
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json)
Hash identifier: SmyedzS/oaLWU67e5ucMJPnQsIL5nxkEM913slUR78s=
Subject key identifier: B3:3D:C3:6E:05:9E:5C:F9:18:AE:F9:3E:F7:91:62:D0:E8:BE:F5:CE
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial: 067F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
Manifest number: 0662
Signing time: Sun 26 Jul 2026 23:30:45 +0000
Manifest this update: Sun 26 Jul 2026 23:30:45 +0000
Manifest next update: Sun 02 Aug 2026 23:30:45 +0000
Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: 9H+vbH4XSYGkbCGvLlCT1RXotA4bS6pwaWYqGnYowG0=)
2: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=)
3: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=)
4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663 (0x67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Validity
Not Before: Jul 26 23:30:45 2026 GMT
Not After : Aug 2 23:30:45 2026 GMT
Subject: CN=6a6698a5-0a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:62:b5:a1:0d:51:06:e6:39:a0:47:c5:0e:
00:28:32:b8:53:73:90:b6:d7:c4:47:ec:28:8e:91:
02:9a:8c:fd:ce:fa:bb:d3:13:43:e7:5c:12:07:eb:
94:15:a6:81:b9:f2:31:18:08:45:b7:62:91:79:91:
77:fe:d7:d6:42:13:07:b2:93:de:87:0b:36:ad:9a:
f5:17:01:6d:bf:dc:41:c2:ac:39:64:f4:f8:3c:6f:
b8:3d:b1:a2:14:8a:a3:ce:c3:5f:b5:1e:f5:e9:61:
ef:c0:8e:46:90:12:9a:55:8f:37:46:94:79:4c:94:
03:4f:78:56:81:41:81:dd:49:ec:99:8f:14:9e:95:
4e:9a:3d:67:5f:84:b6:89:89:cf:76:2b:18:5f:13:
48:98:21:a3:75:f3:09:f9:e5:14:a8:9f:9b:29:29:
70:7b:0d:dd:a8:b4:e0:67:19:36:55:4b:dc:39:be:
0b:64:f6:8a:6c:9d:a7:2b:2f:9b:5c:5c:b2:95:8e:
69:e6:ef:20:ea:1d:36:d2:8d:f3:ee:9e:7a:32:4d:
4b:0d:a3:1a:76:1b:c5:02:b3:e9:bc:fe:0a:18:c3:
1c:6b:d5:0c:e7:5e:18:ba:1d:17:a7:cf:20:44:12:
a1:14:f1:3e:e0:f1:6e:39:84:37:8e:45:d8:22:62:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:C3:6E:05:9E:5C:F9:18:AE:F9:3E:F7:91:62:D0:E8:BE:F5:CE
X509v3 Authority Key Identifier:
keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:47:fd:3a:f7:02:62:01:16:9a:ff:8e:04:a7:71:54:58:
a3:05:77:70:48:16:3a:7f:55:1e:d4:9f:87:47:af:71:88:03:
e9:1a:9a:7e:e7:f3:85:b1:d8:26:ae:8d:a2:6d:95:24:2b:d8:
31:1f:30:e7:95:6c:c4:97:74:52:50:45:97:39:83:7d:97:c5:
d9:5f:44:c3:b8:8d:6e:1c:59:66:45:c1:4e:c4:94:ed:5f:2d:
7a:29:d5:21:67:7e:04:d2:43:5f:e3:60:6e:8c:ad:cc:d1:64:
1d:e4:13:34:e8:b7:31:6b:22:de:c0:9d:16:a9:2b:d3:08:54:
e5:4d:7c:0d:c7:4b:2d:0a:0e:6e:f5:d4:32:61:0c:9c:4d:b9:
90:51:94:7c:ba:93:11:fe:8a:99:76:82:c3:85:60:44:42:df:
96:2f:3f:12:23:eb:d1:1d:8b:c0:39:3f:2a:b6:f7:db:c4:5d:
7b:bb:e5:77:45:fa:f7:21:e9:12:8a:5e:c2:91:1a:8f:66:ac:
89:f2:52:56:de:5b:fe:77:45:46:b2:ff:f2:36:be:2d:38:cd:
31:70:11:5b:66:13:08:95:4f:bd:2f:f9:5c:d6:26:e4:69:f8:
81:73:0c:f8:a9:98:77:f1:88:65:ad:3b:73:56:96:2e:58:30:
2a:2a:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:03 2026 by rpki-client