
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json)
Hash identifier: T6Zxxw0+f3uPIKeF4ONW95RJmVT6yzd3kT9aFYhaWCA=
Subject key identifier: 8D:80:49:37:A3:88:52:7A:95:99:BB:46:6E:43:E5:2D:A6:15:1A:1F
Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
Manifest number: 0278
Signing time: Wed 23 Sep 2026 01:46:53 +0000
Manifest this update: Wed 23 Sep 2026 01:46:52 +0000
Manifest next update: Wed 30 Sep 2026 01:46:52 +0000
Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: uuYW0QxSStX2DMCRb2WtK39nWM7s/bdTCzYiZlv2xB4=)
2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: evrrp35v+kEqYtlZi8zcxreXxzWFEB8bQkw/fkPA/3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Validity
Not Before: Sep 23 01:46:52 2026 GMT
Not After : Sep 30 01:46:52 2026 GMT
Subject: CN=6ab32f8c-2934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:35:12:12:c7:74:5b:2b:57:04:4a:e0:f1:
86:4c:b3:ee:a0:9a:ea:bb:81:61:43:cd:d5:f5:02:
b6:06:94:ff:d3:07:26:b9:97:3a:50:82:17:cf:a9:
3a:45:8d:96:7c:82:5a:94:59:c8:c4:35:12:ed:18:
0d:d4:43:7a:e0:be:65:c4:55:b1:42:7b:92:7e:9b:
d8:df:32:f0:23:72:0d:ae:c6:5b:d5:63:54:91:44:
cd:74:35:f8:9c:66:ea:1f:09:a5:5b:0b:2c:95:b9:
c9:7a:0c:92:6c:32:d0:a9:df:88:19:55:6b:43:36:
63:e7:04:3f:af:9e:1d:93:78:fa:3f:69:de:91:55:
e7:d4:10:b4:2d:6e:68:ee:d0:52:b5:4c:9a:db:2c:
e8:99:b7:3e:43:d6:11:5c:3c:02:ee:09:5c:0f:74:
54:50:24:fe:a2:ec:7e:49:10:82:67:db:5e:5b:5e:
ed:d4:f3:60:cd:6b:36:2a:d8:ab:a8:90:04:d2:b3:
62:c6:c4:d7:bd:e3:d7:52:91:d6:89:3d:95:c7:d7:
60:50:38:05:a2:3a:72:41:d6:c7:3a:6d:13:41:c5:
e2:5f:f2:19:ef:e2:5e:92:69:0c:97:c8:42:97:9b:
e5:b2:c6:82:e3:01:8c:91:54:85:14:0d:e1:3a:fa:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:49:37:A3:88:52:7A:95:99:BB:46:6E:43:E5:2D:A6:15:1A:1F
X509v3 Authority Key Identifier:
keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f9:25:e4:be:44:3a:29:d8:b0:b5:5d:6b:28:b9:8e:98:d1:
96:49:b4:98:75:c6:c4:4a:8b:53:91:3e:f1:74:88:3d:0b:b6:
f6:e7:7d:c6:a4:4f:de:6d:3f:da:90:ba:d2:b3:7b:67:ac:3c:
57:ff:e6:11:ae:0b:1a:00:c5:b5:fa:59:32:aa:d8:ab:14:be:
10:33:be:9e:6a:de:9c:51:e5:54:52:25:78:41:26:50:b1:81:
32:d6:95:b2:bf:3b:17:09:c6:f8:3c:77:2d:d1:16:1f:13:8a:
e4:f7:01:cd:6b:4b:88:1d:c3:6e:3c:40:70:e1:fe:b5:1d:b6:
53:68:cf:11:3f:21:b0:e4:8f:07:fd:40:d6:67:86:ce:45:35:
66:95:66:50:de:ff:71:7c:f0:e9:06:03:38:45:3e:df:03:b6:
62:c7:e8:82:44:1f:6c:13:82:6c:ea:09:8c:db:e8:7b:02:f4:
59:01:b5:3c:54:ed:d2:8b:d3:3d:d7:df:8f:d8:7a:6f:6a:3d:
72:c9:9d:44:4f:e7:97:d3:67:c9:8c:5e:6b:22:82:f0:88:90:
a2:61:91:22:3e:28:76:15:f7:a1:69:98:11:2d:37:98:fd:f1:
88:68:81:8b:ac:c0:1e:4a:49:d3:ae:dc:67:6d:8e:07:c6:9f:
03:ba:b3:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1
MTE0RDAzNjAwHhcNMjYwOTIzMDE0NjUyWhcNMjYwOTMwMDE0NjUyWjAYMRYwFAYD
VQQDEw02YWIzMmY4Yy0yOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkTI1EhLHdFsrVwRK4PGGTLPuoJrqu4FhQ83V9QK2BpT/0wcmuZc6UIIXz6k6
RY2WfIJalFnIxDUS7RgN1EN64L5lxFWxQnuSfpvY3zLwI3INrsZb1WNUkUTNdDX4
nGbqHwmlWwsslbnJegySbDLQqd+IGVVrQzZj5wQ/r54dk3j6P2nekVXn1BC0LW5o
7tBStUya2yzombc+Q9YRXDwC7glcD3RUUCT+oux+SRCCZ9teW17t1PNgzWs2Ktir
qJAE0rNixsTXvePXUpHWiT2Vx9dgUDgFojpyQdbHOm0TQcXiX/IZ7+JekmkMl8hC
l5vlssaC4wGMkVSFFA3hOvrM+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2ASTej
iFJ6lZm7Rm5D5S2mFRofMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE
QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz
R19sMzR4RnZXQjlSRk5BMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANvkl5L5EOinYsLVdayi5jpjRlkm0mHXGxEqLU5E+8XSIPQu29ud9xqRP3m0/
2pC60rN7Z6w8V//mEa4LGgDFtfpZMqrYqxS+EDO+nmrenFHlVFIleEEmULGBMtaV
sr87FwnG+Dx3LdEWHxOK5PcBzWtLiB3DbjxAcOH+tR22U2jPET8hsOSPB/1A1meG
zkU1ZpVmUN7/cXzw6QYDOEU+3wO2YsfogkQfbBOCbOoJjNvoewL0WQG1PFTt0ovT
Pdffj9h6b2o9csmdRE/nl9NnyYxeayKC8IiQomGRIj4odhX3oWmYES03mP3xiGiB
i6zAHkpJ067cZ22OB8afA7qzjA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:02:54 2026 by rpki-client