D1:78:43:70:2D:6C:DA:D1:57:FC:5A:C3:A2:32:3F:AD
Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Certificate serial: 0460
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
Manifest number: 0459
Signing time: Sat 03 Oct 2026 00:27:02 +0000
Manifest this update: Sat 03 Oct 2026 00:27:01 +0000
Manifest next update: Sat 10 Oct 2026 00:27:01 +0000
Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: ed0pIm0gIALspgVuD92VM1Mqi2Zw1chOLebHCwBZtzg=)
2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: E0te7z7859at34MRFLNavnFyL+a8lv5dig7hn7bo8Ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Validity
Not Before: Oct 3 00:27:01 2026 GMT
Not After : Oct 10 00:27:01 2026 GMT
Subject: CN=6ac04bd6-9995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:c2:e0:b8:c8:70:23:80:cc:cc:e7:5c:8e:
3d:9b:6f:c1:a6:88:94:07:e7:36:04:af:21:8f:9f:
a7:c6:c5:c6:52:3a:58:be:c8:1a:c8:1a:1a:e0:6f:
d5:3f:0a:88:72:14:8c:c0:28:ca:9b:44:fe:02:de:
b3:5a:33:5a:74:5e:34:0e:17:10:98:ab:30:d2:2f:
c6:04:b3:49:8b:66:62:a3:77:53:bc:cc:cd:00:ef:
3c:b3:6d:b2:6e:2f:8d:93:c1:6d:c9:e6:ed:1d:17:
e8:67:ae:14:d7:15:cd:b8:83:50:34:46:cf:41:12:
f0:21:de:14:c2:97:ba:77:03:24:d7:32:0e:0f:fe:
65:d0:cf:a4:4e:cb:25:db:cf:d7:68:54:1a:5b:20:
b5:8c:89:bb:a5:18:8c:66:e7:8d:36:75:cc:09:a9:
37:44:48:31:24:f5:17:d0:c2:ea:d9:ed:8b:da:06:
a9:d5:4f:56:06:e1:4b:f5:87:da:53:89:c5:07:4d:
27:e7:92:ea:d4:30:f7:53:58:37:53:ca:f4:f4:92:
49:77:bc:4e:63:b1:49:b3:e0:91:49:5e:2f:11:e1:
2f:7c:f7:aa:44:2b:ca:6a:ed:13:ad:a5:84:e8:e8:
fa:4c:7e:af:1e:a9:52:6f:42:f5:84:38:71:81:e8:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:70:1F:D1:78:43:70:2D:6C:DA:D1:57:FC:5A:C3:A2:32:3F:AD
X509v3 Authority Key Identifier:
keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:47:58:ff:ca:ab:cf:c5:ac:d8:d1:18:49:b5:04:60:5b:8e:
c0:ed:33:bf:52:12:10:7c:a4:bc:38:aa:62:61:3f:62:21:1d:
97:26:56:90:c2:5a:ae:cc:36:98:14:9b:9c:7f:d3:f8:30:a6:
dc:19:97:b5:26:a3:28:1c:b9:53:b1:20:12:c4:6b:a1:10:ba:
14:3c:ba:15:9e:74:14:35:6a:fb:35:a9:41:3c:71:9a:5a:fe:
fc:c0:46:10:25:6a:a3:f2:39:7a:03:b6:df:3f:27:d6:72:1d:
ad:31:28:e2:79:7b:b1:4f:ee:ed:7b:68:8c:89:8d:25:9b:67:
90:a7:17:89:e0:fd:ab:4a:c5:44:92:21:ec:55:f3:f7:fa:9d:
b3:55:49:f5:96:79:66:70:04:e4:6b:06:88:22:2d:fc:84:83:
4f:89:c2:5a:4a:dd:bb:39:5a:e5:33:b3:b7:bf:89:78:00:fa:
be:13:75:f1:b2:61:4f:b0:39:42:60:01:a8:17:ab:f8:2a:bb:
aa:6e:f7:72:75:39:4c:2c:ae:36:da:b6:28:e7:a9:2e:3b:e1:
a5:68:42:b6:a7:3a:cc:ae:9a:f5:ba:c2:8a:83:03:ef:7b:38:
5a:04:ba:b9:f4:ce:03:21:ad:1a:e6:89:26:5c:48:b3:19:52:
61:7f:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:49:20 2026 by rpki-client