
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: 6usl5C+VVjfsaliEFJaJPRnoApvcQpfj8WgCaxJQlKo=
Subject key identifier: 9E:BE:44:18:C1:F2:34:82:2A:A7:66:A7:74:86:69:B5:C2:43:FD:2F
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 0815
Signing time: Mon 02 Mar 2026 20:51:58 +0000
Manifest this update: Mon 02 Mar 2026 20:51:58 +0000
Manifest next update: Mon 09 Mar 2026 20:51:58 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: wWhWaCCDfRgrgHzJ4ma0iV4Y5ZrRvVN2v+XehrJ8T0A=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: FlKi2ZxHz6D5064I2oVQSbDeOoF5annLB1jMFwj5Qkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Mar 2 20:51:58 2026 GMT
Not After : Mar 9 20:51:58 2026 GMT
Subject: CN=69a5f86e-8181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:83:94:25:13:50:1e:1d:8f:27:cc:e8:f4:
1b:60:5e:06:66:a3:33:ca:d9:07:13:f0:6d:a1:74:
2f:b1:d2:8e:c6:a7:1b:bd:83:57:cd:dd:42:a2:c7:
e9:51:17:bd:b2:a4:03:e1:ce:18:8d:de:a5:2f:6c:
69:e0:f5:27:fb:b1:55:67:bc:e6:d9:45:fb:ef:d9:
c8:f1:4c:ff:94:18:f4:7e:97:54:25:0f:11:d1:82:
aa:0d:86:28:4f:c7:bd:9a:dc:02:2c:4a:35:cf:46:
c0:8f:fc:ca:90:6c:b7:c4:81:52:a5:88:06:27:a6:
58:5c:45:c9:1d:5a:93:cc:6b:c9:24:00:2b:f1:f2:
3f:64:7e:0e:51:de:4f:b5:67:bc:b8:bf:7f:62:60:
9f:cf:98:5f:5a:62:8a:fa:fe:7c:b3:1c:f8:d9:72:
2a:67:8f:8a:55:75:12:c5:c6:ac:76:9c:66:1c:e7:
a3:e5:1f:e6:7b:d7:b9:da:90:c0:f7:b8:de:64:3e:
af:40:6c:51:a0:ad:d6:1b:84:03:63:87:18:fa:ca:
00:0d:b7:df:91:5d:e3:c3:04:7a:cc:27:3b:02:73:
0d:33:1b:bc:3c:9d:1a:d1:9e:4d:6f:87:b1:5d:7b:
8f:b6:6a:08:7f:23:5a:70:16:31:d2:b9:28:6f:b0:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BE:44:18:C1:F2:34:82:2A:A7:66:A7:74:86:69:B5:C2:43:FD:2F
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:88:6d:ae:b6:cc:99:6f:b3:48:96:8a:29:16:98:96:a0:c4:
e1:eb:6f:71:b4:a8:40:4b:fc:be:52:53:e1:9f:a1:d2:7b:19:
f8:bc:45:63:49:0b:cb:5b:11:8e:5d:e7:d7:b7:b9:41:da:64:
b6:b0:68:de:cf:a5:ef:a0:79:a0:92:e2:9c:40:57:49:bc:0d:
ef:3d:9f:2f:8b:08:7f:af:58:bf:75:2d:73:a7:c7:3d:54:e6:
a6:d9:49:fb:e1:03:40:02:5e:26:b7:5b:bf:35:21:9b:87:0a:
f3:66:cf:57:9c:20:b3:d6:0a:0c:64:09:04:fc:34:43:30:d9:
7c:0c:cc:73:d0:ae:d6:3a:d8:68:aa:f9:ed:37:d0:09:39:a5:
bd:8b:68:8d:a7:40:a2:51:38:bd:b1:94:17:22:32:d1:97:1e:
5a:b7:fe:90:07:24:4e:c1:e1:0b:38:d7:dd:26:a6:f5:28:df:
71:a3:2d:c6:9f:84:38:5f:fa:95:76:04:d1:b6:b0:e7:39:8c:
ee:de:47:4a:1f:94:13:84:fe:c8:f2:c4:35:ca:de:00:7c:07:
98:a2:f2:40:b0:07:6e:b0:69:cf:ce:1f:35:f8:5c:f6:f1:db:
66:e7:b0:88:bf:45:c8:e5:b9:69:b5:b8:82:df:5a:a8:4d:3d:
dd:33:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 15:04:04 2026 by rpki-client