
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json)
Hash identifier: mK8aXactCoRvFdgyTD32Is1Q5TIiNSjrJsAiLkjlDiE=
Subject key identifier: 43:B0:F5:58:D4:E6:B1:7A:B5:4C:C2:75:4C:F7:F6:97:B2:C4:80:2B
Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Certificate serial: 059C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
Manifest number: 0593
Signing time: Sat 26 Sep 2026 23:18:06 +0000
Manifest this update: Sat 26 Sep 2026 23:18:05 +0000
Manifest next update: Sat 03 Oct 2026 23:18:05 +0000
Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: 6s/97w85FE0Wteq4BYGkFBUR1zdj/fKPPGZlSLa+WUA=)
2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: IciT28SUjRQ0I2gdini8FnT61/04yJg06IILVj5+2rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Validity
Not Before: Sep 26 23:18:05 2026 GMT
Not After : Oct 3 23:18:05 2026 GMT
Subject: CN=6ab852ae-f2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:a1:42:98:c3:89:3b:16:29:1a:88:9b:02:
b4:80:a5:c0:c4:1c:78:97:bb:a7:55:63:d2:cc:a8:
46:f7:90:48:41:65:d2:16:71:d9:06:14:04:7a:2c:
2a:11:e9:29:6b:2a:c4:4b:7c:3e:eb:aa:d8:d1:b2:
d1:44:ed:68:2b:69:07:5d:de:77:ea:55:ff:ce:db:
d7:34:08:b0:08:9c:0c:67:4e:f5:ce:74:69:87:dd:
bf:79:fa:a5:fa:37:82:a4:ae:41:25:f3:1d:12:10:
bb:69:19:96:5d:70:50:8e:a0:89:ad:41:24:d0:d5:
4e:ca:7a:04:8c:ca:76:cd:8f:89:ba:54:ad:8b:90:
6a:72:59:04:cb:2c:98:a8:5f:d1:17:3a:ba:0e:ea:
5d:39:e3:a2:3e:80:6b:61:f8:63:1e:ed:3d:2c:4e:
57:89:55:7e:f5:89:07:2c:b0:1f:07:22:f8:74:51:
cb:5d:4d:d7:7a:9a:df:19:6b:ca:18:b2:09:ff:1e:
b2:be:50:ff:6a:e6:63:73:03:7e:ae:c1:cf:11:fc:
5b:a8:f2:b3:59:87:af:f0:28:21:a3:93:cb:ce:ec:
3b:54:1a:cc:87:6a:18:64:df:63:10:06:ea:8f:da:
20:9d:cb:44:87:f2:7f:ec:85:26:88:95:5f:18:b3:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:F5:58:D4:E6:B1:7A:B5:4C:C2:75:4C:F7:F6:97:B2:C4:80:2B
X509v3 Authority Key Identifier:
keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3a:37:11:1a:ec:31:bc:89:e8:25:80:62:88:a6:cc:95:db:
1c:2a:c3:f4:7c:43:78:d3:28:c4:03:2d:66:3a:30:28:dc:fb:
4a:14:75:38:02:37:91:79:e8:87:df:43:59:6c:15:2d:99:8a:
5b:c9:e4:5a:a7:50:bd:df:56:05:52:a8:b4:b9:fa:da:03:5d:
92:8c:d0:f7:ad:15:e2:be:86:43:56:8c:72:a9:23:b1:85:cf:
71:2f:71:52:5f:c5:33:54:2d:c6:f9:08:e9:10:6d:83:a8:81:
36:fc:a8:a0:af:0c:2c:8a:9c:1a:f5:e1:ee:02:50:52:3d:32:
32:39:3b:62:03:d4:07:88:7a:6f:db:b4:77:74:ca:f2:ab:7f:
bc:76:85:87:46:d0:4a:ef:70:2d:5e:01:17:4c:fb:fb:49:04:
4a:33:39:2f:bd:fa:63:8d:5f:cb:b1:65:3e:db:52:4b:7e:7d:
7a:0f:3a:ce:9b:3a:7d:60:30:5d:9b:80:ad:48:d1:fb:e1:54:
88:b8:90:6a:f7:31:68:49:2d:31:1a:e9:7a:3b:60:68:f7:90:
5b:6b:3b:75:4e:48:ed:a2:5e:f1:97:25:94:d6:e7:b8:f1:36:
38:5f:97:5c:21:b2:27:ef:aa:ad:ff:e5:62:2f:d5:08:4d:ab:
61:b8:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:26:05 2026 by rpki-client