
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: pK06aIWlxn2wR0LvtWAUW8c01E8tw//tWT1/p1RcyhA=
Subject key identifier: E3:D4:4B:BC:86:F9:D0:67:5E:95:B1:5E:CF:57:72:D4:BE:FE:35:D4
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 087E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 0874
Signing time: Mon 31 Aug 2026 20:47:31 +0000
Manifest this update: Mon 31 Aug 2026 20:47:31 +0000
Manifest next update: Mon 07 Sep 2026 20:47:31 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: zZuNFOBwq7s3q0CgW2Ko5zvHfjreGFmFnUvujKT0BIM=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: wjDSbRQKtPAWbh/Hzs+97MdegPLfvSS74VnDP3uybto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 20:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Aug 31 20:47:31 2026 GMT
Not After : Sep 7 20:47:31 2026 GMT
Subject: CN=6a95e863-8c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:60:ca:45:35:1e:24:54:66:8f:73:24:34:
46:4e:79:84:8d:88:22:fb:66:20:c0:df:e0:c8:9a:
40:16:5f:8f:c1:a6:e9:d5:76:53:a4:0b:84:4f:10:
0d:c1:16:94:6e:8b:c4:42:4e:e9:be:34:8a:91:85:
79:03:92:7b:74:a8:a2:c5:ab:ef:80:0b:bd:4a:1d:
8c:d5:9b:54:8d:b1:b0:1f:a2:e9:9b:b1:14:b0:42:
6d:d2:1f:dc:96:9a:b1:d3:fa:1c:2e:9a:f6:b2:54:
a7:d7:7e:39:10:a8:30:88:63:e6:66:94:45:7e:ed:
4a:33:0a:19:1c:7e:c5:c5:0b:04:99:0c:77:9e:f7:
ee:38:d3:04:de:a8:95:1b:13:f5:c2:be:f7:00:c9:
2b:2c:81:09:1c:12:29:84:0d:01:d5:43:b8:3e:b9:
98:3e:1b:cb:ea:90:17:df:f6:ba:fb:fa:9e:d8:02:
61:a9:4b:96:f1:07:50:2e:5e:3b:e6:7c:e7:26:de:
5e:b3:a4:f3:25:38:6a:74:85:d7:3d:b8:dd:bc:58:
04:5f:a2:02:d2:26:6d:35:52:4c:f3:0a:f6:77:67:
08:c5:17:cd:89:98:92:7d:6a:ef:70:7b:0e:a7:dd:
88:63:7e:78:f4:fe:94:4d:f7:d6:ff:14:d3:2f:b5:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:4B:BC:86:F9:D0:67:5E:95:B1:5E:CF:57:72:D4:BE:FE:35:D4
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:28:35:9c:e0:8b:83:2f:4d:b7:09:12:d9:68:cd:66:d3:c2:
a3:56:ea:96:90:b7:ef:72:98:e1:49:7a:34:84:03:1b:e6:36:
b3:82:43:6a:1a:28:46:08:17:28:6d:4b:fd:69:92:10:53:90:
5f:46:cb:1b:59:23:43:41:d3:8e:f8:5e:3a:c0:ad:3c:6e:c4:
7e:ae:b1:9b:5f:a0:32:34:74:06:52:93:42:b5:b8:03:73:b5:
12:4d:9d:44:56:43:f1:4e:3e:52:47:6a:f7:fa:54:48:58:59:
af:40:13:75:0d:e4:6f:af:4a:ac:88:e1:b7:df:a5:b7:f2:fd:
ab:2e:f4:43:3a:6f:b6:d8:6e:b7:94:ab:8b:82:cf:1b:ad:b1:
34:46:f1:a4:cc:15:c6:57:45:67:f9:a5:ce:c0:fa:1f:54:31:
95:93:2d:fc:a2:4d:f7:82:d2:8c:09:9d:6b:0f:8c:b4:34:f5:
af:24:54:9c:13:19:17:15:d1:f7:1d:f2:a9:c2:ed:b2:10:e9:
22:6c:0a:d7:a9:be:94:93:38:3f:08:f3:b1:e5:2d:3a:bd:43:
6a:07:3f:fe:ca:69:d3:cb:6c:ac:30:38:55:8f:78:54:a9:31:
e3:07:c9:53:4a:a3:da:34:ef:b3:01:d5:d4:7d:c1:d6:f7:90:
f0:2c:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:05:12 2026 by rpki-client