
$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
File: 8GBCLBdcmuWu18weKBDySX-NlZo.mft (raw, json)
Hash identifier: j62eL38S34rcyytyMsnQLhXPmpFoQIEuyJWpwNUHW6w=
Subject key identifier: B2:FB:4C:10:55:AA:94:C0:70:FF:0D:EC:A4:91:E0:07:BE:37:86:E6
Authority key identifier: F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A
Certificate issuer: /CN=A91491CC/serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
Manifest number: 9B
Signing time: Thu 23 Jul 2026 09:12:14 +0000
Manifest this update: Thu 23 Jul 2026 09:12:13 +0000
Manifest next update: Thu 30 Jul 2026 09:12:13 +0000
Files and hashes: 1: 8GBCLBdcmuWu18weKBDySX-NlZo.crl (hash: Q3yObK0/WuZYn0O1wJHKciJemljOsDBGzfjNugj1nb0=)
2: 3283B8BE9A0F11F0BC057E7DC4F9AE02.roa (hash: f3+asU1Hkvad4uoy4U98nCRF8Ct9CSMeVLGoRoOBm5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl
rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91491CC, serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A
Validity
Not Before: Jul 23 09:12:13 2026 GMT
Not After : Jul 30 09:12:13 2026 GMT
Subject: CN=6a61daee-68ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:ad:08:62:05:62:88:1a:78:69:c1:f9:2b:
b2:f5:61:9f:67:0a:dd:71:6f:7b:ba:e3:84:12:12:
ff:c7:3b:bf:cb:92:b9:ba:ec:a4:1a:08:86:11:cc:
d4:de:eb:c4:79:5f:71:e8:4d:cf:05:60:73:cf:ce:
bc:c0:12:72:7c:1a:98:2d:e3:95:50:9f:17:8f:59:
6f:9d:89:4b:4e:b5:4b:ca:01:28:67:a6:1c:db:5e:
f7:d5:20:67:8e:11:84:94:e1:07:a7:e8:06:ad:7c:
22:ea:78:ea:ee:a4:c8:a5:90:b2:81:f6:20:b2:2c:
68:68:49:a2:cf:04:4c:d1:e5:21:61:f4:48:2d:7d:
9f:48:c5:a2:68:f1:d2:f6:d8:39:2a:9d:1c:cb:e1:
52:97:81:0f:df:aa:7e:a8:09:d3:ba:9c:c9:aa:53:
24:fc:fc:8a:ed:29:13:35:8b:3e:0e:9a:ba:8e:c4:
c4:e1:ac:12:47:86:f8:a6:f0:d7:b6:d9:7a:49:db:
f8:90:35:45:b6:48:99:b9:c5:4c:54:b2:4b:7f:7b:
c3:78:db:d9:57:dd:44:fe:6f:3c:07:eb:96:15:5a:
b8:c1:71:0e:c3:48:93:ff:01:14:c6:f1:74:5c:02:
34:2e:10:e3:e1:e2:e5:db:76:92:09:8c:25:a0:9b:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:4C:10:55:AA:94:C0:70:FF:0D:EC:A4:91:E0:07:BE:37:86:E6
X509v3 Authority Key Identifier:
keyid:F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:c9:94:5b:c8:19:18:8c:5f:e3:c6:f2:f8:d1:d9:67:02:
30:ed:fe:75:f5:3e:df:76:82:66:01:db:78:9b:3e:81:2e:ed:
9a:81:1f:b9:98:c5:92:a1:ed:ab:2c:78:42:63:16:5c:70:61:
08:b5:d1:8f:39:16:cb:6e:84:7a:81:60:4b:49:f1:fc:ff:6b:
bd:71:db:f1:fb:a7:b6:51:d7:6b:ad:e8:63:14:20:41:88:56:
db:23:6a:19:77:a3:31:bc:47:cf:15:0a:72:98:6d:b4:e5:46:
85:e6:f0:9d:04:8f:65:0b:90:07:5c:55:47:67:21:67:f1:0a:
ab:64:c8:4e:1f:9e:fd:e7:6f:96:53:3c:73:d8:74:b6:b6:4d:
af:8e:ad:9d:c2:d1:52:40:69:d2:d0:5b:c2:21:e8:f5:03:bd:
19:d4:a6:49:77:b4:6b:7c:00:07:8f:3b:e9:9a:90:0e:d0:69:
0f:84:66:42:a4:f7:86:95:ca:06:89:13:c3:f7:f7:a7:ce:e8:
de:b6:fc:63:d0:0c:12:1c:74:db:87:e3:71:63:09:95:49:f0:
ee:f8:7d:03:98:c7:38:9c:d0:66:57:aa:02:d3:2d:fd:30:d2:
df:40:12:0d:4b:0b:e6:6a:c0:57:9d:7c:1e:df:94:6e:21:a5:
22:e6:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:36 2026 by rpki-client