
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
File: 8WJXDJs0J9iIMy8qJEOCiAfghyM.mft (raw, json)
Hash identifier: 4PyLAbN44iiEVtUKusQFPKCSjzrhZlxTwCAOrIGpxcM=
Subject key identifier: B4:52:9B:83:9E:B9:87:1A:CC:67:47:2E:BC:BC:25:1B:A1:D4:3D:4D
Authority key identifier: F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23
Certificate issuer: /CN=A91EA850/serialNumber=F162570C9B3427D888332F2A2443828807E08723
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
Manifest number: 95
Signing time: Fri 09 Oct 2026 08:13:28 +0000
Manifest this update: Fri 09 Oct 2026 08:13:27 +0000
Manifest next update: Fri 16 Oct 2026 08:13:27 +0000
Files and hashes: 1: 8WJXDJs0J9iIMy8qJEOCiAfghyM.crl (hash: jcGq/uOFVsJkEbo01ro7VTFnXFp5dkJOVdWDUJxfXJw=)
2: 59A00586ED3B11F0828F39A04B6F56BC.roa (hash: EgWrQHGbU31Uz75+qWGvTeIJzWumnz7hpQn1ooNpH0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl
rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA850, serialNumber=F162570C9B3427D888332F2A2443828807E08723
Validity
Not Before: Oct 9 08:13:27 2026 GMT
Not After : Oct 16 08:13:27 2026 GMT
Subject: CN=6ac8a228-5784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:0e:b9:d7:6c:2f:68:81:1a:81:9b:ac:19:
0c:d7:ef:98:40:ab:73:ae:2b:8a:10:78:60:98:46:
81:fa:83:c6:de:97:62:5b:5f:90:bf:d9:ef:1e:cf:
9c:e3:c9:3c:b9:1b:80:c6:4e:a3:1d:fa:1c:ef:be:
92:fd:1e:37:3c:22:bb:61:1b:79:dd:b0:e4:79:fe:
31:35:16:11:75:d8:49:f6:42:d4:67:23:1b:10:df:
77:37:2c:85:94:ad:76:9b:f4:86:ca:4e:28:91:41:
f1:e2:36:40:95:87:d6:f0:1a:9d:c7:84:3d:1a:1c:
93:31:ca:34:85:13:b5:18:e5:49:0e:e0:63:8b:cf:
7a:e2:6f:4c:a8:2b:e8:f8:ed:98:48:d4:98:7c:b4:
1b:4f:f3:8e:35:11:00:06:7c:a2:ea:bc:31:5f:b4:
64:42:bc:5d:1e:55:e5:ab:5a:d3:da:95:ba:c1:3b:
8b:6f:7c:16:f0:06:ba:f5:c8:28:99:02:3f:a1:33:
49:51:2e:ca:18:cd:94:21:b4:6d:e8:34:ee:2f:ea:
fc:40:56:b1:ee:cb:59:c1:76:b3:54:e9:2e:3d:02:
9d:31:de:f6:06:d7:4a:26:54:da:63:2d:db:2d:01:
c5:09:e5:c4:69:56:03:21:75:b7:d9:a8:a1:9e:bd:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:52:9B:83:9E:B9:87:1A:CC:67:47:2E:BC:BC:25:1B:A1:D4:3D:4D
X509v3 Authority Key Identifier:
keyid:F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:42:8d:18:1c:f4:f2:88:81:23:fd:23:51:9b:46:60:e2:df:
6f:94:af:49:11:16:cd:8e:58:bc:55:8b:eb:c3:b2:62:bf:85:
a3:a9:42:95:73:d2:1a:ad:4b:51:19:68:18:5e:8d:3f:0f:7e:
bd:85:9d:aa:62:2c:d3:ca:19:6c:b3:b4:4f:d0:7b:1e:6a:be:
d5:3a:68:0b:e3:ce:43:08:77:b8:33:12:d1:0b:ae:aa:39:38:
ab:ea:a3:49:6a:08:f2:98:9b:54:da:e5:c2:75:a3:95:25:ee:
2c:ad:cc:c2:05:a6:ba:3d:53:1a:81:5c:e8:1e:e6:89:60:bd:
93:13:b8:7e:da:ef:81:89:ac:0b:f2:a4:1b:d4:86:5d:22:41:
30:3e:66:df:88:07:d1:71:18:a1:2a:44:23:23:b6:ed:57:5d:
9b:e0:51:33:c1:da:8a:69:2e:df:c9:5c:a8:aa:8d:f9:39:d6:
42:a4:98:62:49:3d:4e:fa:89:b6:24:2f:0f:cf:85:de:80:ff:
fc:68:21:c0:64:a9:8a:9c:6b:cb:aa:08:76:a7:e0:f3:07:be:
82:eb:15:a5:81:15:ef:d7:05:85:2f:f4:1c:75:a7:ef:88:ae:
d7:d9:1f:22:58:8a:92:70:4b:f6:96:c8:14:a4:16:d4:67:b7:
3a:fa:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:59:05 2026 by rpki-client