
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
File: h8MVYTVzTVYviayugrfBqOytOao.mft (raw, json)
Hash identifier: w1VNk+UQ4D2cz0cpMgou2uqshfjKSSaDx94sVz5FPQU=
Subject key identifier: 5C:9D:FB:99:94:A0:D2:D0:47:E9:AB:57:05:AB:62:11:9D:80:8F:39
Authority key identifier: 87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Certificate issuer: /CN=A91B821A/serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
Manifest number: 37
Signing time: Wed 19 Aug 2026 09:20:44 +0000
Manifest this update: Wed 19 Aug 2026 09:20:44 +0000
Manifest next update: Wed 26 Aug 2026 09:20:44 +0000
Files and hashes: 1: h8MVYTVzTVYviayugrfBqOytOao.crl (hash: WgdzC6eVozMp5LI6YWLX/oK7GdXKEmF16ug1p+ASpU8=)
2: B73DBDC848FD11F1BBA9715993833773.roa (hash: AGc8FPeV1XnTmwaCgwjyk//SDE1tk9ZLKFTYlrVR/0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Validity
Not Before: Aug 19 09:20:44 2026 GMT
Not After : Aug 26 09:20:44 2026 GMT
Subject: CN=6a85756c-4c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:7d:3e:c5:48:9a:bc:ac:00:26:cc:e3:c4:
e6:f5:7e:c8:1a:40:47:02:29:0a:e9:45:d9:13:36:
0b:bc:98:c8:6f:f4:cb:ce:87:e3:75:04:e1:7c:c3:
80:e6:c3:e7:ba:ef:c5:98:06:9d:82:27:7c:1e:0e:
42:93:8f:61:aa:71:7d:3e:c6:df:31:2d:83:b3:74:
14:86:16:16:c3:49:2e:10:74:7f:72:1a:97:ee:49:
e6:29:7e:0c:1b:f2:16:89:2a:df:0c:ca:6c:72:fc:
26:38:10:8d:59:78:92:dc:b0:16:26:7f:42:86:be:
71:80:20:42:70:59:0a:cd:93:7e:a4:f7:75:29:fc:
75:38:ee:f8:6a:81:20:90:bb:0f:e8:d3:55:e4:c8:
86:c9:cd:3e:6c:0c:ae:de:c7:bc:72:fc:84:c1:10:
c0:97:c6:be:bf:2a:97:8b:d7:e4:63:1b:20:2a:25:
64:b4:c3:ae:92:e8:2e:28:ab:20:cc:45:f7:3e:e0:
37:a2:d4:b6:48:96:e3:d4:45:e4:02:c2:92:8f:75:
96:0b:1a:a9:d2:67:67:22:b9:f4:00:c0:d6:5b:6c:
73:c7:0d:be:6a:69:f1:be:3c:34:e8:1f:1e:0b:e0:
96:4b:88:6c:9b:0d:37:0b:49:d8:b2:f4:45:c7:1c:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:FB:99:94:A0:D2:D0:47:E9:AB:57:05:AB:62:11:9D:80:8F:39
X509v3 Authority Key Identifier:
keyid:87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ca:17:80:96:36:c7:8a:30:1b:0a:de:10:66:8a:e2:2d:02:
35:53:0f:1d:87:db:6a:3f:bf:e2:2f:45:42:98:e7:a1:be:a0:
e5:39:d4:3f:e8:fe:30:2d:22:00:94:9c:15:73:7d:67:45:d9:
3a:d4:a8:08:7c:01:5a:b1:57:ed:62:27:d3:9a:db:79:69:6a:
da:57:59:16:84:b6:ba:50:6b:72:25:48:7a:54:d9:d6:22:fb:
93:a6:18:ce:4e:7b:c8:95:82:7f:34:73:ab:d8:c2:2c:34:32:
5d:e1:64:86:b3:d1:1e:84:ef:e9:b8:fb:0e:04:cc:df:f1:d5:
dd:48:0a:05:b6:52:eb:d7:d2:72:7c:d2:8d:6d:db:28:57:3b:
b5:ae:61:b6:b6:75:b1:9c:58:ec:a8:38:c1:ff:1f:8d:39:5f:
3f:79:9f:5e:63:0f:a9:17:c4:ca:15:09:6d:c9:0a:2c:fd:05:
64:c4:29:59:64:16:ba:ce:a7:90:28:28:a2:6c:c5:61:6c:64:
30:1e:da:aa:29:3e:fd:6e:c7:4c:0f:4a:f3:4b:4d:6e:bf:01:
41:c7:8f:1a:e2:64:c3:c1:78:02:39:d9:5d:c4:f8:f7:75:06:
28:9b:02:4c:66:98:83:08:f6:73:29:47:a8:ff:b7:c4:9b:b6:
23:80:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:11 2026 by rpki-client