
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier: +v+XpON4yPx5aJc1NouJV9l72WOmvFgbaoRfq+OnnSc=
Subject key identifier: 0F:5A:EC:72:F8:48:79:79:41:46:00:A6:C1:D6:EF:1E:5C:0B:C1:90
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial: 32D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number: 32D3
Signing time: Tue 18 Aug 2026 15:28:12 +0000
Manifest this update: Tue 18 Aug 2026 15:28:12 +0000
Manifest next update: Tue 25 Aug 2026 15:28:12 +0000
Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: Z808CpHSzFDlJzQW6uLMwktP4ilK9D22wIKa/EVVjiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13011 (0x32d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
Validity
Not Before: Aug 18 15:28:12 2026 GMT
Not After : Aug 25 15:28:12 2026 GMT
Subject: CN=6a847a0c-c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:ff:6a:c6:24:3d:2b:70:bd:47:21:0d:44:
55:87:84:b6:fa:75:f4:59:a6:35:19:45:bb:8c:f1:
46:9f:39:8e:0d:84:02:7a:aa:f4:b2:87:fe:b9:d0:
3c:93:c7:ea:7b:b4:fe:91:ef:64:19:8b:20:0d:36:
25:ec:5b:0b:ab:5f:e8:b6:14:f9:97:51:9f:3d:fe:
29:d0:af:ca:82:8e:0f:f9:db:02:d7:e3:7f:71:64:
b9:5f:01:1b:6a:4c:f6:1d:cd:2b:d0:b2:0a:8f:af:
e9:af:23:55:b0:8f:de:61:6a:60:0c:d0:bc:09:2e:
d1:ed:eb:1c:ad:61:72:c2:56:93:cc:f5:72:d3:bd:
80:bd:26:23:90:ef:d3:ed:a8:2d:6f:f0:a2:1c:da:
df:fd:f4:f6:bd:c7:7d:9b:48:b1:09:8e:b5:58:4f:
9a:19:d3:c2:07:16:44:66:03:bb:af:7d:6a:26:e8:
84:eb:60:8e:30:1e:af:92:59:62:6f:b7:ff:44:d0:
a5:78:e7:34:5e:a2:7a:cf:75:93:36:6e:4c:9b:9f:
42:c2:aa:7d:d7:02:86:0f:18:f3:b2:14:81:39:20:
a5:19:3f:8d:ce:9d:b1:f2:74:5a:f1:87:b7:14:b4:
ee:25:6b:62:e4:4f:f8:60:ea:48:5a:ad:37:e3:ff:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:EC:72:F8:48:79:79:41:46:00:A6:C1:D6:EF:1E:5C:0B:C1:90
X509v3 Authority Key Identifier:
keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:90:08:c5:0e:11:9c:cb:a2:81:63:e3:34:e4:2f:8a:e0:
47:a8:a0:bb:66:fc:a4:9a:74:1a:14:da:05:af:02:0f:1b:92:
98:30:80:56:4f:95:85:de:75:a6:24:a4:cf:49:aa:b4:36:fe:
4d:6f:f8:05:e6:cc:12:2a:e4:de:81:9d:f8:81:80:a2:a2:09:
b2:09:49:ad:b1:1c:a9:be:fc:fc:74:f4:de:c8:e9:ac:e2:d5:
d1:06:bf:82:16:a1:9d:13:5a:31:de:0b:92:ab:9a:e7:0e:6c:
18:d1:59:12:10:cb:d1:eb:86:e7:9e:74:09:86:4a:14:a3:45:
5e:60:e3:3a:ca:5d:75:0d:58:81:97:68:a4:3c:96:36:aa:14:
19:e5:e3:7a:5e:40:83:f8:ea:fc:f3:59:b1:dd:e8:d7:57:35:
9e:1a:73:e2:ba:d6:0b:ed:b7:34:7a:3c:dd:55:2e:c6:19:e1:
1b:0b:8e:84:01:b1:61:0b:fe:77:1a:48:85:24:cb:a1:69:09:
ac:7a:5a:7d:c8:22:ff:81:8e:e5:1c:42:c8:27:3b:8d:08:96:
eb:e2:18:dc:20:66:0b:02:84:81:ca:b7:00:64:8e:ce:ed:eb:
2c:51:fa:bb:9f:90:f9:c7:0d:9d:ed:43:d6:53:71:7b:ba:53:
2a:97:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:38 2026 by rpki-client