
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json)
Hash identifier: Cs3gqyUSmU0DRJKKqiAW2aQAQt/2vhr3amL/eBc/i30=
Subject key identifier: E8:EE:26:3E:B2:D1:F0:3D:06:BB:A3:53:E4:1D:B3:58:28:6B:34:6A
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
Manifest number: 086F
Signing time: Wed 22 Jul 2026 21:19:56 +0000
Manifest this update: Wed 22 Jul 2026 21:19:55 +0000
Manifest next update: Wed 29 Jul 2026 21:19:55 +0000
Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: r//qZgv9jgdhJl3S9FqdY3w2ShkLPJh1fUOc22EoZ5g=)
2: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=)
3: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=)
4: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Validity
Not Before: Jul 22 21:19:55 2026 GMT
Not After : Jul 29 21:19:55 2026 GMT
Subject: CN=6a6133fc-6006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:48:06:ef:0c:9b:c9:bb:7b:b2:fd:6c:f7:
20:42:e7:1e:99:5b:68:0b:aa:b3:33:41:c7:58:0b:
62:99:d1:48:b1:1c:e9:e6:9c:8f:8b:45:12:db:32:
ca:eb:82:47:f2:39:f0:51:4c:6f:80:e0:3b:4b:90:
ab:62:c0:47:be:41:77:bc:99:73:fb:ef:d9:a7:ed:
e5:5a:27:a0:4c:3d:d5:34:03:68:3b:eb:76:d2:f4:
5d:23:11:35:d7:fe:4b:35:48:b4:3c:3b:d5:90:ed:
a6:a1:ce:72:77:e9:a4:22:0d:5f:30:f5:15:86:ef:
23:20:cd:e5:52:70:0b:79:d4:ed:c4:7d:48:e6:e4:
46:36:ea:df:e2:9c:f2:d6:df:21:6d:1a:06:78:a0:
55:d1:76:da:9c:8e:3c:17:16:ea:97:3e:cd:10:40:
3b:a0:e3:a5:d8:9b:93:38:87:ba:36:76:57:de:9c:
f2:3a:ad:1e:fa:c9:15:51:49:a0:dc:3b:6c:be:d6:
5e:ec:be:7c:87:9e:81:56:2b:e9:83:5c:b6:25:c8:
03:56:53:78:e0:68:43:c4:a8:cc:17:0c:0c:6d:18:
96:95:c8:80:51:33:79:9e:8b:00:87:38:11:ab:d4:
90:07:33:4c:a6:9d:ba:56:46:ee:7a:6a:ba:fe:87:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EE:26:3E:B2:D1:F0:3D:06:BB:A3:53:E4:1D:B3:58:28:6B:34:6A
X509v3 Authority Key Identifier:
keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a0:7f:ef:53:9e:2d:3c:2a:95:90:24:94:e6:84:d0:00:c5:
52:fa:3d:fe:a6:35:0c:72:48:bf:a3:fa:02:be:f8:24:8d:65:
52:e3:5b:b4:b7:0e:d3:56:16:3e:62:33:36:98:b9:68:46:4c:
93:a2:5e:f1:15:80:1d:62:95:f6:a6:a0:ca:7a:5e:6c:91:ab:
c9:67:1b:b8:a0:4e:50:c2:54:8d:62:90:35:11:8a:30:23:9b:
87:44:fb:8f:02:f3:30:be:a4:39:67:f5:2f:98:27:66:aa:64:
08:0d:46:ae:33:be:76:8d:7d:79:fe:bb:7c:a1:7f:e2:91:bc:
2c:ff:86:39:fc:91:a5:8f:87:52:1d:f0:67:9e:4f:e7:89:7a:
b4:da:89:6f:99:27:63:79:93:d1:9f:9f:e4:3e:18:af:b4:da:
73:d7:99:9e:14:6f:af:26:75:76:d2:2e:21:6d:e5:b5:65:bd:
61:46:75:97:a0:0b:0b:fb:56:44:b1:1e:1c:95:ef:61:4c:47:
df:35:b4:62:44:e0:fb:29:a5:b3:56:d5:c3:fa:6c:27:a0:30:
5e:ff:69:40:3a:a8:18:e4:a3:cf:b2:17:7a:6a:f1:f6:a4:d3:
62:2e:69:ae:2c:95:60:c6:4c:01:4f:69:2e:24:3e:c3:b0:c3:
0e:50:19:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0
MDhEQUQyOUMwHhcNMjYwNzIyMjExOTU1WhcNMjYwNzI5MjExOTU1WjAYMRYwFAYD
VQQDEw02YTYxMzNmYy02MDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3pIBu8Mm8m7e7L9bPcgQucemVtoC6qzM0HHWAtimdFIsRzp5pyPi0US2zLK
64JH8jnwUUxvgOA7S5CrYsBHvkF3vJlz++/Zp+3lWiegTD3VNANoO+t20vRdIxE1
1/5LNUi0PDvVkO2moc5yd+mkIg1fMPUVhu8jIM3lUnALedTtxH1I5uRGNurf4pzy
1t8hbRoGeKBV0XbanI48Fxbqlz7NEEA7oOOl2JuTOIe6NnZX3pzyOq0e+skVUUmg
3DtsvtZe7L58h56BVivpg1y2JcgDVlN44GhDxKjMFwwMbRiWlciAUTN5nosAhzgR
q9SQBzNMpp26Vkbuemq6/oduQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjuJj6y
0fA9BrujU+Qds1goazRqMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD
MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k
WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm6B/71OeLTwqlZAklOaE0ADFUvo9/qY1DHJIv6P6Ar74JI1lUuNbtLcO01YW
PmIzNpi5aEZMk6Je8RWAHWKV9qagynpebJGryWcbuKBOUMJUjWKQNRGKMCObh0T7
jwLzML6kOWf1L5gnZqpkCA1GrjO+do19ef67fKF/4pG8LP+GOfyRpY+HUh3wZ55P
54l6tNqJb5knY3mT0Z+f5D4Yr7Tac9eZnhRvryZ1dtIuIW3ltWW9YUZ1l6ALC/tW
RLEeHJXvYUxH3zW0YkTg+ymls1bVw/psJ6AwXv9pQDqoGOSjz7IXemrx9qTTYi5p
riyVYMZMAU9pLiQ+w7DDDlAZPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:11 2026 by rpki-client