
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier: Vl4U44vLjlc76cy4IBY9VnhDodONoO4kDa79yRL1D/I=
Subject key identifier: 69:D7:23:C9:D3:69:D4:51:4E:BD:AE:1F:34:28:B8:92:01:B5:68:1A
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial: 161C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number: 1607
Signing time: Thu 08 Oct 2026 16:46:25 +0000
Manifest this update: Thu 08 Oct 2026 16:46:25 +0000
Manifest next update: Thu 15 Oct 2026 16:46:25 +0000
Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: al1GVvxz9NZOfaf8LR8POU+ppuzaNaPOTKTG8Bn0TCQ=)
2: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=)
3: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5660 (0x161c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Validity
Not Before: Oct 8 16:46:25 2026 GMT
Not After : Oct 15 16:46:25 2026 GMT
Subject: CN=6ac7c8e1-4163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:8d:bd:9b:92:f6:4d:f4:a1:dd:0c:83:60:
66:55:e0:5d:d2:e4:c9:d7:11:da:db:61:67:2f:d9:
75:7f:0f:c4:6d:ff:62:f9:8b:10:30:b4:e0:81:cf:
aa:15:59:fd:c2:10:8a:74:25:3f:8c:4a:39:72:ac:
38:d7:f6:8c:37:43:33:66:6e:12:27:c1:9f:1e:53:
57:b4:d1:e3:6d:fd:3c:af:29:ac:a8:81:c3:aa:75:
c8:eb:43:21:3b:71:67:ac:40:d5:60:db:d7:a1:2f:
f5:55:31:25:dc:c2:b9:8a:2c:61:f1:cd:fa:21:3e:
11:b3:e4:2b:49:78:46:3e:87:0b:0a:b9:38:57:fd:
50:ff:59:77:67:c3:ab:d8:f4:bf:e8:10:c4:c7:bf:
4f:3e:cf:75:70:21:c4:c4:a9:85:2f:a4:15:b1:09:
ac:67:d3:da:ab:41:ea:36:9d:a4:82:0d:5c:cf:c5:
3c:3f:a7:77:93:03:e4:0e:d9:ac:8e:20:02:31:56:
cb:25:b0:ba:9a:a2:9a:41:a1:79:4d:55:03:d7:fa:
c1:b2:e0:b8:54:61:06:ad:5f:b3:a0:17:e3:99:b2:
2a:ca:fc:84:04:61:ed:d2:0f:e9:67:e5:cf:53:95:
4b:35:88:00:e4:bc:d7:c7:58:da:37:a4:5c:6c:87:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:23:C9:D3:69:D4:51:4E:BD:AE:1F:34:28:B8:92:01:B5:68:1A
X509v3 Authority Key Identifier:
keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:07:d2:eb:f5:99:64:fa:08:33:ce:b3:cd:d6:7e:72:c5:51:
ac:7a:89:02:cc:55:6d:77:e7:8b:a5:23:2e:59:ba:6f:97:aa:
64:ca:a5:8a:f7:22:2a:2d:f2:b5:b0:56:e2:23:30:7a:5e:ce:
bc:0f:42:e1:06:a4:01:df:a4:8c:63:d1:80:76:3d:d8:a9:7d:
d8:9b:dc:ed:98:27:2c:d6:76:d1:35:3e:65:bb:fd:0a:dc:c6:
b4:50:35:af:99:79:ea:0a:5c:2d:18:3d:d9:73:48:33:45:33:
18:1e:34:1a:7a:7f:db:2a:5c:82:c5:b7:99:6e:89:6b:5e:df:
8f:fc:6d:75:95:20:70:1b:c3:7b:93:0e:33:1e:f6:92:31:9d:
db:5d:18:c3:4a:3c:fd:55:08:58:fb:b7:b9:50:7a:60:fc:5b:
a1:31:c2:4b:fd:a6:24:7d:a6:45:93:f1:71:3c:39:3d:7d:51:
79:93:3d:21:11:74:08:c5:41:fa:30:bd:cc:16:4a:77:2d:db:
ec:34:d9:9d:9c:10:5c:d0:cf:b8:f9:bc:16:0f:b0:46:9a:bc:
14:33:88:7c:5b:56:7a:91:6a:c3:fd:22:84:d3:e8:81:30:9c:
7a:fb:4e:21:a4:bf:40:46:36:5c:da:a8:bf:a9:3f:be:2c:7c:
b3:f3:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:25 2026 by rpki-client