
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json)
Hash identifier: uHzizw7Wtpmo+nwwbM2/DXviRtu1bXjiUO1Q8u+b2O8=
Subject key identifier: 2D:30:8B:8D:67:AF:92:1F:E3:CC:CF:0B:83:ED:1B:51:EC:1B:93:24
Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Certificate serial: 2250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
Manifest number: 2244
Signing time: Fri 24 Jul 2026 15:58:51 +0000
Manifest this update: Fri 24 Jul 2026 15:58:50 +0000
Manifest next update: Fri 31 Jul 2026 15:58:50 +0000
Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: aGRxyNzRSwpdI+ycguI0SFoSOr045hXqx5gFokNLpVw=)
2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: 42CVSUWYduLQVb9MG+B2vLMlfp0/6VbB2Jlt8i5PPHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8784 (0x2250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Validity
Not Before: Jul 24 15:58:50 2026 GMT
Not After : Jul 31 15:58:50 2026 GMT
Subject: CN=6a638bbb-2d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:be:19:cf:bb:41:de:25:22:ff:d9:20:37:
68:b2:46:07:7d:4d:b2:05:67:e1:80:2f:90:d5:80:
3e:a4:ca:0b:0d:3a:bc:c0:53:e9:db:b4:60:99:4a:
3d:35:dc:65:c2:b3:a8:1c:c2:55:75:3a:07:c3:09:
d2:e4:85:3a:51:b8:b9:20:3c:4f:85:25:c9:cb:7e:
cc:8a:7c:24:7f:7b:df:9c:6b:26:22:5d:3e:75:e6:
67:88:19:56:91:d8:87:79:b5:83:cb:a7:14:46:30:
4e:31:e7:d8:a5:84:e3:8e:ca:cd:32:e7:ba:2a:57:
df:ca:7a:92:9d:b0:96:e1:0b:4c:91:67:a5:72:a6:
a8:0f:8c:3e:ea:1d:0b:20:16:3c:59:5d:b8:bc:76:
50:20:3c:77:bd:b2:7a:0b:7f:86:04:04:f7:af:c1:
52:84:3d:fd:00:27:71:0b:f8:3d:c9:69:6a:cf:1b:
1f:c6:bb:cc:97:87:d5:42:36:ac:28:96:4b:3a:4d:
a7:0c:ba:c0:5c:93:ca:ac:61:90:c3:f4:3e:ba:08:
4b:bb:a9:b6:4a:06:98:8c:7a:51:c3:aa:49:05:61:
9b:58:9f:38:0e:29:8b:82:04:7c:06:bb:33:9e:35:
b0:fe:c9:bd:57:8b:0b:6b:4c:05:6c:c6:02:51:53:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:8B:8D:67:AF:92:1F:E3:CC:CF:0B:83:ED:1B:51:EC:1B:93:24
X509v3 Authority Key Identifier:
keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1d:6c:b5:c9:24:58:d6:17:f7:48:25:17:e6:64:c6:e2:9a:
c7:c2:29:35:bc:b0:cc:d9:ac:7e:18:e8:8d:e7:3f:86:08:5b:
a2:e1:cf:e0:cd:e0:72:7c:ef:0a:7d:39:d0:7b:37:4e:40:b1:
e1:32:b3:53:de:33:1d:9a:19:62:ac:fa:0f:db:cc:43:97:2f:
89:96:c9:15:86:f1:3a:08:91:d7:bb:35:76:8e:d1:90:2b:5d:
95:df:76:b1:3f:d5:a4:cb:60:1a:6d:2d:24:57:7d:54:75:e0:
34:dc:17:c4:ca:c2:60:2a:9b:27:6d:67:7f:62:9f:ce:dc:50:
2f:7a:42:80:cd:c2:32:87:51:88:10:7f:b2:94:b8:f0:53:a6:
81:19:1b:af:b9:3c:98:c6:29:44:c5:21:0f:cb:ee:f6:b6:81:
fe:9a:0a:85:fe:56:5e:3d:9c:58:a6:48:21:1a:ba:21:7e:d3:
53:7b:e0:f4:52:68:e8:cf:ba:78:7d:64:46:e4:90:0b:ca:d0:
3f:6f:42:94:3c:d9:18:39:74:45:eb:5f:5b:3d:6c:1f:be:91:
88:4e:d4:43:9e:d0:d9:6b:9e:0b:48:ba:2b:72:7c:5b:20:02:
3b:6c:9b:70:91:48:e4:08:bd:7b:e9:81:f4:9a:ac:37:94:93:
f4:37:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:48 2026 by rpki-client