
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json)
Hash identifier: i96Ff9YJhklcqmBFv7SLVkW50ij5xF7LU84xoiwwRJQ=
Subject key identifier: 64:E4:D9:1E:C2:EE:C8:3D:AA:53:78:04:F4:34:99:9F:FB:EA:8F:01
Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
Manifest number: 0247
Signing time: Thu 23 Jul 2026 03:37:11 +0000
Manifest this update: Thu 23 Jul 2026 03:37:10 +0000
Manifest next update: Thu 30 Jul 2026 03:37:10 +0000
Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: GMLxufvNqPX5uN3bnLuL5j2pJiUxoX3Rue5Y1/hH13w=)
2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: bKQoSxUBJ9euNCEo3/ipwyFIFEjBiwQ+4bPM4RSsjiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Validity
Not Before: Jul 23 03:37:10 2026 GMT
Not After : Jul 30 03:37:10 2026 GMT
Subject: CN=6a618c67-6f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:16:12:4c:9c:39:5d:c8:5a:1d:f9:19:f0:
b0:41:c1:45:d0:0c:a2:8e:7c:26:95:c3:78:74:5d:
d6:5b:04:f0:f9:c4:a0:a3:58:88:90:11:4b:c5:82:
b2:ef:c9:83:ea:41:fd:30:ae:ad:09:05:56:53:7d:
3e:3c:7e:5e:cf:6e:22:5a:ed:06:aa:7b:fd:9f:0b:
97:e2:f3:8a:cd:13:7f:ae:61:66:9f:eb:ae:58:36:
00:97:9d:50:ee:42:29:0a:79:2d:92:39:b4:68:0d:
0e:1c:57:ce:44:c9:e3:15:5a:5a:93:31:10:ae:09:
b1:2c:f0:1b:c8:7d:47:f0:ec:40:03:82:83:79:20:
d1:0c:fd:1c:e1:ff:7c:1d:c3:37:96:74:ed:05:a4:
5e:3a:99:58:92:a4:1f:69:12:ca:4f:8b:bb:b4:fd:
0c:c8:ef:b7:93:14:1d:8d:8b:74:bf:db:e7:81:a2:
c9:fd:d3:eb:7e:ad:fa:de:aa:3b:84:fc:34:87:0f:
a9:77:92:77:1b:0d:ec:eb:aa:1d:14:28:1f:b8:a9:
56:43:27:b4:0f:c2:3e:92:97:56:0b:c1:f4:44:17:
93:31:a6:68:33:fb:e2:5a:15:20:83:ce:90:e4:87:
30:c0:8d:91:ae:b0:5e:6d:f5:67:88:d7:74:a5:ba:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:D9:1E:C2:EE:C8:3D:AA:53:78:04:F4:34:99:9F:FB:EA:8F:01
X509v3 Authority Key Identifier:
keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:d5:22:de:a6:05:d0:5c:d8:8a:20:73:b0:8d:c0:ff:ba:d2:
37:28:66:b7:78:76:1d:99:49:4f:0c:cf:2c:2f:1f:e1:fe:8c:
b5:64:ad:6d:f5:ad:12:06:d5:7d:9c:04:21:d4:cd:e2:87:24:
34:a4:b5:5a:5b:e2:e1:7e:97:d7:34:74:a8:38:6d:a9:21:58:
ac:cf:5d:f5:3e:0b:c8:8b:57:66:77:6b:5a:83:ea:ab:5d:2c:
56:41:c6:62:8a:b2:2b:a9:97:c4:93:cc:8f:f6:84:a2:ec:97:
6b:5c:ad:e9:d9:10:f4:29:90:ef:ca:8a:27:3a:0c:5a:53:38:
f1:0d:93:c2:20:c0:e0:11:21:65:6a:59:77:aa:6b:0e:ef:86:
1f:9d:fb:60:38:3c:97:5c:80:af:3a:67:6f:9a:be:40:c3:04:
39:ce:9c:6d:d3:86:a5:e0:60:1d:bb:23:d1:d8:28:a1:cf:eb:
7d:12:d4:9f:ce:52:1f:d7:99:e3:c6:62:8c:da:02:d9:89:7d:
98:6d:29:b9:25:69:98:3a:ac:64:06:2b:1a:d5:28:33:e9:43:
dd:ca:52:b5:00:1c:84:1a:da:6a:16:7e:4b:34:24:c8:02:f6:
b9:96:86:94:53:44:27:bb:f8:00:c5:58:7b:f5:26:ac:44:16:
47:22:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:04 2026 by rpki-client