
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json)
Hash identifier: H6x3Y6s/ZUJnVjMqRn3I46AuQyeAiYMrf1eobYtIFN0=
Subject key identifier: A0:15:B4:BB:23:A3:02:02:37:31:8F:FA:51:CA:27:15:36:40:E6:7F
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 02C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
Manifest number: 02A9
Signing time: Tue 23 Jun 2026 01:42:54 +0000
Manifest this update: Tue 23 Jun 2026 01:42:54 +0000
Manifest next update: Tue 30 Jun 2026 01:42:54 +0000
Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: Tg3UmtPzJda8BhblKVB2fBwF6XPeeF8/8ovLaM/DRY4=)
2: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=)
3: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=)
4: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Validity
Not Before: Jun 23 01:42:54 2026 GMT
Not After : Jun 30 01:42:54 2026 GMT
Subject: CN=6a39e49e-b550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:9a:51:0c:61:d0:f8:2b:16:5d:04:36:28:
e9:99:a0:c7:6a:d0:27:fa:3a:3e:eb:7d:1f:f8:77:
4e:7d:50:5c:aa:1e:78:48:69:ab:f4:98:eb:d9:92:
f8:d3:0d:19:9c:61:91:62:d6:b7:5c:cd:86:3c:8f:
dc:2a:db:57:fb:90:27:ef:2d:c0:ca:e6:9c:9c:e5:
11:c7:84:ce:ac:61:74:27:88:e7:c5:21:5e:ac:33:
65:43:bd:8c:87:50:73:df:22:f2:30:67:48:e6:d5:
b4:46:89:03:d5:54:4c:b4:78:2e:4e:97:83:5f:69:
c8:0d:a9:7c:7c:54:b2:59:2f:6a:66:e6:dc:7e:19:
bd:63:d4:a3:c5:50:d4:12:6f:2c:29:79:52:0c:9a:
f8:33:1a:5a:24:ba:b8:ee:5b:a5:30:40:a8:eb:fa:
93:c3:3e:80:3b:16:56:dc:8d:bf:4e:07:a5:4e:e0:
80:6c:02:66:d5:5a:bd:96:69:22:89:a9:a6:e8:22:
29:01:f4:43:24:0c:62:05:bc:0c:ae:6f:5a:54:08:
8c:c1:1a:48:e4:48:92:dc:ac:04:3e:fa:49:b1:07:
f6:b8:91:36:48:4a:84:d3:18:35:39:3b:74:12:9f:
b9:56:da:69:cc:f4:ce:3a:b1:7f:ab:10:dc:06:64:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:15:B4:BB:23:A3:02:02:37:31:8F:FA:51:CA:27:15:36:40:E6:7F
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f3:8e:e7:dd:cf:17:b4:91:20:58:12:9b:d5:b3:0c:b8:de:
57:24:bf:40:4a:92:40:d2:43:ab:fc:1d:f4:fe:1b:f7:2b:3b:
c4:e1:8b:8e:96:1a:37:90:d6:98:67:dd:b2:c6:c5:0d:03:eb:
a2:4a:63:9b:cd:39:af:83:5c:f2:f2:b1:4e:dd:d9:68:82:2c:
1a:3d:40:b8:c2:25:b5:6e:67:bc:51:1c:6c:fc:4b:04:c1:0d:
98:9e:b8:14:6c:2d:1f:d1:cf:5f:43:e2:60:1b:fe:3e:93:e3:
22:ad:c3:42:28:1f:ed:fc:76:fa:95:8c:fd:21:73:53:b2:6a:
7a:c2:df:93:4d:f7:2a:d9:34:f1:78:e5:bc:12:30:10:ff:57:
7d:f3:3a:a2:9e:4d:38:fe:1a:fd:2e:41:b7:dd:c6:37:9d:9b:
a8:c4:40:a4:c2:36:8c:9f:2e:a0:1a:cc:c2:3f:41:1b:1f:9a:
bd:73:c1:84:0e:cb:d1:d4:07:36:6e:30:2a:a1:63:65:c6:af:
ce:0b:b0:f3:d6:e3:21:9b:c2:43:78:62:08:52:45:da:a2:ff:
5d:9a:bc:9d:e0:4e:62:f0:bf:cb:09:23:78:99:20:17:f0:65:
eb:1d:c1:5b:06:28:80:14:85:a8:86:7a:d1:c1:71:db:b2:33:
8e:2d:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:18 2026 by rpki-client