
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier: psa5V6XGHXU5ywZmKxvvwc2mqaU0nUPcivS5PbcWOhI=
Subject key identifier: B4:87:76:AE:67:6C:35:2F:0B:BF:9C:F9:0F:A2:02:4D:1E:7E:B4:75
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number: 01C3
Signing time: Wed 19 Aug 2026 04:28:49 +0000
Manifest this update: Wed 19 Aug 2026 04:28:49 +0000
Manifest next update: Wed 26 Aug 2026 04:28:49 +0000
Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: 80Rsu0dVVNwQZ5PTG06rX3Ejkq4dIVDaLlQcBffociw=)
2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: wFV3hxZNMimHCra0GUvVj+qhSpRLii8tAhy60erdhQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Validity
Not Before: Aug 19 04:28:49 2026 GMT
Not After : Aug 26 04:28:49 2026 GMT
Subject: CN=6a853101-33c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:16:5d:50:e4:98:bc:33:f3:1e:1b:7d:b1:51:
4d:86:b2:f7:bf:f9:f8:72:6e:37:7e:81:f8:07:13:
c8:7f:b1:ef:3f:30:8e:90:6a:ad:8d:5b:f2:91:fe:
3e:7c:31:90:a0:16:cf:78:45:29:07:c0:71:8f:0a:
fe:dd:65:7a:57:1a:74:be:19:68:47:2b:07:1c:44:
6d:2e:ac:11:30:d0:a7:b6:6e:e4:ae:dc:a1:33:11:
b0:52:2c:34:11:e8:97:12:e2:b6:05:70:0a:df:fd:
1c:26:4f:a0:e0:8e:ab:14:3a:42:87:1b:29:ea:d9:
a8:39:80:3e:dd:99:67:80:2e:ea:1e:6c:34:69:6c:
cd:ed:57:e7:1a:7e:3b:42:6f:72:eb:75:58:d4:6f:
56:dd:aa:cd:12:ff:f9:10:c1:0b:76:69:60:61:0e:
6c:b5:36:f6:bf:8c:fe:68:69:ba:94:be:7e:ea:a9:
e5:3c:5e:5c:96:66:cd:ce:c1:46:d3:d4:45:6e:0c:
51:3d:28:75:9e:75:fb:41:0a:44:3e:82:4f:2a:f7:
20:63:3c:12:ef:e7:32:72:e4:db:ae:e5:fa:a1:5a:
8e:01:a3:b4:67:59:4a:94:0e:70:61:72:04:dc:ba:
1b:e1:7d:5e:32:7b:67:9d:22:2d:8b:99:b6:ef:1d:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:87:76:AE:67:6C:35:2F:0B:BF:9C:F9:0F:A2:02:4D:1E:7E:B4:75
X509v3 Authority Key Identifier:
keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:15:27:f3:66:95:9f:38:0a:eb:4a:d7:a6:84:8e:68:d1:0f:
ab:45:7d:9c:91:23:4f:35:aa:06:3d:1f:6c:92:8c:1c:01:bb:
04:15:04:c8:56:bc:e0:ee:1b:1d:63:c0:50:9c:7c:6f:59:87:
cf:9e:84:19:d4:f1:db:8b:ad:8b:51:70:26:1a:07:51:74:77:
0e:1b:af:46:70:56:8c:04:68:71:9f:02:83:e2:22:4e:ca:18:
61:d7:49:23:a7:69:e0:fd:f5:c1:df:ed:cc:ad:5e:ff:60:70:
7e:39:60:51:07:d4:0b:1f:1f:5f:49:d9:3f:c7:5f:8c:6a:86:
1f:39:71:22:32:f6:79:46:7d:bd:52:5f:e6:46:55:e5:00:04:
b8:e0:04:82:f7:f1:5d:56:80:39:e7:f7:e1:ac:af:59:b4:fb:
27:6a:3e:5a:bf:a0:4d:ff:da:7f:36:85:bb:dc:c4:ef:00:36:
aa:b8:13:31:66:de:57:f0:a7:b4:fd:4f:10:73:78:f8:e9:55:
bc:6c:c5:40:71:85:82:c2:24:d5:70:7a:a6:e7:92:ef:c0:48:
1b:88:fd:05:e7:de:d9:4b:a0:6b:07:84:e7:06:49:e9:1d:cd:
b7:e8:a5:58:11:d1:34:a2:87:31:c3:98:8a:30:49:b8:5c:ac:
29:4a:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:40 2026 by rpki-client