
$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
File: 83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json)
Hash identifier: C2GFnm99LbIAUdp79LzWyYXgvJagvc6cA5qjVLq5Et0=
Subject key identifier: 20:B2:9E:53:E1:9A:F5:E6:69:2F:17:9C:B4:C2:97:FC:20:0B:9B:84
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
Manifest number: DC
Signing time: Thu 23 Jul 2026 08:26:25 +0000
Manifest this update: Thu 23 Jul 2026 08:26:25 +0000
Manifest next update: Thu 30 Jul 2026 08:26:25 +0000
Files and hashes: 1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: rwSA07wwQbXUiwbrT4k6MOxWy3pIrbjKqO8sXxoQ/wg=)
2: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: jNxDHr6BPCWYOsHZin0NsVI+cf+zItqnlC9EufbwEok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Validity
Not Before: Jul 23 08:26:25 2026 GMT
Not After : Jul 30 08:26:25 2026 GMT
Subject: CN=6a61d031-ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:22:73:5b:db:71:2f:40:82:ca:a5:45:97:
8a:c4:c9:66:fe:72:74:58:1e:49:b9:91:97:c6:4a:
21:72:68:a5:cb:b8:fe:00:35:d3:85:89:76:33:b3:
04:8b:28:8f:3e:09:83:e6:51:76:d0:24:f3:c9:8a:
cf:8b:90:7b:a3:8d:48:3d:60:86:c3:de:4f:38:fd:
26:f4:79:a2:dd:ea:6f:b4:e5:aa:78:fb:cd:85:5b:
10:9b:55:91:fc:58:11:d0:5b:e4:e0:2c:72:33:a8:
f8:0a:cc:0d:bc:4b:4e:b7:a4:07:88:ee:42:f8:43:
db:5c:f4:13:a3:df:d8:91:dc:1e:9a:4a:b9:7f:74:
cc:1f:b9:3c:86:27:de:44:85:45:26:a3:4f:17:a5:
d2:f6:a5:a0:fb:8d:df:4f:2e:e0:5d:da:36:a1:51:
8f:84:71:a3:cf:c8:35:d8:c2:99:03:69:44:30:ed:
6f:90:71:f4:8c:cf:bd:27:d1:28:0a:25:72:3a:17:
83:31:11:07:48:ac:4a:73:07:22:12:f7:da:4c:01:
8a:48:5b:dc:99:b5:80:10:09:49:16:a2:a7:26:18:
96:00:7b:48:91:b7:fd:3e:0e:6f:ec:f8:88:b4:d4:
50:26:52:93:32:ef:fb:8f:51:47:59:20:d6:a1:8a:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:9E:53:E1:9A:F5:E6:69:2F:17:9C:B4:C2:97:FC:20:0B:9B:84
X509v3 Authority Key Identifier:
keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a4:3e:83:83:fa:71:64:47:ea:73:1c:3c:33:ac:51:ae:90:
b1:02:a9:9d:bd:73:29:d9:c9:e0:17:a7:4b:79:f5:10:60:34:
a5:a4:55:68:09:e4:9c:8b:17:d6:72:84:77:37:69:44:58:57:
2e:4b:30:f8:2c:ab:54:12:3e:e1:8f:0c:57:b7:27:42:18:84:
52:06:d7:29:04:81:43:0d:be:9e:d3:b9:ce:c9:58:c0:6f:ae:
bb:02:7f:65:eb:d0:0e:59:56:b2:a0:5c:cf:9e:53:98:2a:7c:
7c:7f:a6:89:fd:9e:40:ad:42:4a:64:4c:45:e1:73:ff:9c:d0:
7e:1c:b3:d3:af:5b:63:63:f0:ab:d3:a4:f9:8f:a8:76:8c:70:
6c:65:e2:81:6b:0d:95:ea:30:47:09:e9:e7:b1:51:db:4c:86:
33:3c:69:26:93:a7:7b:33:6f:40:63:22:95:67:65:1b:09:29:
e9:36:4e:f3:75:77:a1:e0:ab:d0:91:39:8c:0f:96:a9:8a:6d:
1a:30:32:ae:c5:78:7d:a3:b2:ed:de:9e:27:f3:de:22:88:b6:
8f:26:3e:31:00:18:d0:07:4c:70:ed:34:8b:dd:81:63:75:65:
a7:89:83:e2:bd:6b:c2:55:59:06:96:33:7c:6d:c2:07:ca:af:
d4:c4:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:40 2026 by rpki-client