
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
File: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json)
Hash identifier: +fius8LjWhxsNkL23EQRHQ4EqAyQZA3LrjWSduqKd90=
Subject key identifier: 8A:A5:05:93:AD:03:AB:C3:1E:46:22:64:98:8B:82:E7:68:6F:0C:D6
Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
Certificate issuer: /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Certificate serial: 0898
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
Manifest number: 088C
Signing time: Wed 22 Jul 2026 21:09:43 +0000
Manifest this update: Wed 22 Jul 2026 21:09:43 +0000
Manifest next update: Wed 29 Jul 2026 21:09:43 +0000
Files and hashes: 1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: LO1H3udyyTF/DKxhhbOZv2y/EH+2Jc49Rj6zn/0/0XQ=)
2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: pEoVeSKvZWCj0YeLOAFbn4+nyrnm4dpfDhs+6j8mLhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Validity
Not Before: Jul 22 21:09:43 2026 GMT
Not After : Jul 29 21:09:43 2026 GMT
Subject: CN=6a613197-573b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:10:bc:ef:a8:76:80:d3:03:57:b0:58:5e:
d1:f1:19:bb:ef:6e:23:e7:65:2d:32:68:45:2b:f3:
59:14:77:c3:f4:5a:d9:1e:5c:97:a7:fa:c5:f3:4f:
e4:05:ee:a7:5f:29:b0:df:ca:a7:da:55:c9:ad:f9:
2e:f5:0c:d0:91:0e:c5:99:11:0f:82:50:e0:b5:e0:
a7:5a:9c:27:c6:aa:03:39:91:1e:13:2f:e2:38:36:
98:1b:df:44:95:ef:64:11:5a:a2:8e:63:16:b8:e5:
1e:64:5a:e6:ab:b0:0e:08:85:ed:8a:4f:50:14:47:
17:27:04:57:5b:58:25:f5:d7:7a:6f:73:ed:0e:59:
4b:a6:53:af:33:21:50:30:ca:ed:d0:58:75:84:67:
ef:31:af:78:fc:36:98:51:e3:ec:c5:79:2b:a6:d8:
76:91:20:09:f1:cc:4f:e3:48:dc:2c:b6:2d:41:d4:
86:1d:bc:8b:46:39:22:89:ba:91:14:e4:0e:03:46:
12:fc:f6:42:3d:e5:3d:dd:a7:bf:27:9a:b3:5a:b0:
86:3f:a7:3d:e4:34:33:d8:5e:9a:bb:dc:48:58:a2:
5e:d7:e2:50:8e:55:9b:a9:25:b4:a6:3c:af:51:6f:
64:32:e5:10:e1:a8:0d:c7:ff:39:31:8c:cb:4c:24:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:05:93:AD:03:AB:C3:1E:46:22:64:98:8B:82:E7:68:6F:0C:D6
X509v3 Authority Key Identifier:
keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:2c:62:33:99:b6:47:4e:6b:4e:eb:21:f5:91:a2:30:e0:
9c:ed:58:38:0c:3f:12:ec:19:b5:4e:17:7c:e8:5a:73:e8:13:
d3:c4:a5:72:d5:d4:d7:2e:4e:f2:c3:ce:be:c3:06:40:42:e0:
f3:ba:f7:31:ae:7c:ee:89:6f:0d:6d:de:3c:7a:38:49:57:bb:
2f:51:fc:4d:fa:32:1f:dc:da:e5:0f:78:4e:1d:5e:a1:98:b6:
66:4e:ce:03:99:73:68:f1:82:07:e2:6e:11:0b:78:e8:51:86:
c0:b7:13:8b:88:6a:43:11:d9:2b:4e:28:97:92:c3:fd:44:a2:
c5:33:21:0e:3b:ae:d7:5b:ac:70:80:2e:bb:76:5c:85:a4:d4:
af:fc:7d:26:65:03:70:74:43:6e:0c:f1:45:10:f1:95:af:a5:
05:66:9f:b0:53:1a:b7:2a:ce:af:f9:12:77:3e:ad:73:b5:49:
4d:76:f3:49:61:b3:a3:ad:50:7d:41:eb:07:7a:e3:f1:2d:2b:
0d:ae:19:b0:fb:73:55:ad:ea:58:66:42:ad:d8:c9:de:39:f3:
52:8f:c9:48:3c:2f:ed:c8:03:94:c8:54:f9:a0:26:f0:4a:db:
d6:1b:27:7b:30:ab:a9:83:a2:d7:f0:ab:a0:dd:1c:99:02:96:
bf:4c:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:02 2026 by rpki-client