
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
File: -H8wma149Ynd_kql85E3_7Mq_54.mft (raw, json)
Hash identifier: GHXInLLGTci+TqX0MqMxOlpB/MvwQZpZxB78cWmpvWo=
Subject key identifier: 45:DA:4F:ED:F6:3F:FA:11:5E:A9:F7:35:9E:C3:40:C0:69:F0:10:E6
Authority key identifier: F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E
Certificate issuer: /CN=A91F17B3/serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
Manifest number: C3
Signing time: Wed 19 Aug 2026 07:38:00 +0000
Manifest this update: Wed 19 Aug 2026 07:37:59 +0000
Manifest next update: Wed 26 Aug 2026 07:37:59 +0000
Files and hashes: 1: -H8wma149Ynd_kql85E3_7Mq_54.crl (hash: HRj/ymRLIqGdPDQ9fe/BMSu0hjfBywv3QmH0E+qJe2Y=)
2: D18B4798F06C11F09D48C4D25F6F56BC.roa (hash: FzVb/xQYMbYZ8H9dr6uwy2m6EVKcwi9t2xwaP8CIRPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl
rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B3, serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
Validity
Not Before: Aug 19 07:37:59 2026 GMT
Not After : Aug 26 07:37:59 2026 GMT
Subject: CN=6a855d58-a122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:81:b6:c0:93:56:5f:3a:0d:92:92:b3:d8:
99:fc:2e:d1:f6:b5:7d:a6:58:3a:e3:24:05:6a:42:
d2:9a:9e:41:34:32:65:86:e2:ba:88:e5:77:d7:14:
8f:3a:8f:ef:f6:be:20:b7:23:67:7d:db:94:0e:6e:
fe:66:a7:ff:47:ce:0b:38:69:0a:a9:1c:f6:ff:46:
78:15:8e:c5:46:7b:7f:b5:1f:1f:17:ed:d5:99:d3:
53:25:d4:8e:9e:a7:69:af:a9:0e:a4:e3:b5:39:18:
f6:0a:4a:ca:fd:3e:41:8c:c3:83:b7:b3:2e:f9:ad:
e4:f0:df:ac:a6:e3:f2:02:5b:78:ba:73:72:34:be:
7b:91:24:fb:b8:b6:eb:2e:99:fa:d1:e7:f6:0f:96:
d1:08:3f:d1:c7:7f:58:34:a9:80:9d:8e:f2:96:3a:
3e:2d:9b:84:d9:14:94:38:66:45:7a:ac:82:c2:6a:
6f:83:74:be:ce:99:e3:65:26:f6:46:68:70:6a:92:
30:4e:65:7c:20:83:ce:e2:ae:02:3b:46:a9:c1:0c:
6c:4a:d7:fb:31:2e:ad:80:0e:4d:de:26:7e:3c:d0:
a6:43:3d:30:74:c9:25:47:15:5a:16:bf:f0:8d:25:
69:35:2e:ea:f4:db:e2:32:5e:85:46:07:b0:d6:2b:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:4F:ED:F6:3F:FA:11:5E:A9:F7:35:9E:C3:40:C0:69:F0:10:E6
X509v3 Authority Key Identifier:
keyid:F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:28:10:8f:94:bc:7a:68:c9:ea:10:cc:4a:fd:e0:a5:77:57:
31:14:6c:93:ba:9e:ee:02:19:b0:5e:9a:ee:c6:ca:4d:af:50:
22:0a:53:7f:3f:ad:da:46:f0:2c:60:75:13:b2:83:a4:26:f6:
b7:91:f2:ac:e9:3a:22:48:37:cf:57:c1:e8:36:4f:2b:50:f1:
d1:25:6d:56:80:d8:f0:77:0b:e0:be:f2:dd:f5:be:96:2c:71:
8b:6d:49:39:9a:2c:ad:1b:3d:cc:37:18:c0:a2:ff:b8:47:cb:
1c:1c:b8:92:db:4f:19:b4:b5:8a:4a:85:c8:f2:f5:ec:0a:9a:
89:8b:a6:a9:d9:11:9f:00:e3:1b:83:e4:9d:9e:f6:be:b9:95:
f0:4a:0f:c5:05:91:69:c2:ad:18:b8:b6:13:5e:f5:39:fe:bb:
5c:5f:4c:e4:29:15:ae:34:e6:06:4e:25:f2:ab:a2:40:d7:a2:
ba:c1:a3:b3:f1:fb:dc:f6:dd:9c:91:fe:d3:64:34:74:cd:22:
2c:54:28:54:6c:c4:04:db:d5:2b:45:06:9e:40:23:7f:13:7c:
56:75:aa:20:5b:8b:41:89:0f:8f:ba:3a:0e:3a:cb:5a:5a:dc:
e1:70:2d:e6:e5:44:e9:d1:14:26:01:69:fc:de:56:1a:77:c7:
74:3a:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:03 2026 by rpki-client