
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File: 8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier: XC+Nq9EbuDnWENXD8QVuxkLfYN7Ucpio9zA3KdOwe30=
Subject key identifier: A3:46:1E:43:11:DA:11:E8:B0:8F:C8:F3:32:82:9F:43:B1:EB:BF:70
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer: /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number: 67
Signing time: Thu 03 Sep 2026 08:17:33 +0000
Manifest this update: Thu 03 Sep 2026 08:17:32 +0000
Manifest next update: Thu 10 Sep 2026 08:17:32 +0000
Files and hashes: 1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: xGd33wEmhtdJnPhphD9vleTlFy5roG22TJfY+yfa7TM=)
2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Validity
Not Before: Sep 3 08:17:32 2026 GMT
Not After : Sep 10 08:17:32 2026 GMT
Subject: CN=6a992d1d-c766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:b3:95:d3:45:80:58:27:a0:ae:0e:eb:e5:
06:90:f1:03:32:c7:b4:b5:15:3f:64:5b:53:3f:52:
4c:9c:b3:ec:51:99:71:89:38:58:09:45:9e:98:f3:
56:f0:16:79:87:2f:1e:fe:55:1b:46:16:a3:0b:d5:
b6:1a:9d:e5:06:a9:e8:74:c7:a6:cf:59:15:02:35:
30:82:0e:e8:ea:3d:53:32:b4:31:d7:f7:27:81:24:
db:de:fd:eb:a4:75:ab:de:df:f4:16:9b:d7:86:9b:
03:16:d1:ba:02:76:39:7e:76:7c:9c:51:bf:f5:3f:
79:2c:93:c9:68:10:d4:60:25:4e:90:da:8a:64:70:
34:21:1c:e6:29:df:de:39:23:ac:96:23:b9:a5:35:
4c:60:c7:9d:d8:6e:c2:be:c1:20:2d:32:f9:50:f6:
8b:58:a7:1f:68:92:c6:7f:81:77:d4:0c:b9:81:59:
d3:0f:15:83:aa:de:b8:ae:cc:d7:7b:2a:4c:f5:b1:
29:06:25:c4:11:ba:51:98:60:ca:3c:b6:4f:fe:57:
e7:ee:f3:b8:a3:99:93:4c:4a:cf:74:89:28:0a:48:
96:54:91:a1:79:8a:80:8a:48:60:b3:96:3b:e2:3c:
3a:cd:0a:54:48:6c:54:53:96:cd:75:0d:b2:e7:af:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:46:1E:43:11:DA:11:E8:B0:8F:C8:F3:32:82:9F:43:B1:EB:BF:70
X509v3 Authority Key Identifier:
keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:a9:76:00:6e:02:af:4a:d5:77:c7:36:32:37:b6:1e:3a:
0f:2e:33:6e:1e:5a:65:0e:72:e7:5c:e4:69:ad:7b:c3:9e:1b:
8e:87:a6:f3:93:1f:27:6f:67:07:4c:87:1c:fc:8f:98:cc:5c:
79:f1:53:15:f7:6b:9f:be:00:3f:c8:f3:2d:79:b3:a8:9a:bd:
55:6a:d3:68:c8:6c:66:5e:22:33:89:b7:6d:3d:30:a0:c9:78:
eb:93:85:f9:c7:c7:15:85:62:3f:8d:5f:ea:e7:24:a9:71:50:
da:59:68:2b:5a:3f:71:5d:4b:dd:05:d2:90:44:13:18:07:62:
24:6e:cc:0a:13:b5:9c:5a:5e:fb:f9:e8:65:e8:9f:0c:3b:bb:
85:59:6f:91:d4:ef:69:13:5c:2b:b8:a1:1b:d2:36:e8:aa:6a:
83:e3:a2:71:2e:c6:6a:be:41:b9:6f:5c:bc:3c:62:c8:87:57:
75:31:45:1e:b6:cf:80:ec:65:fe:34:cb:61:64:57:1c:6d:d9:
e8:10:5e:ba:1c:dc:c9:9a:fb:c4:e8:9b:eb:a6:53:44:0d:32:
17:1c:0e:d4:8b:4a:24:09:e2:0a:66:b1:61:8a:76:10:72:ac:
bf:ff:66:23:d9:66:03:13:e1:03:68:95:94:45:66:6d:11:03:
ff:40:31:ce
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OTcwNjExMC8GA1UEBRMoRjFFMEZEN0JEQUYxNzE5ODkwRjZCMjQ5QjNCQzQxODIx
NEJBOEFDQjAeFw0yNjA5MDMwODE3MzJaFw0yNjA5MTAwODE3MzJaMBgxFjAUBgNV
BAMTDTZhOTkyZDFkLWM3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCub7OV00WAWCegrg7r5QaQ8QMyx7S1FT9kW1M/Ukycs+xRmXGJOFgJRZ6Y81bw
FnmHLx7+VRtGFqML1bYaneUGqeh0x6bPWRUCNTCCDujqPVMytDHX9yeBJNve/euk
dave3/QWm9eGmwMW0boCdjl+dnycUb/1P3ksk8loENRgJU6Q2opkcDQhHOYp3945
I6yWI7mlNUxgx53YbsK+wSAtMvlQ9otYpx9oksZ/gXfUDLmBWdMPFYOq3riuzNd7
Kkz1sSkGJcQRulGYYMo8tk/+V+fu87ijmZNMSs90iSgKSJZUkaF5ioCKSGCzljvi
PDrNClRIbFRTls11DbLnr/DVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo0YeQxHa
Eeiwj8jzMoKfQ7Hrv3AwHwYDVR0jBBgwFoAU8eD9e9rxcZiQ9rJJs7xBghS6issw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0Y4ODg0NDNBMTE0
NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1ppUTlySkpzN3hCZ2hTNmlz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvOGVEOWU5cnhjWmlROXJKSnM3eEJnaFM2aXNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
NzA2L0Y4ODg0NDNBMTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1pp
UTlySkpzN3hCZ2hTNmlzcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWqKl2AG4Cr0rVd8c2Mje2HjoPLjNuHlplDnLnXORprXvDnhuOh6bzkx8nb2cH
TIcc/I+YzFx58VMV92ufvgA/yPMtebOomr1VatNoyGxmXiIzibdtPTCgyXjrk4X5
x8cVhWI/jV/q5ySpcVDaWWgrWj9xXUvdBdKQRBMYB2IkbswKE7WcWl77+ehl6J8M
O7uFWW+R1O9pE1wruKEb0jboqmqD46JxLsZqvkG5b1y8PGLIh1d1MUUets+A7GX+
NMthZFccbdnoEF66HNzJmvvE6JvrplNEDTIXHA7Ui0okCeIKZrFhinYQcqy//2Yj
2WYDE+EDaJWURWZtEQP/QDHO
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:07:16 2026 by rpki-client