
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
File: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft (raw, json)
Hash identifier: Rso01VprFaq6cRlyHSiC1RpA2ru5zVRf2PlfNBDipa8=
Subject key identifier: F2:C1:C0:59:FC:09:19:EF:1C:EA:56:CE:E0:84:A8:C4:85:C5:DF:8E
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Certificate issuer: /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
Manifest number: 63
Signing time: Tue 13 Oct 2026 07:02:20 +0000
Manifest this update: Tue 13 Oct 2026 07:02:20 +0000
Manifest next update: Tue 20 Oct 2026 07:02:20 +0000
Files and hashes: 1: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl (hash: pGYFieBPHp4k8fixZNXMObiwm3veuQ5fXWxcf+Q3Jic=)
2: 45BF99708C5811F1A357FB3A5A11F970.roa (hash: RPzJA2BPqoay2JqVAuv3o77KmWTYC1VndN9GobK8Jt0=)
3: 981FF46892AB11F1A333A10B5511F970.roa (hash: Do/lS6kWKqq9Tkqvs74KbgaQXctOq8lqX9YjBdlQv60=)
4: B5F64DA092AD11F19B27DCBA5511F970.roa (hash: 9vPbPCkRbn7Hj/8z6ysXrTD7Tz1UoR8uqP+/G8fif54=)
5: 98B1AB6092AB11F1A333A10B5511F970.roa (hash: JKQHgGN19BzIR/HQmxNIMJHDKXETup4uH2VSXW31aUA=)
6: 4302A4EA9AFC11F1B7F600875911F970.roa (hash: Qax2zyC3D4kXwNYbSFHJRFkXJvaTsOR7hCX7dVLIwPM=)
7: 979C13E692AB11F1A333A10B5511F970.roa (hash: +lJ8fH0HCSF5VU80NqbfpoZtmXjsieAi+koysdMKtPA=)
8: 9704608292AB11F1A333A10B5511F970.roa (hash: d666AZtciD9TC0SffMpGXXguyTM8DDzjhiraFNQTqTA=)
9: 6F13D28C800011F19BCC74A193A30FBC.roa (hash: b26oTHcM2szwGRCV9xOFRjDwz8UHReqIJKERGGoXCKg=)
10: B5D64EB28AB811F1B074B7205811F970.roa (hash: qKd5afymQZlM/cId8LRp1Y4TdmnDpuG0QiI5DBVe0Uo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Validity
Not Before: Oct 13 07:02:20 2026 GMT
Not After : Oct 20 07:02:20 2026 GMT
Subject: CN=6acdd77c-cd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:5e:1c:d3:69:6b:f1:bf:56:fd:b4:7c:f7:
d2:2d:a7:bd:3d:e1:5d:94:d8:03:ed:63:46:e4:7b:
10:d2:2a:e9:35:1f:0d:27:eb:e9:ba:9d:10:7e:0f:
10:19:cb:a6:4f:24:f0:3d:d1:9e:c9:2c:2f:e0:ce:
a7:e3:c6:41:5d:ba:86:79:9a:32:5b:e5:a8:e1:ba:
87:8f:90:3d:51:56:f1:18:67:ee:91:5c:11:87:3a:
e4:4d:29:1c:fd:2f:5e:a3:e5:2a:9a:88:94:8d:85:
57:0b:3a:cf:15:3f:f3:0e:b3:41:60:ab:a4:58:69:
9c:be:7a:9a:08:e7:bd:66:02:5a:39:0e:f1:ae:ec:
1e:9b:90:a4:ef:6b:bf:3a:2c:3f:0b:6f:a3:2c:5a:
e2:c0:fb:84:4f:87:fd:1a:f2:16:12:8c:0f:b4:9b:
d4:2b:bb:86:77:ad:26:97:26:1e:39:8e:7f:c2:83:
7c:56:f5:ab:f4:58:aa:1e:8e:92:33:c5:d3:0a:2f:
a2:b6:40:5b:85:87:30:cf:2b:c8:cb:42:55:df:9a:
9e:1f:81:62:3d:c9:27:83:8e:82:5c:76:a5:e5:a6:
e3:e3:b5:c2:87:fe:c0:f0:5a:0c:90:bb:8c:2d:fd:
53:2f:c8:67:d2:e7:e5:43:48:31:0a:da:a8:12:71:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:C0:59:FC:09:19:EF:1C:EA:56:CE:E0:84:A8:C4:85:C5:DF:8E
X509v3 Authority Key Identifier:
keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:1a:4b:5c:bd:b3:07:23:63:76:64:e1:46:b5:f4:65:81:
6c:99:b9:db:c4:0a:dd:f8:a9:56:d6:be:c7:66:3b:99:66:9f:
a7:ad:bb:30:ae:a8:20:dc:92:b2:5f:a3:15:29:91:d3:fd:b4:
60:88:00:99:f6:40:e1:1f:fc:92:7a:48:47:ee:14:96:45:87:
0f:66:7f:0e:48:bb:a8:fe:9d:26:6c:1a:65:81:0d:25:8c:9d:
4e:db:ab:59:b7:a1:b6:33:4c:20:25:3a:24:a6:be:3b:06:48:
48:70:9d:c0:95:d6:e0:90:e2:48:f7:fe:b8:a2:49:f6:6e:aa:
61:92:32:04:c1:0c:6a:6a:87:9f:e8:83:50:d8:8b:c7:44:a8:
80:81:7e:d3:97:23:2b:69:61:77:8e:cf:a6:8b:e2:97:6d:d6:
e2:74:3d:9b:bf:46:c8:e8:73:cf:fb:89:90:8e:c2:12:30:9c:
b3:96:75:d9:89:a6:a0:04:a4:b8:33:6e:bb:b6:20:bb:cf:ac:
c8:1f:ba:7d:ee:f5:1f:2a:ae:3d:90:33:95:6e:29:97:f2:a5:
16:58:65:04:93:24:c1:e6:4f:5f:38:a8:cb:61:ce:03:04:aa:
8a:18:8e:47:42:e3:0a:b0:d9:85:4b:89:34:23:15:ef:0d:f0:
67:fd:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:51:09 2026 by rpki-client