
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File: 0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier: Oak+jNYv0D+jJDgIsNUogu5fkGiYbmsG7M7FoVuDfiI=
Subject key identifier: 70:11:29:EF:15:A5:DD:58:B8:6E:4B:B3:AF:12:DB:EB:2A:4D:6C:E4
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial: 34C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number: 34AE
Signing time: Tue 18 Aug 2026 15:22:19 +0000
Manifest this update: Tue 18 Aug 2026 15:22:18 +0000
Manifest next update: Tue 25 Aug 2026 15:22:18 +0000
Files and hashes: 1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: Pm6QnrCji+3K8PPGR+lgkEDl28VlC0+V2e7UuTaLWdc=)
2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13504 (0x34c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Validity
Not Before: Aug 18 15:22:18 2026 GMT
Not After : Aug 25 15:22:18 2026 GMT
Subject: CN=6a8478aa-73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:f8:32:ff:df:11:e2:84:ee:b4:17:a6:a1:
0e:44:ed:32:23:41:46:9f:25:18:16:6b:6c:ce:b0:
bc:24:c2:4b:8a:21:ce:00:3a:70:29:0a:a6:bb:c3:
20:a2:6f:57:e8:56:b0:ed:01:b5:88:97:16:a1:c4:
57:f3:20:68:a0:4d:53:2c:3c:e2:1c:6d:1f:bf:dc:
c8:34:92:86:68:58:67:0a:39:b2:e2:36:01:d5:e5:
1b:14:db:7b:ee:01:e9:70:3b:c1:43:3a:0e:40:fa:
24:48:80:bf:df:be:7c:f2:39:a3:79:94:75:df:34:
14:04:73:e6:d1:fb:ac:9f:75:b1:0a:4b:98:ac:04:
21:5c:32:c2:79:dd:63:06:9a:46:42:b1:b6:5d:ef:
54:a4:b2:46:d9:a3:f8:60:b8:e5:d6:84:9b:cb:c1:
f4:4d:73:2c:30:e0:f6:cd:8e:bf:9a:2b:75:12:8c:
13:88:79:11:a8:4c:8c:dd:5b:2a:b2:e8:50:32:96:
75:48:99:35:d0:29:bf:ff:39:6f:2c:d6:81:9d:55:
fa:43:d7:ff:45:3e:ad:c0:d6:36:53:77:51:c1:42:
f2:1f:1c:4e:bf:6f:4a:27:65:10:f0:a1:9b:5a:e5:
d7:0c:33:1a:e1:da:4b:a9:5d:05:65:eb:90:aa:87:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:29:EF:15:A5:DD:58:B8:6E:4B:B3:AF:12:DB:EB:2A:4D:6C:E4
X509v3 Authority Key Identifier:
keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:79:d7:07:4a:a6:f5:e4:a4:a0:4b:1b:46:1d:d4:d3:80:43:
07:12:df:ff:cb:47:07:31:09:c7:d8:f6:d4:89:12:ad:86:d6:
f2:c6:09:e2:2a:28:14:12:ba:b0:cb:a4:ce:53:a6:b4:c0:71:
7a:a5:ec:ce:ea:e7:1c:b0:62:ad:e6:1f:c0:2b:ce:77:bc:28:
12:21:17:e9:f5:b2:87:b1:9b:72:7b:15:2b:d1:8f:d7:36:f9:
e6:d2:4d:ca:17:0d:ce:f8:2b:f7:70:7c:dc:8c:36:d3:20:89:
1e:30:6d:73:e0:2d:22:69:45:e1:ab:03:7b:78:58:b2:95:2d:
62:e1:42:81:f7:12:78:0c:96:c3:f4:1f:22:12:10:2b:fc:90:
a1:40:32:d2:6b:f7:29:4a:b4:9b:2f:5c:8f:18:2e:f7:3b:a0:
60:43:3a:aa:b1:1e:59:6d:fa:26:d2:20:14:0d:18:32:cf:12:
e0:bb:5a:dd:05:86:33:81:6e:8c:6b:bd:a6:61:90:81:4e:6b:
84:d3:f4:c5:49:bd:69:60:fe:f4:97:c6:f3:d0:72:a7:67:d2:
bd:35:62:49:d5:63:1e:62:b2:c9:62:be:34:44:39:24:3a:b7:
61:c6:d9:06:c2:68:d1:6b:57:52:e5:9c:75:d0:86:46:08:53:
91:a4:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:33 2026 by rpki-client