
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json)
Hash identifier: +YoQm5KpR7RIrGBSUs2BIH90doaGCS4F1ww5iFihhjU=
Subject key identifier: 49:F9:A2:ED:33:0D:4F:46:4F:22:B2:17:9C:FA:2D:A2:4C:EF:A1:4D
Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89
Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89
Certificate serial: 0594
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
Manifest number: 0591
Signing time: Tue 06 Oct 2026 23:20:05 +0000
Manifest this update: Tue 06 Oct 2026 23:20:05 +0000
Manifest next update: Tue 13 Oct 2026 23:20:05 +0000
Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: 9rS69WQWgfPFjxuhJocvWiv1DbuVyoY7RyXgIn8IXDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl
rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428 (0x594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89
Validity
Not Before: Oct 6 23:20:05 2026 GMT
Not After : Oct 13 23:20:05 2026 GMT
Subject: CN=6ac58225-df4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:50:a9:ec:8c:28:93:4d:f4:d5:5e:9d:26:
db:26:8f:2f:96:72:94:61:6e:34:e1:c1:04:9b:f8:
62:58:26:8a:fe:a0:71:44:31:9a:cc:ff:cb:d1:34:
96:26:c0:86:57:51:36:93:24:6d:e9:fe:f7:fd:b4:
66:c1:bd:80:42:50:47:d6:ad:9b:38:81:a9:da:99:
89:57:48:00:f8:88:27:06:b9:a2:a4:49:17:28:87:
af:23:ca:cc:a2:eb:5e:0f:91:69:2a:02:56:e1:5f:
12:68:aa:80:65:a3:cd:1b:0a:a7:5d:a7:4d:3d:8e:
2c:d4:d5:ba:0d:e2:53:77:d5:2b:e6:60:e0:d9:f0:
dc:cd:c1:e0:13:7b:fd:02:92:35:f3:a0:dd:d4:9d:
a2:4a:cd:00:d0:0a:d0:a6:90:96:b8:12:2b:97:79:
9c:d3:ca:2c:2d:75:f9:5a:d2:33:df:a6:da:7a:08:
b7:73:45:0b:4b:51:3e:c5:6d:e9:ac:cf:01:2c:69:
d2:71:c7:fc:b6:0b:47:7a:36:73:11:56:a1:04:c7:
b3:13:60:73:e5:de:d9:f4:44:85:f2:20:b6:ee:00:
25:66:4d:21:e1:c5:5d:07:1a:93:fc:bf:ec:1d:4e:
aa:6b:3e:53:18:af:eb:66:5f:61:89:fb:6f:3e:68:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:A2:ED:33:0D:4F:46:4F:22:B2:17:9C:FA:2D:A2:4C:EF:A1:4D
X509v3 Authority Key Identifier:
keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:99:f8:40:5e:b0:54:05:fe:79:a0:b1:b2:48:a3:fa:63:df:
20:6b:f0:96:24:f4:62:d1:b2:a7:34:15:a8:d7:09:a7:57:54:
aa:10:b6:05:e1:bf:cd:5d:cd:ca:c9:a6:66:8f:f6:a7:24:ad:
e9:3a:cb:62:7a:97:26:79:5e:59:d6:b1:e3:16:08:c3:aa:90:
dc:51:4b:f6:a7:07:1b:dc:e3:92:69:73:3e:3f:6c:81:a3:07:
0d:1d:88:6e:9a:2d:82:82:33:eb:4a:02:27:3c:4f:c5:09:77:
b9:aa:c3:fe:bc:6a:8a:99:6c:8e:cf:48:da:be:59:dd:13:67:
3c:a0:f8:fc:1a:b8:80:ff:c2:ce:f6:34:37:dc:b2:c2:cf:71:
e1:81:b3:f0:7d:36:89:21:20:10:a0:d6:78:07:74:2e:62:8a:
89:e4:52:ac:9a:00:f3:3b:24:ba:d2:21:b1:4d:8c:76:09:3f:
54:41:6d:d4:04:b2:aa:63:6e:02:73:38:6c:a3:2e:c7:46:f9:
9b:bb:f0:6b:93:5d:45:0e:f8:13:3a:c7:7c:05:fd:ce:1e:9e:
ce:de:e0:57:7b:5d:5c:cc:79:25:ab:20:cc:31:bc:cf:0f:39:
57:fe:78:37:06:ee:1b:01:91:31:53:ef:f3:5c:5e:6f:6a:69:
8f:7a:0b:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw
Rjk2MTNGODkwHhcNMjYxMDA2MjMyMDA1WhcNMjYxMDEzMjMyMDA1WjAYMRYwFAYD
VQQDEw02YWM1ODIyNS1kZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcRQqeyMKJNN9NVenSbbJo8vlnKUYW404cEEm/hiWCaK/qBxRDGazP/L0TSW
JsCGV1E2kyRt6f73/bRmwb2AQlBH1q2bOIGp2pmJV0gA+IgnBrmipEkXKIevI8rM
outeD5FpKgJW4V8SaKqAZaPNGwqnXadNPY4s1NW6DeJTd9Ur5mDg2fDczcHgE3v9
ApI186Dd1J2iSs0A0ArQppCWuBIrl3mc08osLXX5WtIz36baegi3c0ULS1E+xW3p
rM8BLGnSccf8tgtHejZzEVahBMezE2Bz5d7Z9ESF8iC27gAlZk0h4cVdBxqT/L/s
HU6qaz5TGK/rZl9hiftvPmhawwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEn5ou0z
DU9GTyKyF5z6LaJM76FNMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3
QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2
M3ByNXR0QlB0SklQbGhQNGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjpn4QF6wVAX+eaCxskij+mPfIGvwliT0YtGypzQVqNcJp1dUqhC2BeG/zV3N
ysmmZo/2pySt6TrLYnqXJnleWdax4xYIw6qQ3FFL9qcHG9zjkmlzPj9sgaMHDR2I
bpotgoIz60oCJzxPxQl3uarD/rxqiplsjs9I2r5Z3RNnPKD4/Bq4gP/CzvY0N9yy
ws9x4YGz8H02iSEgEKDWeAd0LmKKieRSrJoA8zskutIhsU2Mdgk/VEFt1ASyqmNu
AnM4bKMux0b5m7vwa5NdRQ74EzrHfAX9zh6ezt7gV3tdXMx5JasgzDG8zw85V/54
NwbuGwGRMVPv81xeb2ppj3oLgQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:17:16 2026 by rpki-client