
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: dbzi8RJ744lgGe2T0PYQ+a8B9zv9AHNTu2XrwI0LWRE=
Subject key identifier: F2:73:02:7E:48:DD:9B:5C:84:E5:9F:03:18:C2:58:80:40:C6:59:BB
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 0897
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 088D
Signing time: Tue 20 Oct 2026 20:52:07 +0000
Manifest this update: Tue 20 Oct 2026 20:52:07 +0000
Manifest next update: Tue 27 Oct 2026 20:52:07 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: PRpg+igddeIgcxuVcviuITwi5pRTawArccUzX6VoHJY=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: wjDSbRQKtPAWbh/Hzs+97MdegPLfvSS74VnDP3uybto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 20:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Oct 20 20:52:07 2026 GMT
Not After : Oct 27 20:52:07 2026 GMT
Subject: CN=6ad7d477-79b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:79:43:cb:14:c9:bc:af:50:8a:e8:fb:43:
a4:92:b3:95:57:5a:76:94:6a:07:eb:cc:78:b9:6a:
d3:ef:09:d6:8f:20:e2:32:61:92:4d:8b:83:4e:b0:
a7:31:0e:75:18:19:da:16:d8:ac:d0:48:d7:42:f2:
30:01:9c:40:95:83:75:cb:c6:c1:b5:48:cc:b1:d0:
15:01:a3:65:c3:12:6f:96:27:da:cb:f1:44:e4:b7:
cf:e9:e7:b9:0b:3b:97:c5:78:1f:f2:38:3d:d2:0e:
38:a6:f3:22:6b:02:7c:95:5f:86:92:68:43:8d:3c:
40:54:de:ee:71:01:af:bd:f1:c2:a1:f2:ae:e4:bc:
c1:9b:62:55:20:59:ee:09:14:56:f8:d8:ed:57:5d:
aa:61:7a:4b:b8:3b:87:53:e0:fc:46:78:a5:5b:98:
35:d1:f8:8a:41:4b:eb:91:e1:60:99:17:1d:97:78:
1e:8f:e5:b2:e4:f8:55:22:21:4c:3d:17:df:b9:f8:
cc:b0:d6:8a:b7:65:de:df:28:78:6c:c5:83:c8:18:
8a:43:3b:0a:21:5f:e1:04:22:6f:ca:6a:c9:9a:72:
25:bc:10:d8:64:29:4a:ce:12:3c:22:d4:86:ae:c9:
8d:2a:a7:3d:73:b0:c6:37:be:1b:c2:8d:63:12:d0:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:02:7E:48:DD:9B:5C:84:E5:9F:03:18:C2:58:80:40:C6:59:BB
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6a:3a:52:9e:e5:47:8b:28:65:43:21:ed:11:a8:2f:bc:bc:
ac:98:13:74:d7:2b:f8:74:3c:2a:43:d1:ba:2f:02:f4:a0:72:
cb:3f:e9:b4:6b:16:3c:7e:6d:36:4a:b6:f0:2c:89:d8:d9:2b:
69:ab:3f:b8:d2:6f:cf:c9:f7:d9:c9:ab:89:89:04:ef:f6:e5:
65:31:65:1f:0d:c5:b2:ac:48:02:70:b2:cd:5a:81:be:62:88:
13:1d:5a:d6:a0:28:45:13:ca:40:4a:e7:db:26:6f:e6:4a:58:
45:e2:79:a3:8d:1c:f0:ac:2e:28:9b:e9:20:40:db:46:ee:1d:
25:2d:92:98:da:28:40:af:eb:ed:d3:21:40:15:c6:b5:02:a2:
21:ff:fe:39:7c:6a:8d:dd:7c:14:a6:f9:3a:6f:fa:1d:29:d3:
2e:7f:79:21:e4:48:7f:a5:41:ed:50:63:a7:41:4b:95:ac:76:
6a:83:ae:ef:2b:2e:27:65:2b:84:19:e2:f9:ad:31:5d:78:0f:
e5:9e:11:cb:93:47:54:ea:0c:41:45:28:8a:7e:65:bf:53:a8:
97:0d:cb:ec:d8:1b:56:ac:b8:b2:9e:58:27:b2:c7:7c:ca:68:
47:6b:ab:69:b3:6d:c4:db:e5:f3:a9:b5:4e:f1:09:f6:94:d3:
a1:c6:cb:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk3QkIxMTAvBgNVBAUTKEI0OUU4RUU4MTcwM0E0QTBCQUNDQTgyNDM3ODAyRkI1
QzMwQjY1NjgwHhcNMjYxMDIwMjA1MjA3WhcNMjYxMDI3MjA1MjA3WjAYMRYwFAYD
VQQDEw02YWQ3ZDQ3Ny03OWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKZ5Q8sUybyvUIro+0OkkrOVV1p2lGoH68x4uWrT7wnWjyDiMmGSTYuDTrCn
MQ51GBnaFtis0EjXQvIwAZxAlYN1y8bBtUjMsdAVAaNlwxJvlifay/FE5LfP6ee5
CzuXxXgf8jg90g44pvMiawJ8lV+GkmhDjTxAVN7ucQGvvfHCofKu5LzBm2JVIFnu
CRRW+NjtV12qYXpLuDuHU+D8RnilW5g10fiKQUvrkeFgmRcdl3gej+Wy5PhVIiFM
PRffufjMsNaKt2Xe3yh4bMWDyBiKQzsKIV/hBCJvymrJmnIlvBDYZClKzhI8ItSG
rsmNKqc9c7DGN74bwo1jEtAS+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJzAn5I
3ZtchOWfAxjCWIBAxlm7MB8GA1UdIwQYMBaAFLSejugXA6SgusyoJDeAL7XDC2Vo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCQi9GQzczRkEwNjEw
RTYxMUVCQjRBMjUyMURDNEY5QUUwMi90SjZPNkJjRHBLQzZ6S2drTjRBdnRjTUxa
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RKNk82QmNEcEtDNnpLZ2tONEF2dGNNTFpXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTdCQi9GQzczRkEwNjEwRTYxMUVCQjRBMjUyMURDNEY5QUUwMi90SjZPNkJjRHBL
QzZ6S2drTjRBdnRjTUxaV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq2o6Up7lR4soZUMh7RGoL7y8rJgTdNcr+HQ8KkPRui8C9KByyz/ptGsWPH5t
Nkq28CyJ2Nkraas/uNJvz8n32cmriYkE7/blZTFlHw3FsqxIAnCyzVqBvmKIEx1a
1qAoRRPKQErn2yZv5kpYReJ5o40c8KwuKJvpIEDbRu4dJS2SmNooQK/r7dMhQBXG
tQKiIf/+OXxqjd18FKb5Om/6HSnTLn95IeRIf6VB7VBjp0FLlax2aoOu7ysuJ2Ur
hBni+a0xXXgP5Z4Ry5NHVOoMQUUoin5lv1Oolw3L7NgbVqy4sp5YJ7LHfMpoR2ur
abNtxNvl86m1TvEJ9pTTocbLdg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:21:35 2026 by rpki-client