
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
File: f8xPf-awzDq4ikFPiUwnT6ebK4o.mft (raw, json)
Hash identifier: ptraWlLx53F9Y0Bi0vgHVBnF8L/xhJZF1Ija+LjPKPU=
Subject key identifier: B0:19:40:FA:2B:86:FF:FB:BA:A1:72:E8:3C:B5:80:85:EE:E1:0F:6A
Authority key identifier: 7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
Certificate issuer: /CN=A91DB6F5/serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
Manifest number: 17
Signing time: Wed 19 Aug 2026 09:44:33 +0000
Manifest this update: Wed 19 Aug 2026 09:44:33 +0000
Manifest next update: Wed 26 Aug 2026 09:44:33 +0000
Files and hashes: 1: f8xPf-awzDq4ikFPiUwnT6ebK4o.crl (hash: is+vwZnudsrMMHGaGPgMSV8rE4nUFXdujOEQ4apiuts=)
2: FB8302CC7B4311F1A6C72CC794A30FBC.roa (hash: O3P+wCLcSaZeVnz8hU5Gns4U/UBq9VDtYeZsJeUmjAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6F5, serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Validity
Not Before: Aug 19 09:44:33 2026 GMT
Not After : Aug 26 09:44:33 2026 GMT
Subject: CN=6a857b01-5c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:17:15:40:eb:53:64:8e:e3:08:8a:97:72:
99:a1:87:0a:d7:68:d9:93:c3:ad:05:2d:7b:aa:07:
a6:ab:bf:51:3e:67:34:ab:41:a1:29:0d:4c:28:5b:
0a:e7:e6:5d:88:7c:b0:43:7c:fb:6e:8a:b6:75:4b:
af:ea:f8:0b:c2:74:0d:3b:b0:36:da:03:90:55:3b:
3c:94:ca:7b:96:fe:2e:ac:7b:f3:73:eb:d5:c3:2f:
1b:27:f0:1d:57:41:bb:3b:3c:f1:80:7b:69:b6:15:
38:99:90:f1:f8:c6:1a:49:1f:f5:48:c3:3a:43:27:
04:b3:65:35:ce:45:09:80:3b:01:2b:5f:d9:21:9a:
ae:06:2f:26:81:a5:b8:1f:8d:3b:9e:84:3f:55:4a:
06:84:09:cf:f2:04:6d:c1:ae:d5:3e:da:94:93:94:
f6:b6:fb:34:31:ad:c8:07:81:22:19:09:87:45:5f:
c3:17:b8:b1:66:39:70:2d:83:a4:2e:94:17:a2:71:
d6:25:86:f5:4c:bf:4c:12:1e:44:36:8b:76:ed:d4:
64:85:0e:fb:2b:18:68:25:ff:d4:a2:88:cd:ef:0e:
74:5a:e1:34:a5:66:7b:13:15:ac:8f:f5:62:bb:cb:
4c:57:3c:0d:01:9f:92:cb:f5:56:b0:eb:37:ff:e8:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:40:FA:2B:86:FF:FB:BA:A1:72:E8:3C:B5:80:85:EE:E1:0F:6A
X509v3 Authority Key Identifier:
keyid:7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:00:5d:cb:f0:2d:d4:ab:de:2c:47:90:c3:d6:b8:0b:28:76:
88:7a:e3:c5:82:01:23:08:1e:47:1b:76:0e:ba:c7:a5:c9:ef:
24:db:47:e9:52:14:34:00:49:fe:11:c4:1c:84:d0:55:bb:12:
02:cb:49:07:2f:18:55:b3:1f:a7:23:c3:2b:38:e6:f6:0b:2d:
90:52:0d:5f:16:7a:ca:9e:ab:c0:a0:09:0e:bd:9c:17:da:1a:
1a:24:9d:50:3c:cc:ab:29:02:97:1a:78:00:5c:85:c6:6a:a6:
55:5f:06:d2:c3:21:92:82:77:38:63:62:fc:1a:be:62:78:22:
cc:59:69:67:2d:8d:58:8c:91:6e:e8:ee:14:03:f2:20:d9:4a:
04:45:9c:7e:a9:a2:8b:03:7a:2f:77:18:2e:ea:6d:62:81:8a:
2d:8f:fa:a5:d8:3f:9f:80:0a:fd:8e:f8:78:79:61:d2:fc:2c:
f1:e4:53:f9:70:63:2e:73:06:b7:ec:fd:e0:0d:75:6b:5d:63:
e4:6f:24:c5:d0:99:35:12:e0:3b:96:9c:6a:57:b2:aa:91:58:
8b:30:50:c9:13:82:09:e9:b0:0b:76:dc:b7:2b:cb:56:4f:b8:
f6:b1:57:95:ee:1a:36:97:f0:d1:70:d6:45:02:81:77:8a:ca:
16:03:0b:2f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QjZGNTExMC8GA1UEBRMoN0ZDQzRGN0ZFNkIwQ0MzQUI4OEE0MTRGODk0QzI3NEZB
NzlCMkI4QTAeFw0yNjA4MTkwOTQ0MzNaFw0yNjA4MjYwOTQ0MzNaMBgxFjAUBgNV
BAMTDTZhODU3YjAxLTVjMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8ZxcVQOtTZI7jCIqXcpmhhwrXaNmTw60FLXuqB6arv1E+ZzSrQaEpDUwoWwrn
5l2IfLBDfPtuirZ1S6/q+AvCdA07sDbaA5BVOzyUynuW/i6se/Nz69XDLxsn8B1X
Qbs7PPGAe2m2FTiZkPH4xhpJH/VIwzpDJwSzZTXORQmAOwErX9khmq4GLyaBpbgf
jTuehD9VSgaECc/yBG3BrtU+2pSTlPa2+zQxrcgHgSIZCYdFX8MXuLFmOXAtg6Qu
lBeicdYlhvVMv0wSHkQ2i3bt1GSFDvsrGGgl/9SiiM3vDnRa4TSlZnsTFayP9WK7
y0xXPA0Bn5LL9Vaw6zf/6NHRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsBlA+iuG
//u6oXLoPLWAhe7hD2owHwYDVR0jBBgwFoAUf8xPf+awzDq4ikFPiUwnT6ebK4ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNkY1LzdCMDZFM0EyN0I0
MzExRjE4NTMzNkUzMDk0QTMwRkJDL2Y4eFBmLWF3ekRxNGlrRlBpVXduVDZlYks0
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZjh4UGYtYXd6RHE0aWtGUGlVd25UNmViSzRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC
NkY1LzdCMDZFM0EyN0I0MzExRjE4NTMzNkUzMDk0QTMwRkJDL2Y4eFBmLWF3ekRx
NGlrRlBpVXduVDZlYks0by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQChAF3L8C3Uq94sR5DD1rgLKHaIeuPFggEjCB5HG3YOuselye8k20fpUhQ0AEn+
EcQchNBVuxICy0kHLxhVsx+nI8MrOOb2Cy2QUg1fFnrKnqvAoAkOvZwX2hoaJJ1Q
PMyrKQKXGngAXIXGaqZVXwbSwyGSgnc4Y2L8Gr5ieCLMWWlnLY1YjJFu6O4UA/Ig
2UoERZx+qaKLA3ovdxgu6m1igYotj/ql2D+fgAr9jvh4eWHS/Czx5FP5cGMucwa3
7P3gDXVrXWPkbyTF0Jk1EuA7lpxqV7KqkViLMFDJE4IJ6bALdty3K8tWT7j2sVeV
7ho2l/DRcNZFAoF3isoWAwsv
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:33 2026 by rpki-client