
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File: 8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier: MDqYizOGu8pCXa+MCAiZ9U+jnEy3y9mKbC/lBkQr3Uw=
Subject key identifier: 06:72:4F:E1:8F:C6:28:0A:B4:F6:75:E9:18:4E:27:37:5B:AF:26:A5
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer: /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number: 50
Signing time: Tue 21 Jul 2026 10:11:16 +0000
Manifest this update: Tue 21 Jul 2026 10:11:15 +0000
Manifest next update: Tue 28 Jul 2026 10:11:15 +0000
Files and hashes: 1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: Zl2D3U8ODL5tWwqbL8kebkV68yTQVBuu5UVlkVKmf2U=)
2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Validity
Not Before: Jul 21 10:11:15 2026 GMT
Not After : Jul 28 10:11:15 2026 GMT
Subject: CN=6a5f45c4-408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:00:28:9a:60:1b:82:2c:1b:5e:25:48:14:c2:
d6:db:c5:f4:e8:36:9b:cf:58:cf:ee:66:c8:c1:e0:
4c:e6:52:6f:03:30:5b:a0:30:ac:a9:38:86:d4:90:
ed:fe:48:39:d4:95:08:9c:64:f3:65:ce:e0:91:80:
ec:14:fd:ce:e8:98:c0:6e:60:a3:55:64:8b:47:3f:
fb:d0:bb:f0:d6:91:4c:35:13:19:f3:9b:b6:c1:4a:
d5:81:1b:90:71:12:eb:d2:11:02:b4:5d:45:b9:0b:
09:3d:fb:b1:65:d7:6f:bf:9a:70:3e:89:6d:cf:3b:
fe:c1:ee:cf:e7:f4:82:8d:ba:a1:3d:aa:07:de:99:
e5:12:f3:88:a0:ca:05:dc:6b:01:9a:63:df:9e:7a:
17:1a:47:38:ae:51:7a:de:0f:21:ef:9f:ec:de:7b:
22:b4:d9:21:e1:bd:c5:83:2e:4a:e8:bb:13:f7:97:
af:0a:12:d4:50:f7:4b:1f:43:9e:98:35:7c:2a:f4:
87:d9:9f:96:b5:84:ce:a3:ab:6b:c4:75:dd:fc:f3:
14:b5:88:4a:62:a5:52:88:51:e2:b9:ac:2d:f1:fe:
6d:95:1f:58:e3:0a:5b:6b:d1:f9:8f:13:43:f9:e5:
96:39:32:10:4a:ba:9a:86:64:53:f4:67:91:e5:7b:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:4F:E1:8F:C6:28:0A:B4:F6:75:E9:18:4E:27:37:5B:AF:26:A5
X509v3 Authority Key Identifier:
keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:f5:d9:92:8a:28:bf:9e:2f:d5:a5:e4:76:d4:99:93:a5:79:
2a:8e:98:9b:38:54:30:70:38:93:62:12:c6:54:02:56:cd:c8:
a0:aa:4b:ac:1a:3d:75:ed:d1:0a:27:eb:b9:d8:2d:32:20:84:
1a:04:fe:29:61:e8:29:19:27:43:2e:b7:a5:5d:b0:95:f3:d9:
79:29:6e:3a:76:89:97:d3:ef:fe:59:9e:fa:5c:08:c5:ea:a2:
97:1d:f6:9a:cb:5b:75:06:c8:3d:c2:ff:cf:17:c6:48:05:bb:
7a:91:e4:cc:b9:13:81:df:c2:27:85:42:9e:d9:3c:96:80:eb:
69:5f:37:c3:d6:d3:c8:0f:7a:d7:d3:6d:16:c7:6a:ac:a2:da:
53:7d:9c:8a:b2:49:75:93:57:d9:da:bc:6a:f1:92:6a:6b:8d:
d0:37:8a:83:e2:c0:d3:e1:f3:30:e2:94:18:cd:ae:c6:13:a9:
bb:ac:c3:51:16:e2:2e:ba:06:2d:ff:25:56:6d:31:16:71:42:
c9:8e:b5:1d:b4:10:16:c8:f9:e9:8a:a2:95:4d:07:5a:70:3c:
7b:87:b9:ff:7b:21:0f:cb:5e:0f:1d:63:bc:e0:e8:75:a3:53:
52:09:d5:ff:16:00:d9:1c:6d:92:61:d1:46:57:81:c6:cf:8a:
e7:62:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:28 2026 by rpki-client