
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
File: h8MVYTVzTVYviayugrfBqOytOao.mft (raw, json)
Hash identifier: PmBBMq6ITH5eCOT3PYBLvjXR9Rn+D7nHIEqY95CsRks=
Subject key identifier: D2:AB:5D:74:17:34:46:19:1B:C5:EA:C3:88:45:30:38:2C:D7:BD:F6
Authority key identifier: 87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Certificate issuer: /CN=A91B821A/serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
Manifest number: 52
Signing time: Sun 11 Oct 2026 08:54:11 +0000
Manifest this update: Sun 11 Oct 2026 08:54:11 +0000
Manifest next update: Sun 18 Oct 2026 08:54:11 +0000
Files and hashes: 1: h8MVYTVzTVYviayugrfBqOytOao.crl (hash: kxlhrSLjeR3ezWgzOlBV6jk8gpQeTcKNBitshxFK7+M=)
2: B73DBDC848FD11F1BBA9715993833773.roa (hash: AGc8FPeV1XnTmwaCgwjyk//SDE1tk9ZLKFTYlrVR/0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Validity
Not Before: Oct 11 08:54:11 2026 GMT
Not After : Oct 18 08:54:11 2026 GMT
Subject: CN=6acb4eb3-d3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:69:99:79:8a:ec:d8:4e:2b:c2:c3:99:c2:
50:33:ae:24:e0:3a:50:52:fc:a1:11:e1:56:31:cd:
7b:7b:8d:9b:1b:43:84:49:6f:86:9c:8e:c0:d8:84:
0f:67:ef:0c:56:a8:28:0c:56:ff:76:61:3d:15:c2:
57:ca:52:17:72:86:f4:6d:d2:67:99:b2:7d:ee:27:
2e:d2:e8:3a:fa:cf:54:b0:a1:1c:ad:42:41:2c:99:
3b:7b:18:b3:77:98:d7:dc:d5:02:af:5b:dc:86:8a:
c3:06:74:17:7d:03:69:26:bc:7b:66:4a:c0:f1:c5:
ba:88:89:ea:5e:51:1c:c7:69:6c:64:39:f0:8c:c8:
96:6d:4c:f2:49:d9:1a:35:83:4b:97:1c:1a:2d:d8:
71:bf:9a:a0:21:d3:f4:84:91:76:39:80:bb:73:38:
6a:3c:f5:34:b4:c8:5e:77:a3:bd:99:f4:34:e9:30:
70:5f:69:df:7c:97:e4:72:a8:e8:b2:c3:ac:26:a5:
4e:0d:e6:34:c1:c7:f9:2b:c9:4c:c9:df:89:0a:fc:
1d:fb:15:a6:f3:b1:a8:48:15:cf:28:8e:94:1d:38:
6d:5f:da:09:42:b6:8f:86:5d:30:97:6e:b6:cc:fe:
8d:1a:9d:23:f7:82:78:8f:31:15:8f:44:ec:82:b3:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:5D:74:17:34:46:19:1B:C5:EA:C3:88:45:30:38:2C:D7:BD:F6
X509v3 Authority Key Identifier:
keyid:87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ad:9d:48:36:9c:df:00:46:6f:f7:31:73:2a:ba:62:cf:2e:
a4:d5:b5:6c:d2:bc:cc:7f:22:bd:ad:83:2f:73:21:e1:6c:41:
a1:f0:7d:15:58:6a:26:1e:f2:ec:5c:b4:cf:39:f6:13:a9:c6:
2f:17:3a:6a:5a:a5:98:d3:e5:d3:6e:50:b1:94:03:47:7f:9b:
06:3d:eb:70:57:c3:35:fc:42:65:b0:65:c9:ca:f2:28:46:dd:
27:8c:5e:d9:fa:56:a0:cc:b0:59:d5:4b:09:dc:3a:80:78:de:
7f:9f:f4:7b:3f:27:0c:70:a3:8c:8d:86:e5:b6:44:64:70:82:
5d:d5:3f:6c:db:b4:42:d8:42:c4:c6:b2:b9:01:a1:dd:69:f4:
96:ba:be:52:61:1a:fb:7c:af:61:d1:63:57:d8:85:39:9c:80:
48:0a:7b:2c:aa:ca:bd:27:0f:69:1a:72:0a:f0:82:a1:4c:ee:
83:30:88:f0:34:36:47:e2:c7:1d:4e:4d:38:e5:8a:90:8f:35:
b0:11:ff:bb:db:49:53:ef:47:52:ee:37:d4:e0:96:7c:b7:dd:
d9:24:8b:0a:e8:ae:e9:17:56:fc:e4:26:9d:a0:ac:96:85:f5:
41:1c:20:4e:7e:d9:10:06:b8:47:f8:45:39:de:cf:c0:a4:b7:
34:3f:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:30:50 2026 by rpki-client