
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json)
Hash identifier: YMlf7UbnZS7Yhk/dUA1UVjUCjNlts3siVGTZJ5OLVds=
Subject key identifier: D4:4B:E2:E4:A4:3C:F2:64:EA:F3:73:26:18:E8:26:85:80:CE:17:1B
Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
Manifest number: 0212
Signing time: Sun 11 Oct 2026 03:33:24 +0000
Manifest this update: Sun 11 Oct 2026 03:33:23 +0000
Manifest next update: Sun 18 Oct 2026 03:33:23 +0000
Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: 5OxsQfXMkiLwz85MMNGMfz9kJUXnw8rLFy4hzp2f2+k=)
2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: PdTF8JZAzZqkYsv5aYjwZSB0/7MTqhPMOhGlyT03h9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 03:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Validity
Not Before: Oct 11 03:33:23 2026 GMT
Not After : Oct 18 03:33:23 2026 GMT
Subject: CN=6acb0384-da9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:db:10:ae:0e:e1:c8:a5:ac:7b:28:2c:69:
ad:cd:73:29:b7:f4:9a:2b:5f:97:17:5f:68:1f:6c:
c0:54:6a:6f:34:99:d0:45:c3:7e:a5:be:5f:d7:60:
2b:6c:4c:19:a9:49:6c:d7:46:d4:e9:46:43:a2:e2:
88:35:9b:e7:c2:d3:6b:d7:d3:6d:d6:5d:6c:c9:6e:
dc:bd:34:f2:ff:12:13:18:e3:6e:f0:15:e8:99:96:
4d:0a:95:24:76:96:0b:e6:2a:e5:df:1a:db:f4:9f:
9e:7b:0e:c6:e0:5f:70:b0:83:57:fb:c9:12:c0:ea:
ff:20:89:bb:dd:6c:a7:ce:b3:fd:ba:d6:37:2a:5d:
17:69:72:b8:5f:0e:5f:9e:1e:3e:32:db:9d:2a:bb:
35:c6:87:2d:f9:89:e3:46:f3:c7:d8:14:f8:f1:86:
8a:78:fc:d1:b6:1c:94:13:c3:c3:e7:e2:4a:2c:f6:
12:ad:3e:2d:a4:da:6f:1f:12:00:54:ca:42:7e:dd:
08:22:e7:4b:1b:a6:b7:9a:2b:89:8e:5b:1c:84:cf:
e3:81:4e:4e:60:01:ce:47:89:dc:ab:8d:47:0d:be:
8d:0f:a6:ad:a1:c5:cd:7e:1b:3e:96:e5:10:a0:82:
ae:79:21:f5:dc:5f:3b:13:35:52:73:e8:e6:91:c7:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:E2:E4:A4:3C:F2:64:EA:F3:73:26:18:E8:26:85:80:CE:17:1B
X509v3 Authority Key Identifier:
keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:cf:2f:98:a5:62:b2:89:fc:d7:10:a3:6b:7b:00:32:af:c4:
e3:66:3a:54:96:f0:9e:dd:91:fa:c2:94:b2:2e:23:90:f2:26:
e7:d5:66:06:5e:fd:21:44:6e:b3:08:81:f2:3e:ac:0e:80:44:
dc:93:64:2d:e5:d1:cd:89:86:13:03:01:55:ab:14:6c:bc:3e:
ce:02:b2:f6:d7:9e:91:ef:01:f2:d1:51:af:9a:3e:36:a9:db:
7c:85:2c:83:3c:fa:8d:8b:3d:02:8f:84:1a:12:01:b3:3e:6e:
5f:5c:87:ce:58:56:87:84:76:06:c6:63:f8:7a:50:0f:64:a3:
55:08:8a:ea:97:eb:38:2f:bb:f1:6c:35:5d:03:51:2b:d8:e2:
3b:1a:22:b8:70:e1:5e:40:8d:36:3b:eb:f4:60:22:23:71:b1:
df:c7:30:d7:e4:98:00:45:e7:b9:e4:44:ad:94:2a:35:10:17:
0d:33:b2:1e:53:ae:1e:44:9b:69:c2:e3:f5:26:74:1f:48:68:
1d:6b:b1:6d:da:b4:03:50:21:d9:8b:87:5b:32:5d:4f:e8:59:
d4:e6:d1:bb:a8:5b:ec:e7:6f:2c:3f:c5:81:05:c9:8a:e0:c6:
29:d8:73:b1:ab:e1:29:88:d8:5a:f8:ad:c9:68:be:55:47:9e:
9e:d2:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:54:11 2026 by rpki-client