
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json)
Hash identifier: 6tKMcPwqsFptzERC1lp6BJ39TUrrbWOEfxROQ6Q488g=
Subject key identifier: 12:8B:2F:5C:CB:93:C9:99:29:2C:B4:BD:23:8D:03:5C:86:73:82:C0
Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
Manifest number: 65
Signing time: Thu 23 Jul 2026 10:04:18 +0000
Manifest this update: Thu 23 Jul 2026 10:04:17 +0000
Manifest next update: Thu 30 Jul 2026 10:04:17 +0000
Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: FmRmPVtNYp1GSmHAMDjYdFZliDy26rDnP788Ubfzg3w=)
2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=)
3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Validity
Not Before: Jul 23 10:04:17 2026 GMT
Not After : Jul 30 10:04:17 2026 GMT
Subject: CN=6a61e722-ac01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:63:22:37:c0:ca:3f:30:87:fd:9d:7a:33:
6e:e1:2e:10:60:4d:0d:10:6d:d7:a3:ca:c2:53:10:
62:4a:46:34:12:c4:f1:a5:13:ae:b9:54:59:77:fb:
65:1a:91:76:7e:b4:2b:00:b9:0c:b4:43:1c:88:9c:
e7:82:63:b9:ce:08:52:f2:2a:9f:70:64:c8:95:76:
15:04:f8:bb:ca:f3:c6:9c:d7:75:f8:1c:d2:26:36:
86:d7:2f:b0:58:2e:b7:ef:77:be:35:8a:d3:03:46:
20:6e:d1:31:23:6d:14:ac:80:ce:b5:95:b6:6b:44:
7c:a9:d4:cc:90:f7:21:a2:39:0f:85:58:03:5f:d1:
52:f3:9b:ac:3d:a0:07:c1:dc:f2:fb:b7:d5:6f:ed:
22:ed:c2:ef:57:3a:ef:19:e8:2f:d8:6e:15:33:88:
e6:9a:37:0d:f8:90:21:5c:d7:e1:a6:74:af:2e:d4:
6a:a9:f2:91:64:5d:58:c0:71:ff:df:28:14:93:54:
42:2b:ff:c7:b7:3e:c1:31:66:da:eb:c1:e6:12:40:
2f:d1:02:8e:11:d8:f7:50:49:a0:ed:4c:c4:b7:7a:
57:26:a4:15:8d:22:85:23:7c:d8:7b:79:ed:eb:ab:
3c:7f:50:9d:9c:50:d8:2d:96:2f:ad:48:2b:eb:11:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:2F:5C:CB:93:C9:99:29:2C:B4:BD:23:8D:03:5C:86:73:82:C0
X509v3 Authority Key Identifier:
keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:87:88:c3:68:d1:c7:7d:2c:7b:50:52:d6:83:4e:fc:69:1b:
e3:18:2b:aa:f0:80:c3:1b:cf:7f:d3:e5:16:bf:19:77:d5:f2:
0b:b5:89:08:97:3d:a2:f9:26:7d:20:5b:8e:b9:89:30:f6:f7:
f4:b4:91:32:41:dc:d0:75:88:95:1b:4c:10:b8:8f:5c:f3:80:
47:af:d4:df:f3:ad:e4:48:9f:20:7f:9a:1c:d7:6e:37:16:3d:
93:84:bc:26:dd:9f:5c:af:8f:ea:29:75:0a:ca:85:9d:6e:e2:
94:a2:71:5c:d0:a3:9b:2f:ef:19:79:73:bf:67:54:da:6a:3e:
37:bb:74:02:89:52:04:c2:0b:88:39:d5:ba:5c:06:68:d5:35:
51:65:cc:7f:ad:bd:86:b7:66:e0:f8:94:c8:30:aa:81:f9:23:
1d:ae:7f:49:0a:76:97:45:05:ac:3b:db:3d:b8:8e:29:b3:ce:
f8:34:ca:0b:7d:f2:0c:ea:95:52:13:d2:d8:11:17:c4:99:ea:
a5:42:bf:60:2d:91:73:a4:a5:77:41:2d:fe:49:10:f1:0f:9b:
7a:73:ce:49:19:2b:4b:4d:90:cb:f1:65:f8:c4:40:da:46:51:
44:e6:a4:f0:15:5c:7d:d2:66:05:24:f7:65:df:b1:80:2b:e1:
b7:b4:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:43 2026 by rpki-client