
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier: ujIRlcsEzzgT/nEYBiUtLIE7jMAaik8LG8eYjOFEtmk=
Subject key identifier: D2:E5:5E:B3:67:D1:3E:66:D4:5B:89:0D:26:07:24:C4:94:80:A8:80
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial: 07D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number: 07CC
Signing time: Fri 04 Sep 2026 21:13:17 +0000
Manifest this update: Fri 04 Sep 2026 21:13:16 +0000
Manifest next update: Fri 11 Sep 2026 21:13:16 +0000
Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: bVgPv5Jtzy9VleKm4zw4mRYLxqIwwb1zTSiWN8NAQ+o=)
2: 715A7174F80411F099DDF14C6E6F56BC.roa (hash: vR+q/zKzwJ0cS0EI5NmaW8vlP008OwFN/8qpLRoeRrk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Validity
Not Before: Sep 4 21:13:16 2026 GMT
Not After : Sep 11 21:13:16 2026 GMT
Subject: CN=6a9b346d-32a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:cb:44:8b:63:21:d0:95:b9:92:e3:64:fb:
3a:88:87:94:07:53:d5:35:ca:14:fd:f7:ae:61:1c:
ad:9e:b8:6a:09:a0:54:81:60:d4:e8:07:d0:1d:96:
0c:80:ce:fa:1a:f5:34:d2:40:4c:df:05:09:f9:40:
8d:c2:2f:85:62:60:3c:91:68:9b:c6:95:0b:1d:1c:
11:82:5b:da:04:d5:28:d8:86:1a:ae:5c:1c:c6:9d:
07:95:f8:fd:12:18:b7:4b:25:b3:29:41:f9:d1:07:
aa:6d:d8:c6:88:a3:e9:d1:36:4a:90:49:b8:02:1d:
89:cd:08:20:e1:37:40:49:28:7d:66:a3:1a:f7:d7:
7a:13:01:46:b1:a8:cc:22:25:8b:42:70:73:24:0c:
8e:2c:5b:54:18:f9:21:83:e4:58:e7:62:b9:10:7e:
8e:ab:0d:ff:50:b2:4b:06:a9:44:f2:f0:3d:fa:f2:
d9:69:90:ba:ec:58:38:c1:a4:bc:50:5b:4d:73:70:
f5:73:a9:36:8b:a2:c4:1a:2c:f6:f6:07:14:c2:ae:
65:0b:5e:b6:67:91:d8:8c:86:32:cd:b1:64:bf:63:
1c:1b:6d:e0:f0:e9:15:ea:ad:ab:3b:db:aa:c4:27:
0c:9c:a6:d7:68:59:54:d6:ce:01:64:67:83:e9:4b:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:5E:B3:67:D1:3E:66:D4:5B:89:0D:26:07:24:C4:94:80:A8:80
X509v3 Authority Key Identifier:
keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:c9:f2:43:a6:4a:99:3b:2f:ed:d0:b9:54:28:10:00:66:
28:65:f9:f7:4d:37:ed:ab:22:ce:1d:33:73:ca:c5:5e:4f:88:
bf:94:d9:7a:db:c5:69:f1:28:49:fc:ca:58:4a:c6:1e:49:20:
d4:d9:d6:90:ff:60:df:b3:4e:fc:66:0e:cb:f3:47:88:ae:c0:
59:23:77:d9:fe:9c:d2:9a:7a:4d:5a:c0:be:92:3c:57:2b:1a:
86:ba:80:71:01:a4:4e:31:2a:50:d1:15:ae:90:0b:a4:d7:4f:
c3:20:1a:b5:63:22:5c:40:cf:1b:70:20:92:53:bf:a3:7f:3b:
b5:de:83:7c:31:96:4e:b9:69:b7:3f:be:7f:68:6e:30:7f:77:
08:a7:d0:61:8a:65:87:96:c9:f5:84:60:c0:8e:eb:6e:1a:d1:
82:cc:ed:78:6d:3f:e8:9c:d1:2d:56:5d:1c:84:c9:1b:83:99:
12:4a:e7:0f:6a:59:75:ab:83:fe:cb:33:54:2d:91:18:e2:c7:
b0:cf:96:9c:4d:5b:86:e9:32:ef:c8:7c:45:1a:07:5b:95:ce:
63:bb:ef:c1:1c:be:23:f6:f0:e6:4f:4c:84:20:48:34:49:aa:
11:fd:a8:b1:87:80:33:45:86:6b:4d:ff:91:3e:c7:51:45:a6:
5a:b4:9c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:37:56 2026 by rpki-client