
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: CvyCui2d8ar4FdcmrEL7dISaVHHIkzDLnTlcvgj/KkQ=
Subject key identifier: 94:41:37:6A:58:B9:50:50:75:76:17:8E:A9:3A:95:52:C6:1D:1E:C0
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2552
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 252D
Signing time: Sun 26 Jul 2026 15:50:38 +0000
Manifest this update: Sun 26 Jul 2026 15:50:37 +0000
Manifest next update: Sun 02 Aug 2026 15:50:37 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: lw1wvbBvYKugRWNta/l0Eqw6R4JNMdWr7gJBbixBHLg=)
2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: rycLk4UK+xxvgQxEjrUg94ft0J4vTpCCFPONGxFmmI0=)
3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: +gP/p1k0sh2C300+RvnruBX+xdYqj1376qs/G2NEuaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9554 (0x2552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Jul 26 15:50:37 2026 GMT
Not After : Aug 2 15:50:37 2026 GMT
Subject: CN=6a662ccd-d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:20:ea:31:11:cb:64:34:34:fe:84:95:7a:
58:f1:92:f7:60:8e:e4:d5:45:68:dd:40:06:99:17:
51:ab:13:84:46:28:7a:b4:02:02:36:c6:fb:ec:b3:
6d:7b:40:e4:5e:ba:25:0d:4a:1c:8c:a6:b0:68:48:
cc:e5:d6:20:6a:33:c8:0f:c1:35:bd:05:a5:0e:94:
cf:bb:05:e9:4f:eb:3f:84:8a:17:7d:5c:c4:c3:80:
cf:b4:f2:8e:cc:ec:c4:fb:20:1e:4c:a2:e0:31:c7:
2a:57:0a:6a:be:a1:83:c6:e2:b3:fc:ff:bc:1b:bb:
66:06:88:89:ce:71:ce:0f:d2:9b:44:e1:8b:fb:3f:
77:79:46:81:a0:f7:79:d7:62:74:e9:ac:df:b4:3b:
73:19:05:ef:87:6f:45:0b:b7:7b:d8:d0:ed:50:a9:
52:b4:70:fc:be:c6:3f:d4:9d:28:89:87:db:48:75:
d3:fb:44:88:e7:73:a0:86:5d:77:a6:96:b9:61:de:
ab:d9:9b:fe:fc:22:f8:77:cc:b8:12:55:b6:58:90:
85:fb:4e:79:d4:29:f3:5a:51:a5:d4:cb:87:c8:7b:
6a:50:3f:15:a6:82:75:95:03:1d:f7:95:0c:22:3e:
d1:c8:96:24:e1:12:9c:6f:9f:48:02:b7:bc:56:a4:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:37:6A:58:B9:50:50:75:76:17:8E:A9:3A:95:52:C6:1D:1E:C0
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:d5:ea:e4:35:96:bf:ea:7d:6a:1f:9d:3f:c1:ea:13:3f:48:
a7:1f:3d:d5:75:3f:ab:3d:86:74:40:41:4e:62:bf:22:46:00:
ac:20:32:7e:6d:00:05:41:e3:f4:f1:63:73:89:96:f7:83:06:
24:2c:57:fd:ab:6a:cf:32:93:38:83:b3:9a:02:92:b2:ad:2c:
e4:af:ae:05:c7:9c:1a:41:c0:25:2d:5e:7c:19:f6:85:f7:66:
fa:1c:c9:55:9c:a9:32:55:95:28:32:d0:ff:36:67:90:b6:48:
1b:d3:8a:86:61:5b:ab:af:c6:90:a8:13:0e:34:23:b8:99:68:
0a:bf:aa:72:c1:d3:ee:e0:32:12:59:ae:9b:df:c4:61:0a:f3:
b5:6a:96:51:1b:9d:05:80:50:69:3e:e2:c3:ae:af:0e:79:50:
b4:fa:82:22:bb:9c:f2:bb:80:f0:c3:5e:c9:92:bd:3e:1e:bd:
df:2f:af:a5:34:f0:fb:1a:d1:cf:91:25:37:14:41:64:f4:7a:
a1:9b:af:d5:43:92:4c:4d:e7:e2:f3:8d:e2:13:60:1d:c9:a2:
ba:ca:f1:a9:f8:58:45:75:a0:0c:b1:e6:6d:2a:ff:d4:18:a4:
a6:3e:35:89:14:63:a6:b5:0f:8f:ae:74:75:1c:58:e7:01:0c:
e9:68:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:47:42 2026 by rpki-client