
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json)
Hash identifier: d6ZBEQ2A71iRJ5Z0AaXyeZajkn6jsolPzxZdDUUFzrk=
Subject key identifier: 00:1B:4A:31:F7:29:49:FC:CD:BB:0A:72:E8:E9:D8:C4:E6:13:F4:CD
Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F
Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
Manifest number: 80
Signing time: Fri 17 Jul 2026 08:55:15 +0000
Manifest this update: Fri 17 Jul 2026 08:55:15 +0000
Manifest next update: Fri 24 Jul 2026 08:55:15 +0000
Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: JI4YDWg96PGlfJ1BrrlQpEqkwUZq0L4iqOTPNrLx9Fc=)
2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl
rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
Validity
Not Before: Jul 17 08:55:15 2026 GMT
Not After : Jul 24 08:55:15 2026 GMT
Subject: CN=6a59edf3-dd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:31:e8:51:91:2a:6d:c1:15:05:96:af:47:
1c:0a:52:5d:06:69:a4:f5:54:ca:c9:8b:23:12:e4:
2d:cb:37:64:e2:32:9a:d0:d5:dc:10:2d:00:e3:e2:
f4:97:d7:1f:d4:af:0f:23:f7:f1:a8:d4:11:c0:13:
aa:fa:0c:2e:14:35:74:32:35:e2:5d:ca:00:25:38:
db:92:a7:b9:8e:05:39:9d:ab:f8:af:80:85:49:2f:
1e:59:06:13:72:c4:ce:91:b5:55:8b:75:10:e2:3c:
28:06:28:2b:88:fe:a4:50:a2:9e:6a:1c:6b:36:47:
fb:cc:f1:80:78:18:78:e8:a6:dc:93:22:00:c1:98:
c2:be:97:0f:fa:dd:38:39:9b:c8:44:ea:18:68:df:
5d:9f:57:e1:7c:3c:64:7a:f9:cf:36:f9:ca:e0:50:
f1:9a:13:8a:cf:74:db:76:89:61:2a:42:00:3e:2d:
a9:35:70:0d:04:38:a1:a9:be:0f:fe:9d:7b:8f:55:
34:42:30:32:ca:56:04:10:95:ec:4a:38:85:d1:ec:
f8:47:2f:83:f0:cb:13:d6:b9:50:b4:68:b9:49:2d:
83:69:bc:bf:3f:6c:73:d5:06:00:ac:28:d9:ce:64:
26:2e:42:a3:1f:25:c3:0d:bd:7c:72:67:9b:2a:e5:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:4A:31:F7:29:49:FC:CD:BB:0A:72:E8:E9:D8:C4:E6:13:F4:CD
X509v3 Authority Key Identifier:
keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:4d:f4:a9:ae:45:2f:a3:4a:df:49:f4:6f:7b:9b:57:71:
d6:f0:33:c0:e3:cc:31:34:b2:f1:ee:2c:2a:75:9b:31:cd:3c:
94:2e:b0:07:01:83:06:1c:9f:5d:f4:38:c8:0c:35:fc:5e:5a:
fe:61:a8:28:e4:9d:65:d6:3e:df:20:b9:a6:26:f5:ef:bb:30:
66:7a:6f:f0:d3:ac:e2:6e:70:d9:df:61:9d:37:12:2e:eb:22:
48:a0:ce:e5:93:5a:3c:f6:15:2c:32:a2:58:5d:f9:29:ad:86:
24:b0:22:77:b3:e2:e9:80:ad:9a:ca:ba:80:ca:32:e5:25:15:
ca:a3:39:28:6a:bb:fd:1a:9c:ee:f5:6c:e9:b9:23:dd:fc:0d:
54:b9:74:a4:3f:2d:df:f5:48:04:6a:74:ef:c7:42:4e:c9:cd:
a1:e4:17:04:6d:a2:82:78:b0:18:96:b6:01:be:a7:e8:a9:42:
8c:d6:02:99:b3:3a:30:05:44:a1:c0:54:26:38:a7:e5:31:d6:
51:0d:0a:d7:05:d1:8c:31:10:73:9e:c2:73:c0:a1:df:ec:dd:
e8:83:59:26:55:09:f4:ae:62:33:24:10:96:5e:4b:82:f4:04:
6d:6c:52:64:16:c1:57:72:ba:f2:c9:1a:cb:40:33:ea:cc:2f:
d2:cf:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:09 2026 by rpki-client