
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json)
Hash identifier: siC3tqwppbROSuojNwACOY64wUiwvOVZFD4KvEY1NBI=
Subject key identifier: F4:B8:D7:24:89:4D:DD:2D:7B:47:E7:6E:C8:CE:B3:EB:68:23:B0:4D
Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5
Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
Manifest number: 0258
Signing time: Fri 09 Oct 2026 02:44:56 +0000
Manifest this update: Fri 09 Oct 2026 02:44:56 +0000
Manifest next update: Fri 16 Oct 2026 02:44:56 +0000
Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: VwZuda0dBnZQd1HeB0wp0bP7OrlAYTw5chbk/w88lVY=)
2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: XLPSc0/td1mhYplTCs82dgrhLJseOG/zvxA6NfAFkmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl
rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
Validity
Not Before: Oct 9 02:44:56 2026 GMT
Not After : Oct 16 02:44:56 2026 GMT
Subject: CN=6ac85528-8bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:ad:43:e8:5a:a6:15:be:ff:7b:ff:bb:11:
6b:b5:79:14:c0:f0:b7:4a:77:15:06:5e:3b:5b:26:
66:79:bb:57:22:f1:df:e5:1f:1a:d3:6a:74:24:7f:
75:9f:64:0a:5f:a2:19:5b:48:9f:75:64:7c:42:af:
d8:76:ee:ef:fb:e3:17:52:ce:34:96:73:4a:75:f3:
fd:44:db:c2:a2:e7:62:44:3d:a1:24:f5:43:b8:dc:
fb:ae:77:20:3f:33:ed:17:17:e5:b7:c9:21:5a:8a:
72:ad:99:2c:af:0a:3d:11:f0:ef:c0:6d:3d:7e:bb:
33:38:05:7a:b1:0e:48:0a:01:95:15:28:f4:26:7e:
9e:13:03:81:6f:8a:42:f1:62:f1:f4:86:3e:4b:58:
5a:35:37:78:c2:0e:a1:ae:df:5e:31:60:b3:be:50:
b8:1d:50:82:20:ba:11:41:70:a7:f8:ec:71:db:64:
73:83:34:22:9b:d0:6e:45:d9:af:83:73:a8:3b:9a:
1c:f6:21:72:2d:fd:f1:65:4f:56:75:43:23:3d:58:
83:89:48:32:1a:06:96:bc:6b:5f:c4:ff:95:bc:57:
0f:d8:1a:d5:47:e1:26:1f:6f:67:9c:03:12:d5:a6:
50:04:48:6d:2a:0a:39:68:e9:14:f4:a8:a3:0c:3e:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:D7:24:89:4D:DD:2D:7B:47:E7:6E:C8:CE:B3:EB:68:23:B0:4D
X509v3 Authority Key Identifier:
keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:c1:db:37:9b:8d:50:41:3e:a8:44:9a:a6:7e:ec:8e:fd:11:
51:9e:d2:34:31:0a:f7:e2:99:49:ba:21:4c:60:f2:2c:79:16:
d3:29:28:92:0c:43:31:12:aa:ac:19:cb:86:8c:5c:ca:dd:e8:
ae:10:f3:6d:c6:c1:ca:35:fb:41:51:a5:71:5d:06:6b:3b:ad:
69:9f:d2:51:d0:c7:76:e1:7f:43:91:66:d8:b1:7c:81:d0:9c:
e3:65:3d:81:d3:9a:1d:03:15:8d:ee:03:ca:a8:b5:3f:c7:c0:
0c:b2:ae:76:26:f6:42:58:c0:0a:42:50:a1:f8:1f:cb:55:01:
aa:ce:a0:2a:95:ff:65:13:31:7b:64:87:c0:68:40:e1:bd:ee:
f3:11:00:1a:5e:59:86:99:a5:20:39:1b:87:6b:44:26:8d:1a:
11:0b:cc:6e:99:31:02:75:01:74:c5:32:61:06:10:57:da:93:
0d:81:ad:24:0b:77:49:da:ae:d4:40:c5:a3:e6:c6:5c:4a:68:
89:0d:0e:a8:69:8f:b9:0a:22:65:be:49:98:b1:a9:fe:c0:7f:
c9:f5:88:a0:34:42:c1:cd:32:89:16:fd:43:5b:29:08:01:6c:
49:14:60:71:84:22:c7:12:d7:a9:13:1a:74:5e:8b:08:01:82:
77:69:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:11:59 2026 by rpki-client