
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json)
Hash identifier: quMJe0PuzEthTJjvmAxN0LguLwkY+1yAQvUhj8+DCNQ=
Subject key identifier: 77:61:B3:BB:F7:9A:2F:7B:A8:A9:67:0C:DE:9F:D5:FC:25:B7:4A:C9
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
Manifest number: 02E0
Signing time: Fri 09 Oct 2026 01:34:18 +0000
Manifest this update: Fri 09 Oct 2026 01:34:17 +0000
Manifest next update: Fri 16 Oct 2026 01:34:17 +0000
Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: xGgdp02lDsa1JNoViNcTjWBSeEVVgh1qV8yHtHNDPhk=)
2: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=)
3: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=)
4: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Validity
Not Before: Oct 9 01:34:17 2026 GMT
Not After : Oct 16 01:34:17 2026 GMT
Subject: CN=6ac8449a-15bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:42:f4:31:41:96:95:56:1b:36:0c:2f:67:
18:b5:59:28:ba:3f:96:0c:f6:84:75:03:ca:72:e7:
e7:5b:39:cd:08:f5:09:06:9e:51:91:e1:65:85:4f:
ee:55:0f:c4:17:20:6b:a0:55:0d:33:de:83:95:6d:
62:72:52:dd:44:9f:d6:5c:d5:fa:2e:e3:91:4e:c4:
dd:30:78:b2:5f:61:b5:8d:84:fa:6f:f8:a1:64:b2:
ea:94:6a:9b:54:6a:a2:36:5e:4b:5e:4f:a4:89:9d:
ed:44:c7:65:e3:ca:23:65:b8:cc:fc:f5:07:a8:1e:
ce:ba:78:2f:55:0e:6e:e1:a5:11:7b:c3:7b:61:2e:
5d:8b:53:5e:58:a6:51:3f:49:e1:34:07:92:c0:19:
0e:5b:7e:60:43:16:b6:ff:84:45:0d:1b:b6:07:69:
4f:b7:dc:5d:72:79:d0:90:a5:cc:ca:87:aa:89:d5:
14:e3:da:0a:87:9b:5e:2c:ac:e6:f1:1e:3c:35:cd:
16:4d:0b:a6:78:0f:0a:c4:a5:f1:76:2e:d5:b4:2b:
a6:a7:97:b0:09:3f:18:73:0b:49:e0:d8:20:b7:f2:
67:01:5c:07:c9:2c:a4:41:17:e1:3d:fe:5b:92:1b:
b5:a0:76:ac:54:8e:15:42:0a:12:39:b3:ae:00:1f:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:61:B3:BB:F7:9A:2F:7B:A8:A9:67:0C:DE:9F:D5:FC:25:B7:4A:C9
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:88:10:b4:06:9e:5b:28:5d:f1:3a:87:fd:47:54:de:ad:a3:
19:de:04:6f:56:73:4b:6a:e0:60:ac:f6:2c:d4:c3:6a:e6:18:
a3:89:92:c5:ed:06:af:0d:9a:b1:1c:e8:ad:65:c3:ea:33:61:
9a:c9:7e:09:a0:07:9c:dd:d3:73:e0:b5:c2:99:13:07:1f:3d:
68:90:7e:3d:60:bf:cf:aa:80:d1:c4:39:c3:21:23:ab:26:07:
c4:0e:bd:91:45:34:3d:d4:99:70:c2:4e:1a:b5:0a:5a:08:c1:
76:e7:54:24:db:6b:04:1b:ff:c1:51:27:ae:3e:96:b5:f6:ef:
10:64:8d:c6:cc:6c:fa:a9:1e:b0:88:29:25:ba:a3:6f:61:b8:
93:a4:14:51:ed:47:d9:df:e0:32:98:43:31:04:f6:89:e2:80:
5e:84:e4:d8:8e:de:9a:c2:c1:45:ed:49:5f:69:cf:aa:2c:2b:
09:1f:30:25:61:8a:1e:b0:de:80:fc:c9:da:7a:f8:09:84:f8:
be:91:68:79:0c:c4:58:f8:61:c5:b8:39:fa:6d:f4:fa:9b:2e:
0e:4b:a1:e5:0b:74:71:7d:55:43:f9:7c:bb:91:0f:b5:23:31:
9e:9a:56:56:e3:3c:85:c9:95:65:ed:d9:11:3c:08:9b:5e:98:
1a:b7:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:58:54 2026 by rpki-client