
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
File: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json)
Hash identifier: gyYlQqPebns2l8/2Rhp2qII9SdP0x+tbHN2tmJN02Zw=
Subject key identifier: 85:43:6C:B1:41:99:0D:A6:4E:9E:9B:A3:7A:74:80:78:2B:EC:B9:F9
Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
Certificate issuer: /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
Manifest number: 51
Signing time: Mon 05 Oct 2026 08:45:43 +0000
Manifest this update: Mon 05 Oct 2026 08:45:42 +0000
Manifest next update: Mon 12 Oct 2026 08:45:42 +0000
Files and hashes: 1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: njEZwZZToV/AUjvWN86ezVJIbxrEQtzWwCtdDg3kro4=)
2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=)
3: EE42117C927511F18A54FCC54511F970.roa (hash: 4onIQnShgHHglJV/eY63U0D9thFh3TgjTZuJUpaZPkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Validity
Not Before: Oct 5 08:45:42 2026 GMT
Not After : Oct 12 08:45:42 2026 GMT
Subject: CN=6ac363b7-4778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:0c:a1:62:dc:c0:96:f5:a4:68:85:ef:8f:
8a:a8:29:4b:a5:c5:c2:b3:21:64:df:7c:9f:63:17:
85:c9:1d:cf:ed:0e:34:77:65:90:bf:a5:9a:05:4f:
e4:ad:2c:e6:d3:06:43:5b:81:4d:20:34:70:cb:bb:
9d:03:09:10:c8:8c:58:a0:ac:21:c5:86:b7:ea:6b:
34:5c:a3:6f:f1:84:e6:90:16:81:8b:74:24:cd:c5:
87:49:8d:43:47:d0:ed:63:d3:ce:29:cf:bd:a8:bc:
d0:7c:d9:d0:2d:89:a1:b5:8e:0d:49:e8:a5:83:d8:
a1:89:38:57:76:f5:10:6b:2f:39:ce:7b:78:75:d8:
4f:51:ef:69:15:b9:85:f7:f9:42:ee:d2:52:4a:2f:
07:db:17:f1:82:2e:e9:62:db:f0:fe:8d:61:cd:cf:
d5:34:24:44:13:78:28:1e:5b:ce:b4:48:54:b1:83:
77:a3:5f:95:48:2b:83:24:97:19:60:ba:2e:66:7f:
77:a1:c7:fc:b6:d4:88:79:39:79:57:b9:91:08:b7:
46:78:71:fd:4a:0f:fa:97:10:e0:ae:62:d8:16:99:
2f:bc:91:f2:ce:a7:c4:10:06:75:9f:11:dd:88:77:
e5:60:17:31:b4:3d:76:70:39:9a:77:13:21:cf:9a:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:43:6C:B1:41:99:0D:A6:4E:9E:9B:A3:7A:74:80:78:2B:EC:B9:F9
X509v3 Authority Key Identifier:
keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8f:29:d6:f3:b1:5a:a3:b3:8d:7c:82:ea:fa:1a:ca:f2:0d:
32:b5:45:ea:13:60:0c:d0:09:49:eb:3b:9a:20:98:9d:37:4b:
8b:3a:3a:20:f2:98:20:e9:04:c4:50:05:c1:69:c9:4a:f8:95:
28:fc:08:37:a9:07:b0:cd:d4:bc:43:b9:8a:12:fa:22:ea:23:
56:65:3a:ad:f7:db:b4:6a:b6:b1:90:01:50:e7:a6:36:98:08:
27:67:7a:ec:80:c1:ff:7a:7a:24:57:43:d4:16:fa:c5:38:a2:
80:2f:6f:ca:e2:d0:42:5f:6c:24:d9:db:a0:e3:80:42:2e:eb:
89:3e:55:5e:b4:a6:6d:e9:88:ee:21:89:3a:87:15:a7:81:bd:
25:2d:a0:2a:90:f5:e0:ef:1e:ee:cd:99:3e:f8:bc:fe:25:2b:
e5:12:f1:24:46:af:4f:78:3f:97:81:0f:41:16:20:8b:c3:e6:
32:8a:48:af:3b:26:e7:92:1b:ca:88:5b:22:0d:32:70:df:2c:
db:d6:46:1e:c7:00:69:9d:81:26:d7:1f:39:66:e3:31:2b:27:
f3:60:48:75:c8:84:46:ef:99:05:1d:55:74:a5:de:02:dd:af:
5a:80:b8:26:33:1f:59:01:22:63:d8:83:14:02:db:f5:4a:41:
ba:db:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:02:57 2026 by rpki-client