
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: HTuPkHPx/IJ+/lyoy85TxryEhQV22MBSP6V8ZvGmQ2k=
Subject key identifier: 63:5B:53:26:BC:42:08:6E:94:A1:20:23:88:3E:DA:00:88:3B:D6:AC
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 2550
Signing time: Thu 24 Sep 2026 15:43:39 +0000
Manifest this update: Thu 24 Sep 2026 15:43:38 +0000
Manifest next update: Thu 01 Oct 2026 15:43:38 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: dZkLrkREwG0uONfSNYcZvd0zHwn0hVN0rY8MqjWfmzg=)
2: CE7B5902AF3F11F186796EF16911F970.roa (hash: IHWM6RFhPrMmsqVLsW0iVew5UfTXyAVb0zZ4b4QqZQU=)
3: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: rycLk4UK+xxvgQxEjrUg94ft0J4vTpCCFPONGxFmmI0=)
4: 0F15CD3AAF4011F1A81565FF6911F970.roa (hash: Xz7eZ1SV8R4oYvn9Xlw6Pv4LszQ2ezhKLHykoR+8jxw=)
5: GiZqVXDFkfTOw9KbgmpHw5SLUWY.asa (hash: vDu9havXbmwfHPU3SNHzDoX5rB2pHYEh/QKpZcZTGtM=)
6: rvms7SMLwgO_3iqGevwVvKwKAMA.asa (hash: 03mIt6sx2N4kyRDmtrywhu7q0g8YM9WZvJByyOjFrj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9593 (0x2579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Sep 24 15:43:38 2026 GMT
Not After : Oct 1 15:43:38 2026 GMT
Subject: CN=6ab5452a-2814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:bd:a6:b0:01:22:fe:32:98:65:1b:2d:65:
76:04:b5:58:8e:33:c5:3f:ee:df:67:be:d9:78:ae:
70:1d:1f:e1:64:f2:f5:ee:16:67:ef:99:0c:fc:11:
d2:38:70:17:f8:14:d3:cb:5b:b1:17:5b:37:0e:f4:
4e:a5:04:74:54:d9:89:88:47:79:d5:7d:f3:92:89:
74:23:3b:26:20:60:95:63:9b:ac:9e:bb:ab:a6:59:
8b:3a:ab:66:1b:06:6a:66:1c:1a:45:c4:d8:3f:22:
56:6a:c5:0b:3e:53:84:72:2c:24:0c:10:e9:d4:70:
9f:6e:13:51:f5:3c:20:9e:82:08:6f:91:ea:53:ab:
fe:34:50:04:5d:f6:ef:0f:0e:26:b5:f4:6d:71:41:
fd:b0:79:fc:30:20:20:b2:c2:93:90:c2:79:1a:e6:
f6:17:1a:f7:a0:59:50:e9:e6:16:9a:14:ab:e5:ad:
4b:17:5b:10:80:56:3d:56:d8:58:f2:6f:fa:1d:cd:
7a:7b:a7:cf:4f:82:c3:60:3e:a4:73:80:aa:b3:5c:
13:b4:2b:58:ae:e1:f7:1b:0d:cc:08:50:fb:57:f9:
1e:91:79:97:45:6d:de:d7:8a:5e:89:57:bf:94:a9:
ec:5d:55:86:49:f0:a6:1a:63:0e:6d:d5:6b:45:9c:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:53:26:BC:42:08:6E:94:A1:20:23:88:3E:DA:00:88:3B:D6:AC
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:58:1e:ab:df:40:41:f4:11:51:e0:9f:e0:ab:4f:5a:b2:b8:
a0:8d:9d:b4:e1:43:d0:f4:b8:be:49:1b:b0:44:49:28:8d:14:
8f:02:1a:7b:1e:c1:46:5c:4c:62:b4:65:fe:9b:a4:f0:aa:c1:
66:e9:db:04:fa:82:5e:ca:c7:b1:90:f5:13:cb:e9:74:fa:8a:
42:86:84:3b:f9:fb:2c:00:77:23:c9:be:d8:63:5d:f0:57:82:
e9:64:aa:dc:4f:1f:40:e4:2f:76:6d:08:51:eb:3e:1a:c9:e5:
80:60:2b:70:97:a1:0a:07:3e:5a:f0:37:98:61:f3:c0:10:77:
0a:4b:84:fb:1b:40:56:d6:86:d6:4b:aa:b2:55:68:53:ea:fb:
28:53:e9:60:58:d4:ae:67:6b:38:b5:19:a3:ae:fa:ac:f4:91:
58:20:c2:db:ba:98:4e:fe:66:46:26:fc:80:94:80:ea:3b:af:
39:9d:80:3e:4a:3b:bb:14:5f:e5:f3:c9:4a:4d:21:3f:80:a1:
69:de:a8:ee:75:25:88:93:be:13:07:09:b4:0b:dd:44:a2:02:
1e:4d:89:ab:f8:c0:cb:fb:30:f5:9c:0d:02:46:63:c3:72:6b:
44:66:57:25:c2:ba:2f:5a:4e:39:12:d8:e5:da:2d:a6:b7:e2:
18:34:9f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:46:39 2026 by rpki-client