
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
File: f8xPf-awzDq4ikFPiUwnT6ebK4o.mft (raw, json)
Hash identifier: YaqhCAII6e3FkLfvcl3rSd2TwjLjeEdCiLVJKphfGuU=
Subject key identifier: F9:51:00:98:E0:FE:41:7F:74:7A:FF:2C:32:56:62:69:8D:FE:BF:B2
Authority key identifier: 7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
Certificate issuer: /CN=A91DB6F5/serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
Manifest number: 09
Signing time: Thu 23 Jul 2026 11:16:41 +0000
Manifest this update: Thu 23 Jul 2026 11:16:41 +0000
Manifest next update: Thu 30 Jul 2026 11:16:41 +0000
Files and hashes: 1: f8xPf-awzDq4ikFPiUwnT6ebK4o.crl (hash: qkmPMCayu/jiXquOd+0AZtONCOpl2burMFi+r8z67+g=)
2: FB8302CC7B4311F1A6C72CC794A30FBC.roa (hash: O3P+wCLcSaZeVnz8hU5Gns4U/UBq9VDtYeZsJeUmjAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6F5, serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Validity
Not Before: Jul 23 11:16:41 2026 GMT
Not After : Jul 30 11:16:41 2026 GMT
Subject: CN=6a61f819-6424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:8b:27:e6:14:74:7c:7d:e1:bd:d8:50:db:
ec:36:f5:69:c5:d8:3e:aa:31:da:dc:8a:21:a7:7d:
e6:cc:6d:62:29:f8:bd:ab:b7:08:d8:b5:40:31:ef:
a6:2e:56:e1:a5:ca:c6:fa:fe:da:4d:73:13:95:ef:
ab:50:df:6f:bd:67:81:d2:66:d3:bd:b4:07:e7:47:
45:f1:6d:92:76:3a:21:9d:af:ad:24:49:2d:25:5c:
d5:ca:e8:a2:4e:f0:92:0e:88:70:54:37:f1:67:ab:
cc:47:ab:8c:8d:62:5c:ea:04:a9:b9:88:3a:58:10:
35:b4:a8:f9:a3:ce:9f:99:9e:48:64:5f:ba:79:0a:
57:02:61:a3:ce:fa:c5:ad:27:12:7e:85:d7:d9:de:
51:5d:5b:48:e3:42:c4:89:1c:14:80:c3:34:64:51:
63:39:4e:4e:6c:45:3e:b0:a8:09:88:6d:c0:ce:9a:
83:83:1d:12:8d:52:68:f4:6d:6d:b1:d9:c1:de:74:
5a:09:77:f7:ba:42:a2:95:0d:3c:d7:7d:d8:ab:cc:
7a:d7:23:f2:fb:35:10:df:1f:0d:fe:18:39:e7:03:
23:3e:17:0e:a7:88:62:ee:57:06:e8:05:a2:de:fb:
80:e3:1a:2a:ba:a6:1f:a7:2b:32:da:14:4e:66:e3:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:00:98:E0:FE:41:7F:74:7A:FF:2C:32:56:62:69:8D:FE:BF:B2
X509v3 Authority Key Identifier:
keyid:7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c5:ce:db:f5:06:d4:4c:48:b5:2b:4e:ac:15:8f:9d:a1:96:
95:41:92:7e:45:30:02:72:0c:ce:50:68:fb:26:6b:55:c9:23:
09:f8:21:bb:d3:31:0a:44:ae:08:fc:46:bb:a3:9f:b8:46:33:
d1:4f:f6:bb:81:de:0b:9d:d8:0e:0f:9d:70:1a:8f:9a:aa:45:
64:b6:0a:c4:85:39:bf:dd:9d:f7:79:c2:e7:9d:78:c6:8e:6b:
ab:2d:2e:62:ac:90:84:c2:6c:24:de:9b:b6:8c:cd:88:b9:bb:
00:b2:20:b9:5b:7a:99:1b:ca:86:e7:6b:2d:a3:8e:c7:f1:0c:
2c:11:c4:d5:f9:a6:98:ce:ca:8c:36:7f:b2:e2:1f:8f:1d:aa:
73:6e:cc:89:cc:ff:71:ab:0e:e1:a6:d6:32:e7:0e:25:44:30:
b8:eb:7e:18:96:1b:c3:37:06:05:4d:5f:b3:a8:ba:c9:20:f5:
ef:0a:16:8e:a4:3b:f6:c6:73:99:e0:ac:13:b7:49:d6:ae:3b:
c6:97:7b:bd:aa:03:99:e5:27:3f:e6:db:1f:79:17:ac:75:9b:
73:6a:7b:3b:5c:d9:64:4d:93:86:a6:1e:4c:df:0b:56:48:e7:
4a:0b:38:4c:05:1a:f1:54:2c:e2:24:85:26:06:ac:28:95:48:
b9:46:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:31 2026 by rpki-client