
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json)
Hash identifier: VM+8P6Af96I25a5onT8vd/KKn9nd145mexEBYxSJEqg=
Subject key identifier: A3:BF:63:A6:2C:97:B2:BC:88:53:BE:94:77:49:4B:42:E0:74:7F:63
Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
Manifest number: 50
Signing time: Thu 11 Jun 2026 10:40:42 +0000
Manifest this update: Thu 11 Jun 2026 10:40:42 +0000
Manifest next update: Thu 18 Jun 2026 10:40:42 +0000
Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: YJyfNpJGBt/nWGLydlxCue/NCeOcSR7F6znc9VfYDVY=)
2: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=)
3: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Validity
Not Before: Jun 11 10:40:42 2026 GMT
Not After : Jun 18 10:40:42 2026 GMT
Subject: CN=6a2a90aa-7e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:ae:b2:f8:90:77:bf:08:a2:15:80:57:a9:
f3:29:8d:3a:32:79:0d:00:05:ad:bc:3f:f0:7a:38:
ac:19:06:f8:c5:8b:8c:16:80:db:43:9d:71:9b:4d:
86:13:d0:43:0c:9a:d8:c8:db:40:b2:63:d5:6d:3b:
da:c9:32:9e:46:e8:63:05:85:99:d6:1e:50:3e:b8:
e2:6a:43:80:47:a0:d4:d0:37:7d:bd:55:5b:34:ed:
c6:f6:f7:25:77:f9:51:61:38:a8:71:57:c6:e5:8f:
76:74:40:da:60:38:8f:11:49:91:a3:fc:be:df:5b:
02:4b:e7:a7:cc:4f:9d:d8:d4:82:7d:6d:45:66:51:
60:d8:a6:4b:fc:f2:2d:97:d5:b0:f8:a7:3f:70:59:
5d:1d:ff:86:73:0e:92:87:12:9b:17:1e:a8:4c:2e:
14:4c:43:7d:7c:ad:9e:a3:01:42:a3:cb:12:d4:fc:
d4:b7:9a:33:f1:99:88:59:7e:f8:ce:99:f2:41:17:
d2:42:e8:87:f8:05:73:89:4e:ae:7c:b5:db:c7:94:
f8:d5:e8:11:0c:ff:02:e4:5f:fa:9b:61:f1:df:2e:
10:93:89:b0:f8:51:ab:6b:6e:e6:b2:1c:81:84:a3:
b5:e1:3b:03:b9:0d:e7:b3:2b:78:5b:81:0d:4c:9c:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:63:A6:2C:97:B2:BC:88:53:BE:94:77:49:4B:42:E0:74:7F:63
X509v3 Authority Key Identifier:
keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:77:24:52:d6:42:35:8c:dd:4c:7a:10:9c:22:f5:24:cf:97:
4e:28:65:0a:fc:05:19:fd:0f:92:1c:73:08:9f:b8:03:b7:ed:
ac:23:c8:3d:3c:8b:98:35:2d:bd:e4:41:91:6c:b1:16:c4:e7:
56:ba:a6:1d:c7:8a:01:5c:15:07:8e:ea:ae:e6:e5:f4:f8:d2:
6e:5d:0f:13:45:a4:4d:e3:70:4d:c7:55:96:ac:48:77:50:ac:
44:23:7b:55:d4:51:97:3c:e7:f0:c5:1e:c2:d0:f2:7a:92:02:
b8:53:a6:72:18:bb:c1:90:36:9b:18:67:aa:7c:e6:2c:67:38:
1e:01:2f:38:b9:ef:8f:01:4d:3e:70:ff:93:11:37:e4:98:ed:
ef:fa:78:20:ac:a0:5d:95:16:dc:c3:d7:82:a6:a5:19:a8:ca:
f2:c8:fb:e4:d9:95:74:ef:3c:d6:66:3b:05:25:34:18:d8:5c:
ae:85:d4:fc:21:f0:ae:5e:88:85:e3:9f:7e:d5:96:2a:78:5d:
6c:d5:53:cf:97:d6:37:ef:6b:46:f1:b3:ea:51:7d:fa:0c:c3:
d3:16:9f:99:64:cb:dd:69:b4:73:b5:c5:cb:96:9d:2b:80:19:
69:82:35:50:a1:5d:18:b3:2d:1a:78:85:fd:12:fa:4a:a3:20:
43:bd:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:35:17 2026 by rpki-client