
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier: 9bDCtxaFKAkQ3P5XtYNOGj5UX263ig5/di2LwzNtwu8=
Subject key identifier: 38:A6:C9:83:BD:D1:5C:6A:27:E6:AD:D1:3C:0A:E1:52:A6:FA:15:76
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial: 07FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number: 07F4
Signing time: Sat 14 Nov 2026 21:08:07 +0000
Manifest this update: Sat 14 Nov 2026 21:08:07 +0000
Manifest next update: Sat 21 Nov 2026 21:08:07 +0000
Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: 2r303fZX6Pu6xyFCXe3FT0ky9bSurcIQpEn9/3i581o=)
2: 715A7174F80411F099DDF14C6E6F56BC.roa (hash: S35unXz+pWyaDcved3Mh955i5A8zeBfuYoGGs1z06Uk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Validity
Not Before: Nov 14 21:08:07 2026 GMT
Not After : Nov 21 21:08:07 2026 GMT
Subject: CN=6af8cdb7-fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:06:fd:6d:e1:e1:2f:85:97:b2:c5:d2:6f:
72:7f:5e:ad:3d:fb:68:52:7c:a9:1e:cf:e2:82:33:
65:17:90:43:03:4e:5f:bb:86:55:c1:a9:41:1c:24:
ce:ee:07:db:4a:d6:43:f2:7c:53:98:42:99:56:42:
27:0c:41:1a:31:62:fe:03:ea:83:61:f2:f9:50:ad:
4a:70:0a:eb:a6:d1:02:b7:35:02:0b:b6:99:ae:a6:
7d:cc:96:f8:05:1f:8f:10:db:4c:b4:10:4a:88:4e:
32:8c:35:2b:19:fa:b2:12:f5:e0:2b:68:90:73:38:
98:25:c3:9d:6b:a6:9c:a2:db:56:70:d3:18:3b:56:
6a:cc:73:af:1f:7b:12:f5:e4:4c:c3:14:13:e7:c9:
3b:b9:08:15:c1:69:ca:90:2e:38:7e:b2:6c:07:fa:
5a:9f:b7:6b:b6:48:18:39:dc:f5:ea:d9:8c:4f:4d:
76:19:71:89:4a:b4:3d:bd:7b:7c:c6:39:5d:02:55:
f0:eb:5b:db:f6:23:7b:2a:ec:d2:37:96:91:9c:f5:
c8:16:47:88:8e:45:5c:7e:03:9a:a0:d8:9d:d6:4a:
a3:cb:df:d2:48:9f:42:c0:f2:48:43:63:6a:b3:21:
71:71:0e:54:a7:a9:14:f8:4e:17:d3:e5:cd:99:1d:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:C9:83:BD:D1:5C:6A:27:E6:AD:D1:3C:0A:E1:52:A6:FA:15:76
X509v3 Authority Key Identifier:
keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b6:70:0a:92:ce:d2:df:d0:cc:d7:1d:b2:c9:2a:70:2e:b2:
0d:24:8d:b7:e6:c7:47:2b:a3:35:06:99:48:72:76:f8:5f:8b:
fd:9c:6e:97:ae:68:6d:6c:0b:ec:2e:73:50:e0:fa:b0:68:d6:
f2:f5:78:5b:50:c9:55:5d:af:9d:0e:a5:cf:d9:d8:4b:5a:86:
d1:65:e4:cc:8d:4c:3b:7e:63:00:dd:a2:3c:4c:be:ec:56:76:
ac:f1:43:58:09:da:04:d1:5a:0e:9c:7f:18:67:48:ec:5e:be:
cf:9e:a4:77:c6:17:0b:c3:90:4b:f4:5b:a6:4d:ab:19:11:ee:
74:28:91:7e:6d:7f:6f:92:5a:26:c6:54:2c:40:d1:99:de:b9:
02:e5:ba:e0:ad:26:bf:d8:49:b3:06:09:f5:ca:b4:04:ac:e5:
d4:49:a6:0f:04:7a:01:65:0f:c5:14:8c:41:e2:f2:e4:54:85:
0a:7a:a5:e6:ff:d2:d8:ca:5c:2d:2f:d4:c7:aa:b7:bb:59:e5:
f1:2b:e3:25:9e:67:c1:c8:51:c6:78:77:d1:86:b9:a7:35:83:
6e:f2:dd:79:0d:07:1d:b3:18:3f:9a:e2:c8:a8:64:a0:34:d9:
bc:94:ff:3e:fc:a8:3b:2d:2a:34:0d:c2:2a:d6:43:5f:cc:5a:
87:d7:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:02:19 2026 by rpki-client