
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json)
Hash identifier: OA6kwcOmifYSnt7oYUgqh4Azbd63wkP1GkYpMxEi548=
Subject key identifier: 83:9E:39:5B:E2:79:50:7E:85:39:F1:25:52:3C:52:39:26:B1:31:62
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
Manifest number: 8B
Signing time: Thu 13 Aug 2026 07:10:47 +0000
Manifest this update: Thu 13 Aug 2026 07:10:47 +0000
Manifest next update: Thu 20 Aug 2026 07:10:47 +0000
Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: /5dngLPqX+8qOWrb53WfF4l/MmQaVdKbII9NS8NQ2Hw=)
2: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=)
3: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=)
4: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 07:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Aug 13 07:10:47 2026 GMT
Not After : Aug 20 07:10:47 2026 GMT
Subject: CN=6a7d6df7-cb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:82:3a:58:97:6b:4d:3b:b3:ed:87:67:40:
e6:12:a7:f2:a1:7d:7c:69:33:8a:20:27:78:7e:d5:
c1:e7:c6:4a:f6:db:ff:c5:e4:0b:a5:b7:78:38:4c:
7c:05:03:d3:84:08:65:ae:8b:1d:b5:db:55:1b:f1:
f3:39:4b:3d:ad:43:f7:f9:77:5a:a5:0a:ec:bf:5a:
25:50:d6:a5:c3:78:da:4d:88:14:08:7f:e2:a6:27:
63:a8:a9:67:5f:d1:b9:bc:20:1a:ff:8b:da:6b:85:
01:e2:d1:b3:02:b0:b2:1e:97:33:6b:75:11:4a:b3:
2b:64:d6:49:f7:bb:fc:8f:4d:e7:e3:39:5e:23:fe:
c2:b3:04:5f:7b:1c:f7:3b:16:e7:2a:c4:eb:a5:99:
12:2c:8d:ee:e4:12:ae:a1:ec:c5:fa:c3:58:fa:78:
03:a9:05:fb:09:19:e8:a6:ac:0d:4d:ac:1b:ac:f0:
95:98:6c:79:3c:a6:90:c0:72:9f:f4:d3:16:08:9e:
a6:66:01:79:f6:45:04:c2:37:11:95:ca:76:2b:59:
f6:8f:3f:0e:05:a0:80:82:4f:8a:5f:dc:d8:17:3e:
de:58:56:b4:6e:27:3e:5d:78:33:02:4e:60:a6:85:
92:d4:87:29:89:36:6c:7d:4a:83:1a:78:5a:bd:83:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:39:5B:E2:79:50:7E:85:39:F1:25:52:3C:52:39:26:B1:31:62
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:38:6c:1e:6f:2a:f9:05:7e:16:8d:56:0f:54:e9:d1:9b:
94:e8:bf:2b:7c:57:b7:b4:3a:2f:75:cc:f3:22:29:24:9d:d5:
f8:a5:a3:1b:cf:e2:80:c7:99:d2:fe:42:76:a9:a1:01:dd:6f:
2d:15:77:4f:4b:d8:d8:83:9b:47:88:15:80:25:89:d9:36:16:
15:10:c5:05:24:73:12:e8:a9:2c:f9:6f:45:72:40:59:64:ba:
69:71:85:51:6c:c1:1b:1e:58:0b:41:16:d7:a6:8b:5b:b4:f4:
d2:e2:8b:18:00:50:e8:e9:80:62:ac:4e:6f:17:95:8b:5d:4f:
c5:04:ee:51:c9:a3:67:c5:01:0a:d3:a0:ba:51:0a:e3:79:0d:
df:d0:35:6b:72:c7:e0:25:8d:bb:d5:eb:ae:95:f4:e0:17:b8:
a9:d3:64:b3:09:2f:07:16:10:0f:3e:49:f2:f7:f9:f9:04:d2:
80:e6:f5:5f:53:f3:f7:bb:5d:50:d3:4c:75:7a:6b:a5:8f:f1:
a3:23:20:e4:ca:06:c6:a1:a2:bb:55:9f:2a:f6:f9:22:33:c8:
2e:aa:d6:09:a2:90:6a:49:3f:67:d7:14:cd:32:89:94:ee:fe:
c2:24:4b:a8:c4:df:dc:fc:fb:ff:a8:a8:a4:66:f1:48:96:36:
3d:5f:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:28 2026 by rpki-client