
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json)
Hash identifier: 3TGxndF46hjxi9rqP+YvFgc1Yu/0LvDPWAGbPxqIDdQ=
Subject key identifier: 02:A7:63:EB:7E:0B:9C:8E:CC:B4:C3:7A:83:FA:8C:04:06:75:35:A2
Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
Manifest number: 53
Signing time: Wed 19 Aug 2026 08:59:23 +0000
Manifest this update: Wed 19 Aug 2026 08:59:22 +0000
Manifest next update: Wed 26 Aug 2026 08:59:22 +0000
Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: uhr0JM8/KfYQNhOBNgI/K11/0yt7tPzFuTB33qhobx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl
rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B
Validity
Not Before: Aug 19 08:59:22 2026 GMT
Not After : Aug 26 08:59:22 2026 GMT
Subject: CN=6a85706b-cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:a5:73:a4:50:da:01:22:10:6a:92:c3:45:
c1:62:a9:48:d3:e2:8b:a9:c7:d1:67:d0:39:45:44:
dd:98:46:34:3e:33:94:2d:08:55:1d:e1:c8:1a:83:
0b:6b:29:18:bd:97:55:60:a4:ba:3a:0d:04:69:85:
17:18:9f:9c:67:d5:d2:eb:6e:c4:13:38:7f:65:d7:
99:fd:78:0f:fd:67:51:c0:ae:8a:2c:c2:3c:01:1f:
71:b0:ba:22:6b:be:f2:de:69:cb:56:67:af:70:a6:
d9:7b:80:6f:e7:61:2e:96:e1:c7:d0:b2:17:a8:83:
da:01:f3:6a:60:cb:63:4a:0f:42:d1:eb:a5:dc:fe:
70:84:19:51:42:21:b9:6c:54:70:e1:9d:20:b6:c4:
1c:2d:41:5e:09:8b:d1:24:93:17:c2:40:ec:b3:dd:
02:09:ab:da:55:6a:39:04:11:b4:49:66:7c:ae:2a:
e6:35:72:ef:7b:55:79:4d:a2:cb:9f:08:36:32:32:
bd:d8:cd:05:af:a5:0d:6b:65:00:42:cd:ef:2c:56:
35:eb:c2:ec:8c:48:75:f6:2e:93:03:63:a8:11:c4:
3f:c9:07:77:27:ad:8c:c9:fc:1a:bd:03:a9:8c:4c:
1e:04:6e:f3:8d:c1:70:04:a0:e6:d6:fe:c1:5a:f7:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A7:63:EB:7E:0B:9C:8E:CC:B4:C3:7A:83:FA:8C:04:06:75:35:A2
X509v3 Authority Key Identifier:
keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:ef:30:a1:cd:f1:fa:49:f0:d3:7f:73:e3:97:1a:7a:91:
ec:2c:db:a2:a2:52:55:45:2b:2e:51:76:1d:52:75:e5:e5:19:
c8:11:27:31:3e:53:40:35:53:20:99:97:df:5a:20:60:35:ac:
e2:a0:09:71:1b:53:38:c0:d3:b4:eb:ee:8f:cf:2f:98:9b:af:
b4:37:7a:d7:dc:ea:3e:ce:e5:1a:9f:f1:84:a9:4d:10:56:5d:
1f:2d:b8:31:22:b0:d1:0b:6f:ac:87:b9:a7:96:81:e7:ea:e5:
e0:cc:ca:32:47:34:b3:b7:e1:e1:c8:1d:a5:d8:67:1d:e7:46:
cc:27:c1:82:d1:82:3d:ec:a6:10:de:1b:6b:6b:02:34:56:ed:
d1:b8:da:a4:9e:bd:cb:16:78:87:f5:8a:76:f7:fd:05:4f:12:
03:c1:42:ed:61:1b:77:e1:08:c7:a0:55:1f:82:68:67:28:b4:
20:56:3a:f5:ba:3c:8b:e9:aa:1b:a6:44:b4:7c:12:f2:2b:e8:
b9:1a:15:4a:09:38:64:41:69:e3:1c:61:ab:95:ab:0d:9e:6a:
51:18:f8:b9:f8:31:94:c9:f1:e5:92:27:38:a6:97:ef:e9:ef:
ca:31:0f:72:67:df:34:cf:98:89:bd:f5:68:66:49:d3:ef:dd:
f1:0e:fd:6c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy
MURFNDE0QjAeFw0yNjA4MTkwODU5MjJaFw0yNjA4MjYwODU5MjJaMBgxFjAUBgNV
BAMTDTZhODU3MDZiLWNiN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBUaVzpFDaASIQapLDRcFiqUjT4oupx9Fn0DlFRN2YRjQ+M5QtCFUd4cgagwtr
KRi9l1VgpLo6DQRphRcYn5xn1dLrbsQTOH9l15n9eA/9Z1HArooswjwBH3GwuiJr
vvLeactWZ69wptl7gG/nYS6W4cfQsheog9oB82pgy2NKD0LR66Xc/nCEGVFCIbls
VHDhnSC2xBwtQV4Ji9EkkxfCQOyz3QIJq9pVajkEEbRJZnyuKuY1cu97VXlNosuf
CDYyMr3YzQWvpQ1rZQBCze8sVjXrwuyMSHX2LpMDY6gRxD/JB3cnrYzJ/Bq9A6mM
TB4EbvONwXAEoObW/sFa9/GzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAqdj634L
nI7MtMN6g/qMBAZ1NaIwHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz
RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE
NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw
LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAEu+8woc3x+knw039z45caepHsLNuiolJVRSsuUXYdUnXl5RnIEScxPlNANVMg
mZffWiBgNazioAlxG1M4wNO06+6Pzy+Ym6+0N3rX3Oo+zuUan/GEqU0QVl0fLbgx
IrDRC2+sh7mnloHn6uXgzMoyRzSzt+HhyB2l2Gcd50bMJ8GC0YI97KYQ3htrawI0
Vu3RuNqknr3LFniH9Yp29/0FTxIDwULtYRt34QjHoFUfgmhnKLQgVjr1ujyL6aob
pkS0fBLyK+i5GhVKCThkQWnjHGGrlasNnmpRGPi5+DGUyfHlkic4ppfv6e/KMQ9y
Z980z5iJvfVoZknT793xDv1s
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:44 2026 by rpki-client