
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json)
Hash identifier: amV05yj1QVR69utiSusTbGnvWOZNNW7qiExOYVb3C4s=
Subject key identifier: 6C:0F:64:87:21:2E:93:FD:9A:DC:E3:65:96:D9:CA:95:21:7D:A9:AF
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
Manifest number: 01EC
Signing time: Thu 21 May 2026 03:23:49 +0000
Manifest this update: Thu 21 May 2026 03:23:48 +0000
Manifest next update: Thu 28 May 2026 03:23:48 +0000
Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: rgTCh9GdYXMUmkbR6kH3Acipyudbx/RqO3zIJuOHhK0=)
2: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=)
3: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: hUBkgyOeFfHyusrHl5Ul+wkZZtAL0ghWlOjjJyvQSKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Validity
Not Before: May 21 03:23:48 2026 GMT
Not After : May 28 03:23:48 2026 GMT
Subject: CN=6a0e7ac4-68e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:fc:b4:f2:b0:dd:d8:9e:57:b3:57:fb:b2:
51:37:ee:29:78:ec:5e:76:04:fe:60:63:67:5d:c1:
85:8d:28:2f:5b:32:5e:cb:b1:07:10:dc:c0:e8:2d:
8b:37:56:17:aa:11:b2:fa:6e:5e:f4:5e:6e:a2:60:
71:31:2a:98:7f:66:a1:b9:ff:6b:5b:56:e0:3a:0b:
ec:e0:54:d7:09:83:90:85:c4:93:7b:45:ae:f6:59:
0c:dd:c5:77:c8:9c:70:33:58:52:9a:53:30:ea:66:
9d:12:7a:7b:89:f3:da:2f:1f:3c:67:a5:85:49:75:
fa:23:c5:a5:db:65:19:e2:31:e9:16:11:36:09:44:
85:8e:7b:0e:73:2c:b5:c6:23:4a:ad:1b:ae:d0:69:
1d:f8:16:89:75:0a:93:89:50:e8:00:01:fb:a8:4b:
7c:3c:d2:b9:40:64:a2:a3:33:26:6d:3d:9a:50:de:
92:7b:1b:00:9c:70:d3:50:8a:f3:86:55:6b:7d:dc:
48:d8:da:21:2e:00:53:7f:29:8f:bd:25:50:4c:44:
9d:6f:6a:79:f5:d4:54:f3:47:7f:60:26:73:c1:a4:
e1:a4:60:67:08:01:e6:c4:a9:ca:40:20:83:17:43:
ab:7e:3d:50:59:22:7e:fd:ef:10:f2:c8:15:43:54:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:64:87:21:2E:93:FD:9A:DC:E3:65:96:D9:CA:95:21:7D:A9:AF
X509v3 Authority Key Identifier:
keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f0:50:f8:8e:52:54:c7:74:e5:46:d7:a4:40:d7:07:bb:57:
1d:4c:e5:b0:3f:4a:17:23:bd:6e:3b:d7:27:09:f7:a4:ac:2a:
1c:b7:ea:1b:aa:9f:ca:c4:27:19:82:57:a9:c4:5a:0e:40:15:
f5:5b:0b:74:b3:70:04:ea:9c:6b:e2:ce:02:76:7b:4d:91:c0:
b9:0d:5d:a4:f8:96:99:19:73:d2:17:a6:a6:47:1e:38:8a:e5:
f6:c7:78:32:28:ba:18:5b:fb:10:dc:3b:9b:d6:8d:fe:19:92:
00:c0:0c:8b:2d:fb:51:68:b3:91:ca:d9:87:7f:08:e9:52:11:
de:dd:c1:b7:5e:1e:f3:ac:56:b8:0e:13:ae:ae:ab:3d:05:25:
8b:bf:9b:bc:60:7e:fa:09:16:d7:98:c2:62:97:8f:a9:e5:83:
76:1b:23:6f:c5:1e:e2:c7:e0:ed:47:e9:c6:a0:05:18:12:ef:
e7:b5:df:78:03:c5:43:d9:96:11:77:d6:2d:a7:5c:d3:c5:d5:
99:2d:b2:c9:0c:7c:b8:99:69:16:ba:f7:7b:6e:45:bf:ba:fe:
e4:54:64:0d:7b:00:ab:99:2e:e0:6c:4e:c4:ce:d4:72:10:10:
f6:6b:62:d7:00:94:65:9b:54:3d:74:e2:fb:f9:3f:25:f5:10:
6e:7c:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:48 2026 by rpki-client