
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier: pg45cfm45gsJetnVvEXVukkeaBht1PoD2LIuHsfwXvY=
Subject key identifier: 77:81:14:10:77:82:7A:54:8E:C8:DC:55:58:E9:95:7F:22:17:D8:55
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial: 32C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number: 32C5
Signing time: Wed 22 Jul 2026 15:29:06 +0000
Manifest this update: Wed 22 Jul 2026 15:29:06 +0000
Manifest next update: Wed 29 Jul 2026 15:29:06 +0000
Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: 2t+QE6tbNnuXLegO9Gntminc5Njaazs1cR4MUKyp1nA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12997 (0x32c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
Validity
Not Before: Jul 22 15:29:06 2026 GMT
Not After : Jul 29 15:29:06 2026 GMT
Subject: CN=6a60e1c2-0e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:8b:cf:b1:b7:86:eb:59:0b:2b:56:28:9c:
75:cd:7f:b4:65:67:16:cd:1b:76:99:bf:b1:44:63:
41:79:10:a7:44:f5:f8:69:39:cf:5d:49:a9:ef:cb:
1b:c2:5a:df:96:67:b1:3e:22:b9:c9:47:72:b6:1c:
a7:25:3e:0a:2f:82:54:bc:c8:c1:64:ff:c4:ba:54:
52:e3:13:eb:1e:2c:fd:50:49:db:c5:ed:a6:44:13:
f7:3d:ce:93:b5:ed:5d:3f:49:da:2c:32:64:33:fc:
47:79:c3:93:5a:a5:da:ca:42:22:8e:ed:4d:19:a7:
b8:30:25:be:3c:30:e2:55:98:71:b9:22:ea:85:ce:
30:42:84:e4:66:ef:d2:69:32:2b:52:99:29:3d:06:
52:da:cb:b7:7c:d9:41:03:a6:bf:d4:75:cc:50:26:
06:68:37:48:5a:cf:29:fc:cb:a9:da:7e:e0:05:d5:
00:c3:5d:d1:18:a2:bf:f2:1b:12:d1:68:0e:94:f5:
31:f3:1b:71:a5:c6:bf:3f:03:45:cd:c9:1b:91:8c:
1e:7c:6a:b3:51:45:8a:a5:0d:09:9c:cd:18:e8:96:
a2:9a:ed:aa:c9:a8:9c:d7:e7:8f:57:6f:57:42:35:
45:fa:fb:ac:4f:81:00:45:bf:28:6a:f0:61:20:8d:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:14:10:77:82:7A:54:8E:C8:DC:55:58:E9:95:7F:22:17:D8:55
X509v3 Authority Key Identifier:
keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c3:30:e5:71:88:65:0f:ce:bf:2d:5f:b6:3d:f6:13:c1:40:
12:f0:e7:7c:ad:01:8f:4f:f3:74:9d:13:60:81:ba:16:ec:a6:
0b:fd:6b:fe:8a:e6:b0:55:2a:82:cd:97:5e:98:ca:41:3b:81:
49:c5:5e:48:df:18:e4:40:c2:0b:37:58:40:e8:4d:e9:33:3a:
64:1e:6b:09:52:03:e0:34:ee:88:5b:3b:b0:5c:0b:df:6c:28:
76:1a:f2:28:eb:c3:6a:33:27:81:88:43:e1:9b:0e:b8:50:57:
1a:44:c8:09:e5:80:88:bd:02:44:57:ba:79:ed:46:3c:6c:9f:
a5:2d:ba:85:5d:8f:31:19:0a:a9:76:89:5a:89:b5:09:2f:2b:
b0:a6:a0:ea:f9:19:11:bf:11:b5:76:9c:ba:83:2f:c3:05:f3:
77:1b:dc:28:1d:ea:13:cb:58:48:f0:1c:3e:33:35:6e:86:60:
2d:87:bf:c9:37:4e:8c:70:7a:21:ef:e2:3c:2b:93:0b:64:fe:
13:8c:22:4a:67:5e:09:75:db:da:f4:dd:61:6c:5f:f2:a9:f7:
90:e5:7e:bb:e4:08:39:9e:3c:bb:43:3c:3f:3d:a4:71:48:46:
b6:a1:6f:1f:31:d6:ca:e6:84:75:ea:8b:a9:f5:88:3f:1b:ce:
0e:8a:1d:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3
QTU2Njg2OTEwHhcNMjYwNzIyMTUyOTA2WhcNMjYwNzI5MTUyOTA2WjAYMRYwFAYD
VQQDEw02YTYwZTFjMi0wZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZCLz7G3hutZCytWKJx1zX+0ZWcWzRt2mb+xRGNBeRCnRPX4aTnPXUmp78sb
wlrflmexPiK5yUdythynJT4KL4JUvMjBZP/EulRS4xPrHiz9UEnbxe2mRBP3Pc6T
te1dP0naLDJkM/xHecOTWqXaykIiju1NGae4MCW+PDDiVZhxuSLqhc4wQoTkZu/S
aTIrUpkpPQZS2su3fNlBA6a/1HXMUCYGaDdIWs8p/Mup2n7gBdUAw13RGKK/8hsS
0WgOlPUx8xtxpca/PwNFzckbkYwefGqzUUWKpQ0JnM0Y6Jaimu2qyaic1+ePV29X
QjVF+vusT4EARb8oavBhII1c8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHeBFBB3
gnpUjsjcVVjplX8iF9hVMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG
RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ
YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAksMw5XGIZQ/Ovy1ftj32E8FAEvDnfK0Bj0/zdJ0TYIG6FuymC/1r/ormsFUq
gs2XXpjKQTuBScVeSN8Y5EDCCzdYQOhN6TM6ZB5rCVID4DTuiFs7sFwL32wodhry
KOvDajMngYhD4ZsOuFBXGkTICeWAiL0CRFe6ee1GPGyfpS26hV2PMRkKqXaJWom1
CS8rsKag6vkZEb8RtXacuoMvwwXzdxvcKB3qE8tYSPAcPjM1boZgLYe/yTdOjHB6
Ie/iPCuTC2T+E4wiSmdeCXXb2vTdYWxf8qn3kOV+u+QIOZ48u0M8Pz2kcUhGtqFv
HzHWyuaEdeqLqfWIPxvODoodPA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:58 2026 by rpki-client