
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json)
Hash identifier: J9rJ+4SlnTPVu2gRGDPcvKEbOI2M9uGMZt29vNmauy8=
Subject key identifier: A9:C3:57:27:CD:37:4A:5C:1A:0E:BF:61:79:F4:3A:D9:CB:C6:40:C2
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
Manifest number: 02C6
Signing time: Wed 19 Aug 2026 01:52:14 +0000
Manifest this update: Wed 19 Aug 2026 01:52:14 +0000
Manifest next update: Wed 26 Aug 2026 01:52:14 +0000
Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: +pevJgiNzus6pGbp2UDyn/Qf6Uv8xKrAVZkq8k254yI=)
2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=)
3: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=)
4: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Validity
Not Before: Aug 19 01:52:14 2026 GMT
Not After : Aug 26 01:52:14 2026 GMT
Subject: CN=6a850c4e-3c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:52:b5:3f:a8:01:69:21:27:8c:c2:78:e0:
3f:c3:71:6f:ff:f0:32:eb:57:87:21:7c:5a:2b:f5:
b3:4c:cb:9c:98:3a:e7:b7:44:a2:40:55:c9:72:9a:
53:d1:1b:83:7f:cd:32:ee:e3:01:ca:cd:a1:f7:7f:
4b:dc:f4:1d:7c:18:1f:64:b6:28:5a:35:84:cb:ac:
3c:a3:3b:7a:1c:6e:fc:ee:6a:17:a8:59:e9:2c:7a:
08:e9:8e:6e:67:86:6d:50:0d:96:f4:6c:58:66:47:
15:c2:d9:98:ae:86:af:08:96:83:8c:46:6b:ce:66:
7b:b0:4d:b0:93:18:d4:f3:e5:0f:d9:3a:ce:8a:4b:
d5:27:1b:81:14:c4:c8:35:09:f4:02:5e:a9:5c:21:
9c:16:e8:5b:ba:9f:29:15:38:c0:32:c0:44:6b:1e:
50:59:87:66:96:67:05:9b:86:3c:28:ba:a2:ea:cb:
0e:d4:2a:03:43:0e:f8:df:49:71:e8:e8:ba:3a:48:
bd:ab:7f:20:1f:17:66:67:7c:65:43:b7:69:6a:bd:
51:d2:dd:86:6f:d7:4c:62:6d:31:8f:a5:ed:d7:6a:
f4:aa:8f:a7:cc:11:2d:1c:3e:84:ed:91:be:f7:81:
33:f0:88:c2:51:9e:24:41:ac:31:68:4a:0e:32:0b:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:57:27:CD:37:4A:5C:1A:0E:BF:61:79:F4:3A:D9:CB:C6:40:C2
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bc:7f:82:af:c1:36:0f:72:8b:23:ec:41:06:f4:fa:12:7d:
df:f7:5f:60:ad:78:c4:3d:d7:4a:75:52:9b:75:07:4a:43:6a:
b7:6a:79:25:3b:a9:cb:dc:92:b7:cd:c4:3d:0c:bc:90:3d:92:
ee:44:7f:86:9f:84:38:f2:9f:d9:30:9f:cb:84:4c:d0:2c:44:
e8:1c:41:6f:83:74:e2:13:55:34:49:90:52:f0:7d:ed:85:a3:
0c:d9:f9:04:62:5a:a8:cb:5c:3e:96:66:be:56:51:e3:e2:e3:
50:bd:0e:3c:9e:df:f8:57:dc:13:01:40:dd:7c:be:13:81:d7:
1b:92:ec:13:b5:ac:38:5d:20:49:e7:07:8a:f0:9a:71:c9:d1:
b8:f4:3b:5b:aa:4c:01:b2:b0:f4:70:6c:9a:32:d2:65:0b:84:
13:c2:52:bd:b2:ba:c7:ac:71:c8:94:42:e4:ef:70:ef:d6:8f:
15:b8:38:2c:aa:18:8f:98:60:66:d8:54:5c:75:62:18:2f:85:
3a:ab:af:52:6f:dc:2f:f8:32:f7:86:40:87:56:ce:95:30:c9:
a9:66:1b:b1:c3:12:95:62:b2:81:2f:04:a7:f3:60:ae:26:fc:
c5:e1:e6:57:9a:2b:b1:15:1b:44:b2:0a:89:89:57:17:11:bc:
6f:d2:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:35 2026 by rpki-client