
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json)
Hash identifier: YQx/55gARbWXAYSHBRcM/HROclrYd97FW7pWx6IzPtE=
Subject key identifier: B9:48:A9:EB:5A:C7:8C:89:53:8D:3B:E8:4D:2B:D1:F7:87:75:8C:F3
Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
Manifest number: 96
Signing time: Tue 27 Oct 2026 07:49:05 +0000
Manifest this update: Tue 27 Oct 2026 07:49:04 +0000
Manifest next update: Tue 03 Nov 2026 07:49:04 +0000
Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: yDumgcv9/L04K/QfRsR7GaIVO2nSguQqmqJWH8qAszM=)
2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=)
3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Validity
Not Before: Oct 27 07:49:04 2026 GMT
Not After : Nov 3 07:49:04 2026 GMT
Subject: CN=6ae05771-2eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:ae:5f:da:f7:e6:f4:e0:fd:9a:5b:17:2e:
cf:30:ac:e2:31:5e:cb:a4:14:8f:da:cb:be:16:e1:
9d:09:49:df:36:a8:4e:60:83:bc:a6:e9:6e:dc:5d:
91:6f:13:9e:ef:73:a3:6c:f8:98:14:b8:76:78:1d:
fd:d8:4a:66:99:cf:bb:62:af:15:84:55:68:7c:78:
1b:12:4a:a0:86:9f:a9:2b:be:94:f7:32:d7:6a:e2:
db:32:d2:01:1c:46:33:ae:0a:a6:c1:eb:6c:18:eb:
0c:62:92:5f:a5:df:0e:85:d7:ca:e2:40:c7:30:5e:
ff:2f:48:6d:a1:6d:3b:d3:47:93:88:a1:6f:01:8b:
9f:35:4b:c5:1b:4e:87:2d:d6:20:a2:53:30:6b:44:
b5:e1:76:a8:6d:ee:0f:cc:4d:7a:5f:6e:9f:dc:ff:
3f:56:01:8e:62:6c:bf:c4:7a:fe:b9:87:a5:42:13:
bc:66:c6:54:ac:7e:e9:08:75:7a:e0:e2:c2:0a:71:
a8:69:a1:5e:11:c2:c3:60:1f:b7:4c:36:5c:2e:cc:
d3:78:4c:74:4e:29:e6:bc:fd:f4:26:07:95:28:c1:
ad:5b:7c:ef:73:4f:68:42:87:5c:0b:4e:51:ff:24:
89:d6:1d:6f:d3:8d:35:55:b3:78:81:8a:e8:a8:de:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:48:A9:EB:5A:C7:8C:89:53:8D:3B:E8:4D:2B:D1:F7:87:75:8C:F3
X509v3 Authority Key Identifier:
keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:69:02:ac:ef:c8:09:84:c8:c4:13:ae:6c:73:2c:88:39:f9:
87:19:ef:e6:8c:e1:fe:7d:17:76:db:8b:78:4e:4c:02:29:94:
c6:32:d6:9a:1e:6b:cc:71:e0:3b:89:76:e8:2c:90:dc:9f:13:
1e:10:4c:f2:fb:ec:c9:3a:5a:61:23:0d:f6:49:bb:19:a8:f1:
1c:02:73:30:a9:62:bf:c8:30:93:83:e0:91:74:8b:d5:71:32:
18:42:63:49:33:e3:06:74:0c:d8:66:c7:6f:4d:34:72:37:15:
c7:38:bd:7d:66:4c:9b:af:fa:53:9c:b6:0a:a3:a3:e7:87:2b:
08:e3:94:6a:c6:4b:db:90:06:d2:59:93:6f:8f:fa:43:1a:14:
82:46:97:97:54:12:9f:32:dd:e6:1b:1b:cc:6a:b3:6d:56:61:
9e:de:d3:1b:d5:74:49:06:b6:7c:b2:b5:88:3e:ad:27:2a:b6:
3a:d3:06:3f:9e:a0:2e:77:ad:3d:65:e4:21:b7:57:b0:16:6f:
0b:e2:2d:ac:ee:2b:63:65:14:36:57:da:b1:66:95:4b:c6:41:
12:a1:44:52:73:58:5e:dd:22:c8:70:41:4e:86:5e:92:9e:c0:
73:1d:34:f5:8d:da:a2:e0:ce:64:2d:e5:53:af:c7:d4:d1:78:
5d:55:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:21 2026 by rpki-client