
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json)
Hash identifier: LiOApwpbphAkAxwnYiE3EBg+D7xMfPiktVpeKbjIGac=
Subject key identifier: 72:BE:87:E9:EF:97:E9:6B:EB:78:62:1A:9A:1C:25:F9:82:25:8B:7E
Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
Manifest number: C8
Signing time: Sat 03 Oct 2026 07:29:18 +0000
Manifest this update: Sat 03 Oct 2026 07:29:18 +0000
Manifest next update: Sat 10 Oct 2026 07:29:18 +0000
Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: 8mB9mFGyNlstt83PtnN09AexpxA/wg+JIjPnWWCGrzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl
rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Validity
Not Before: Oct 3 07:29:18 2026 GMT
Not After : Oct 10 07:29:18 2026 GMT
Subject: CN=6ac0aece-c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:83:53:f7:70:7a:24:b9:3e:46:ef:57:30:
2c:c9:b6:1a:6a:56:44:b2:01:56:3d:1f:8e:21:c0:
b6:a3:d0:2e:95:a1:48:76:c9:8a:ef:0d:ee:30:2e:
97:f4:af:80:9a:aa:e8:0f:d9:4c:8a:51:76:6c:c6:
a8:40:61:16:84:5b:9c:01:04:ca:6a:f1:1a:60:6e:
d3:e7:c7:c3:ed:ae:7a:89:10:e1:b3:9e:59:f1:b7:
4e:6d:0c:8f:78:f3:93:44:ec:6b:0d:7d:ca:73:1e:
13:e5:17:eb:65:72:a3:8c:d6:95:55:84:8e:f0:a0:
1b:51:6f:36:b1:6c:16:e4:1b:da:35:51:2a:be:35:
fe:7a:86:c3:dd:3b:c4:c5:55:ad:be:f5:92:d3:aa:
66:da:0f:cb:ec:ad:fc:9c:f7:b8:00:b6:ed:38:65:
a4:f0:09:aa:23:23:d8:b1:9d:6f:99:d6:6b:e0:41:
c6:a1:27:ef:27:de:47:f4:f6:ef:80:03:f5:30:d2:
4d:04:b2:23:db:55:ff:2f:58:82:fa:08:fc:90:97:
7f:fa:80:30:f7:10:27:b0:16:58:39:02:3d:c4:1c:
ad:b6:a0:2f:0f:ef:7c:75:26:b4:e1:18:5b:fc:a7:
91:d1:21:82:cd:26:bb:4c:5c:eb:83:6b:32:01:79:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BE:87:E9:EF:97:E9:6B:EB:78:62:1A:9A:1C:25:F9:82:25:8B:7E
X509v3 Authority Key Identifier:
keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:50:2d:67:e8:47:ff:6d:ef:c4:83:df:73:37:74:79:c5:32:
18:9d:6d:ee:10:ef:49:67:ef:d8:71:04:42:eb:14:64:f6:68:
a1:3d:62:52:76:d4:8b:68:4e:d1:ab:6b:8c:3c:e4:24:e8:6a:
eb:ef:6c:8f:60:91:e9:ec:6d:f6:1f:2f:69:e3:4a:b4:eb:2b:
25:d1:32:a8:b9:5f:c9:7f:0a:2e:ee:ae:c3:aa:9c:7f:0e:aa:
3d:c7:14:38:c8:ae:4e:c1:9f:c7:c3:f9:4c:fe:28:ac:50:ac:
6c:6e:60:8a:f8:3d:ce:ce:69:7a:f0:b2:43:ae:99:71:c9:c2:
c6:6b:e7:d5:d1:87:58:7a:54:78:27:86:7d:32:eb:f0:6a:50:
a0:56:47:56:0a:74:0c:05:85:0d:a0:d5:68:83:dd:91:85:69:
73:df:7f:31:4e:16:42:f6:f0:c7:63:e4:c6:0e:e4:1c:e6:65:
05:e3:a4:d8:6d:b4:60:23:57:48:37:07:b6:8d:a4:30:a4:16:
8c:31:fb:b6:04:d4:07:f3:f3:f7:ab:d3:08:2d:8a:44:3d:12:
93:10:25:55:b7:a6:69:c1:5d:b0:66:7b:06:0d:12:d6:71:ce:
4f:8f:97:a7:10:16:92:f2:77:2a:5c:d7:80:21:ad:d5:7a:c6:
e0:67:9b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:51:21 2026 by rpki-client