
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
File: T8X9jSdo5Al3QhkY-xOcM12_g4A.mft (raw, json)
Hash identifier: ALhncOfz3FyYet8Z97rXA30QDD3Ppx0QaYw0uPJJaXo=
Subject key identifier: FF:82:04:05:3C:25:8D:48:37:6C:3D:2F:76:FE:D1:96:96:38:74:8B
Authority key identifier: 4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
Certificate issuer: /CN=A91B539C/serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
Manifest number: 0B
Signing time: Fri 03 Jul 2026 10:03:57 +0000
Manifest this update: Fri 03 Jul 2026 10:03:57 +0000
Manifest next update: Fri 10 Jul 2026 10:03:57 +0000
Files and hashes: 1: T8X9jSdo5Al3QhkY-xOcM12_g4A.crl (hash: J2uU/AueezzK93715Hlw93GEokhRRrZ9X2jtJZgcEoA=)
2: DB14F0D8688611F19B84FAD56C47A888.roa (hash: 74bk58//l9arlYq1z7u+T+hfveHOzEv+5Ygge/tEw9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 10:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B539C, serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Validity
Not Before: Jul 3 10:03:57 2026 GMT
Not After : Jul 10 10:03:57 2026 GMT
Subject: CN=6a47890d-681d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:5f:73:96:5e:7a:fd:d4:5a:be:bb:5e:2d:
4f:57:2b:0d:f4:6e:4c:38:a2:cd:0f:14:1a:a0:70:
43:b3:ff:18:f4:0e:a1:04:d7:15:49:ec:f9:50:bd:
78:ce:73:18:a7:c2:67:3a:db:37:a7:84:dc:f1:38:
f5:21:af:99:a7:11:43:27:8b:3b:dc:18:af:d5:80:
df:b5:00:36:94:08:bf:c4:77:88:01:ca:c1:12:3e:
b1:5e:f3:48:0a:d6:30:a4:cc:5b:3e:91:0e:44:fb:
2c:2c:14:88:72:aa:39:77:cf:ff:17:d5:52:62:f1:
12:f7:ec:ad:fe:0f:e8:24:69:59:0c:e7:12:15:1d:
49:1f:71:aa:bf:27:38:f3:81:5b:82:55:c6:da:53:
14:41:ed:0f:70:fb:3d:92:72:5a:1b:33:64:b9:b7:
8d:89:bb:d4:fb:9b:0f:65:dc:33:92:a8:fd:38:0d:
cd:ca:6c:95:f4:c2:8d:ce:7d:b5:14:89:34:68:f4:
02:4b:95:8c:38:7e:58:40:cd:64:ad:aa:99:ca:b4:
3a:39:42:c4:8c:2d:7c:ef:04:72:de:46:a4:ec:e0:
17:56:81:75:f5:a5:29:c1:b8:43:03:a8:a9:5f:88:
4e:3d:48:f0:8e:e7:5f:2a:7f:57:dc:15:ce:07:32:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:82:04:05:3C:25:8D:48:37:6C:3D:2F:76:FE:D1:96:96:38:74:8B
X509v3 Authority Key Identifier:
keyid:4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:fe:21:bb:bd:11:cd:77:94:7b:3d:ed:40:4a:90:83:54:
ec:f2:7b:7e:9d:a4:e3:8e:c1:8d:69:ca:0c:53:cb:8c:b6:71:
c8:c5:1e:28:cf:17:08:41:ea:66:3f:97:ac:74:45:be:55:c0:
80:3c:4d:4b:6b:35:54:16:7e:da:d3:92:a0:9a:c0:4c:c4:53:
96:a4:14:77:c9:bd:6a:18:c5:53:73:61:b7:b3:06:e6:46:3e:
d4:b0:a8:55:28:be:1f:ca:bb:3b:63:83:0f:8e:05:c4:54:19:
6c:c7:b4:d0:17:20:96:aa:50:f0:73:5f:13:31:72:2c:1f:b4:
6f:bd:8d:e0:b1:0d:fc:2c:51:1f:56:b4:22:e3:85:cc:59:cb:
3f:5f:bf:2a:79:1e:6b:bc:13:83:c2:17:cb:37:ed:00:bb:42:
a5:d5:c0:05:1a:a8:3f:45:cb:3d:ab:50:02:5b:7c:80:7b:33:
24:32:7e:c9:e1:df:8a:f3:91:11:53:70:cd:37:a1:93:e2:7a:
d7:26:10:91:5d:eb:fc:59:c7:23:76:5d:4a:6d:bb:54:bb:4b:
3b:30:1a:7b:b6:02:42:32:8c:14:e2:e5:11:42:83:9b:87:38:
5d:c3:97:28:3d:8a:6e:ec:56:35:13:3e:46:ea:7c:b9:5a:51:
a7:8c:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:29 2026 by rpki-client