
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json)
Hash identifier: tXZ0EweotpDLqWxwbjD/8oxN+B5I+6D5K0oKt4UIiM4=
Subject key identifier: 91:B7:48:BB:46:D3:18:45:45:68:3B:D4:58:C2:F6:1B:32:A3:06:F7
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial: 044D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
Manifest number: 043F
Signing time: Fri 03 Jul 2026 00:41:43 +0000
Manifest this update: Fri 03 Jul 2026 00:41:42 +0000
Manifest next update: Fri 10 Jul 2026 00:41:42 +0000
Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: rwJqD6Il4WL4i4g4KP3Oma0R04lIEopyYLdy3O+JJ1Q=)
2: CB0F28626A3D11F18BEDC8237D47A888.roa (hash: 9aLbjRQRMYIzYencq0lATGqFcBhPNKrd9K7Wus4HUHU=)
3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: uIe065ouSrK1ZyYaAyKs/pdPmvRv0EpPK089oDcTECA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 00:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Validity
Not Before: Jul 3 00:41:42 2026 GMT
Not After : Jul 10 00:41:42 2026 GMT
Subject: CN=6a470547-2c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:14:a0:54:5b:bf:63:ce:e8:36:b2:f7:b2:
fb:cb:7b:40:28:71:cf:3c:28:83:a5:cd:c9:33:3b:
9d:8b:3d:da:b3:fc:b4:ac:b2:60:37:ad:78:0e:a4:
af:dc:dc:28:ff:21:e3:c3:28:03:17:ed:cd:13:8a:
4c:ee:78:e4:58:62:13:60:f7:01:25:67:2e:f3:a3:
2a:08:5f:ec:3b:6a:01:dd:88:44:92:8f:fc:a0:45:
cd:d2:4f:c9:e0:9a:61:69:1c:f5:95:74:c0:b5:f2:
5f:c2:0b:fe:e2:30:77:f9:4e:5a:64:21:d8:cb:b9:
13:c8:a6:d5:f1:b5:07:ac:4d:31:ec:0a:69:e7:38:
ff:b2:86:21:d1:37:8b:dc:0b:af:42:fd:9c:4b:06:
a0:e2:fb:34:78:55:93:10:bd:6c:ca:9f:fe:88:db:
70:72:27:1c:d8:fc:a8:fc:c7:e2:6e:58:ba:79:02:
b4:bd:2a:8c:6c:d4:4b:32:6c:61:fd:53:f1:45:63:
29:0a:76:32:2b:23:a4:a9:8c:a8:c5:f3:73:c3:9b:
a7:ed:9a:1e:ae:cb:eb:94:ed:8c:6a:d4:c1:45:fa:
56:e9:f9:fd:12:d1:f4:cc:15:bf:b9:6c:e2:c0:6d:
d3:d3:46:52:57:42:9d:24:47:a4:29:a5:f2:26:3c:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B7:48:BB:46:D3:18:45:45:68:3B:D4:58:C2:F6:1B:32:A3:06:F7
X509v3 Authority Key Identifier:
keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:fb:18:25:3b:8d:78:25:0e:6d:d4:08:82:96:73:ad:c9:04:
b4:64:ca:77:9a:48:9d:9d:1d:b3:0e:0c:76:33:9b:b9:2d:e7:
e9:57:d2:44:35:25:c4:1a:19:98:91:f2:97:51:fa:f3:79:32:
6c:25:b9:fc:34:aa:17:c3:05:e1:37:23:e9:04:67:49:ee:2d:
cf:0c:03:36:ab:70:06:2d:45:b6:84:cc:3f:44:64:37:ae:cf:
b7:c0:38:5c:58:42:c6:26:cd:36:d8:85:14:45:77:f4:9f:34:
44:42:c8:9b:da:d2:40:7a:1c:5b:c9:86:cb:ed:63:86:ef:57:
aa:5e:cd:6c:b8:63:df:1b:27:cc:b7:6c:d4:d2:6b:a2:c8:1f:
4a:eb:0b:f7:fe:ef:be:94:ef:bc:a5:03:57:d1:d3:fe:2e:01:
25:41:b0:2d:1c:bd:55:41:b4:02:db:9c:3e:98:e9:74:95:07:
e5:38:8a:c9:79:15:78:e5:00:c7:99:c3:0f:a0:67:59:7d:02:
cf:75:f1:a5:09:6d:fa:6b:f7:f7:c7:b3:33:99:a7:fe:36:52:
cc:d9:28:94:f7:2e:b7:bd:00:98:14:97:d2:8d:4a:e2:10:ac:
d5:9d:3a:cd:3b:8a:cb:e1:97:25:d6:65:a3:44:d4:dc:b2:5b:
56:13:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:25 2026 by rpki-client