
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
File: g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json)
Hash identifier: PBrwx2He6gm0TQCu3APzlnMTXAurtxKtbBXKrelcvnU=
Subject key identifier: 19:9A:7D:59:DD:54:81:8C:EC:22:42:6C:0B:66:E1:D0:11:C8:E6:8F
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Certificate issuer: /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
Manifest number: 0194
Signing time: Thu 23 Jul 2026 05:45:08 +0000
Manifest this update: Thu 23 Jul 2026 05:45:07 +0000
Manifest next update: Thu 30 Jul 2026 05:45:07 +0000
Files and hashes: 1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: xW3HoU1cUlv/C7E5qbf2VyyeJSe5BsAkrybs1gfrHtE=)
2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: +RRVmyu9T8wrCLDEDj/JvMmPQcvUjexzi+aqUNqlK/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Validity
Not Before: Jul 23 05:45:07 2026 GMT
Not After : Jul 30 05:45:07 2026 GMT
Subject: CN=6a61aa64-61ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:f0:51:16:1f:93:05:f2:a1:ac:17:16:e2:
de:47:fc:a8:bd:b9:e6:4d:0b:40:1d:64:92:59:eb:
0c:20:58:5b:44:4e:65:1a:a7:b2:d5:9c:60:f7:78:
f3:06:5b:16:ec:78:56:27:a5:78:cb:7a:be:d0:e9:
c0:94:68:9d:f5:46:df:ca:bd:df:c3:82:4a:fe:14:
7c:44:a2:cf:2d:b0:03:29:00:09:a5:52:51:fd:c0:
22:54:bd:f9:83:38:25:22:77:b7:67:09:47:92:84:
03:a3:e1:31:8c:81:8e:46:91:83:72:96:85:1f:1e:
37:83:72:3a:5c:de:a2:17:b0:98:17:30:fe:75:1e:
74:fe:6b:f7:ab:f4:63:1f:2b:83:0e:00:00:2d:37:
14:b5:51:dc:92:3b:4f:6d:30:8b:b1:e2:80:51:b8:
e8:54:c5:5e:ca:8d:cb:6f:87:30:77:06:c3:b8:91:
d4:fa:c4:c1:d2:3b:0d:a7:82:42:75:5d:11:e3:dd:
90:c4:68:f2:4a:a8:40:6b:12:12:59:6c:c3:92:8b:
09:fa:52:94:5a:29:73:79:35:a8:47:fb:74:03:b4:
1d:ea:a8:da:5d:9a:ae:c0:df:18:f3:49:7d:ea:ec:
dd:60:ff:95:38:50:7d:b3:cb:39:c0:45:50:47:46:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:7D:59:DD:54:81:8C:EC:22:42:6C:0B:66:E1:D0:11:C8:E6:8F
X509v3 Authority Key Identifier:
keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:00:f3:43:a4:15:bf:20:56:50:5b:3c:be:86:2a:aa:17:51:
be:80:e4:ba:14:44:b3:10:48:57:15:da:c9:f4:09:16:f3:3b:
59:84:de:13:67:55:26:3a:67:8b:bc:97:bf:98:a4:e2:e9:a1:
51:e3:75:dc:08:07:20:d7:15:41:1e:b8:b1:cf:a8:e7:fc:c0:
52:e9:c0:eb:95:11:63:1b:74:41:65:77:1e:a0:bf:59:de:be:
7e:c1:28:de:61:13:75:e5:28:c8:d6:96:9a:a3:7b:7d:9e:be:
90:02:46:c4:d4:52:2f:18:03:47:cf:47:03:c2:c0:87:9a:41:
2f:87:45:4c:ad:e1:35:97:1f:21:f2:fe:30:6b:a5:28:48:7d:
2b:6a:97:38:54:26:b8:ed:2f:50:c9:1e:a4:e6:4c:af:32:f1:
3d:c6:b0:62:b9:0d:8e:03:86:3f:84:5a:6c:29:51:68:90:a8:
fa:d1:e9:40:ee:b9:f7:43:57:61:00:d6:df:03:83:6c:ba:fa:
db:a7:ba:77:b5:d0:f9:44:34:b1:de:7f:46:6a:0b:f4:1e:01:
dc:26:2a:95:0c:40:c6:fe:96:ed:b9:8f:ea:95:99:07:f7:85:
9c:4a:a0:2b:96:d1:6c:78:16:f9:77:e4:e6:20:d4:34:97:cd:
6d:4e:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:56 2026 by rpki-client