
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
File: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft (raw, json)
Hash identifier: SRJcbicy4P6PPE+rWHJtYpQclDuUQhzyXgvJ/HUeVGU=
Subject key identifier: 7B:F4:84:10:77:87:92:87:BE:91:74:F3:ED:86:6A:67:B2:53:A6:92
Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Certificate issuer: /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
Manifest number: 83
Signing time: Fri 23 Oct 2026 08:18:48 +0000
Manifest this update: Fri 23 Oct 2026 08:18:48 +0000
Manifest next update: Fri 30 Oct 2026 08:18:48 +0000
Files and hashes: 1: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl (hash: MGj4Gb8TuRo6iuFVCXqdan+AMH/YLG7X3DATkXkEWSw=)
2: 9ABBE50C0DFD11F18537B598053D8C67.roa (hash: B/TqzACGEfySc+XaR76BsEZga/Tqj8LPu2hT0skPKbE=)
3: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (hash: hWKKvsTt7zCxD5Fv8v2sGwk7XoSlQUlgVYDrraM8C1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 08:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Validity
Not Before: Oct 23 08:18:48 2026 GMT
Not After : Oct 30 08:18:48 2026 GMT
Subject: CN=6adb1868-0fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:84:99:8f:0b:9b:33:4a:c2:c0:8a:29:80:
00:dc:1f:57:18:9c:09:a9:39:a2:84:c2:62:3e:72:
37:1e:61:26:f0:ee:ca:77:22:47:4d:8e:a8:02:b4:
f5:ad:a9:96:f2:31:80:bc:bb:55:0d:3b:e6:e8:c2:
c2:8f:83:9b:19:05:5e:7a:dd:db:52:11:2d:b0:1c:
41:fc:50:45:5d:a5:9d:ee:e8:b7:cd:3b:50:b0:c2:
87:b4:98:79:72:fe:f6:ec:39:ef:48:02:38:78:bb:
23:6e:26:9f:f7:55:70:42:7d:90:51:5d:b5:a0:57:
e5:13:c5:5c:1c:c8:41:f9:9e:55:c1:31:4b:5c:10:
52:ce:5e:0e:77:bf:31:12:16:c3:e4:b1:16:1d:fa:
0f:76:ab:e6:de:f8:95:b7:d9:87:5b:7f:6c:b8:97:
5e:c9:22:70:22:35:e4:f4:e2:44:fc:fd:8d:f5:42:
01:93:b5:cd:63:d2:7d:37:51:de:70:b3:7b:cb:21:
37:fd:ec:e5:ae:46:98:2c:30:fd:43:8d:34:c8:ba:
b3:5c:16:3d:ed:e9:47:52:34:4f:11:c3:e5:5b:c8:
7f:b3:98:88:62:1e:7a:9b:53:37:74:78:69:db:7b:
99:e8:4c:17:62:e8:79:37:a4:89:c2:9b:50:b9:50:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:84:10:77:87:92:87:BE:91:74:F3:ED:86:6A:67:B2:53:A6:92
X509v3 Authority Key Identifier:
keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:e7:bc:88:f3:64:06:41:d0:88:6c:a2:10:91:45:7f:f0:
38:64:8c:b7:ad:04:5b:c6:fa:c8:e0:6e:98:63:73:86:f3:8c:
1a:45:ea:ab:58:ed:45:b0:15:53:9e:c6:71:9d:de:7a:89:e4:
e6:89:d7:76:d0:10:f4:b6:af:4f:a4:8b:c7:0e:8b:aa:40:6a:
66:b8:80:fb:f5:78:15:a0:02:e0:84:a8:b4:1c:f8:fb:f9:8d:
84:ae:bf:3d:ac:b6:c1:f7:a3:6c:fb:47:66:3e:b1:da:d3:ad:
fb:0e:3e:aa:60:b8:80:87:fb:53:0a:7f:50:98:72:d5:09:fc:
f6:b1:cf:cf:f7:be:18:4b:d4:41:78:42:2b:a1:36:01:f8:fe:
c4:f8:07:c3:57:e2:2e:44:21:11:f2:b1:28:bb:45:0a:7f:29:
14:cd:85:dd:ad:7a:06:93:7f:f0:05:ff:b8:14:66:eb:9d:05:
1e:d2:f7:3a:17:b7:01:35:48:4a:6b:9e:94:3f:d2:97:1f:a6:
c7:57:01:88:9c:58:74:3c:bb:46:0c:5e:3b:a7:85:03:24:fd:
54:d1:35:68:ae:38:5c:8c:e7:01:cb:c8:35:e3:d3:a7:0a:60:
86:cd:13:3b:b8:d5:84:ae:6f:f0:45:66:9d:2f:5e:fe:2c:27:
ae:ae:ec:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4NUExMTAvBgNVBAUTKEU4MDY0MDMxMzQ1MkQwNTM0N0FFQjlFQUFCNjBEQjhF
MDBDMjE5MEIwHhcNMjYxMDIzMDgxODQ4WhcNMjYxMDMwMDgxODQ4WjAYMRYwFAYD
VQQDEw02YWRiMTg2OC0wZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5aEmY8LmzNKwsCKKYAA3B9XGJwJqTmihMJiPnI3HmEm8O7KdyJHTY6oArT1
ramW8jGAvLtVDTvm6MLCj4ObGQVeet3bUhEtsBxB/FBFXaWd7ui3zTtQsMKHtJh5
cv727DnvSAI4eLsjbiaf91VwQn2QUV21oFflE8VcHMhB+Z5VwTFLXBBSzl4Od78x
EhbD5LEWHfoPdqvm3viVt9mHW39suJdeySJwIjXk9OJE/P2N9UIBk7XNY9J9N1He
cLN7yyE3/ezlrkaYLDD9Q400yLqzXBY97elHUjRPEcPlW8h/s5iIYh56m1M3dHhp
23uZ6EwXYuh5N6SJwptQuVAbzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHv0hBB3
h5KHvpF08+2GameyU6aSMB8GA1UdIwQYMBaAFOgGQDE0UtBTR6656qtg244AwhkL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg1QS9BQkJDNjc5RTBE
RkExMUYxOTI4QzRCNUEwNTNEOEM2Ny82QVpBTVRSUzBGTkhycm5xcTJEYmpnRENH
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZBWkFNVFJTMEZOSHJybnFxMkRiamdEQ0dRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTg1QS9BQkJDNjc5RTBERkExMUYxOTI4QzRCNUEwNTNEOEM2Ny82QVpBTVRSUzBG
Tkhycm5xcTJEYmpnRENHUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJfnnvIjzZAZB0IhsohCRRX/wOGSMt60EW8b6yOBumGNzhvOMGkXqq1jtRbAV
U57GcZ3eeonk5onXdtAQ9LavT6SLxw6LqkBqZriA+/V4FaAC4ISotBz4+/mNhK6/
Pay2wfejbPtHZj6x2tOt+w4+qmC4gIf7Uwp/UJhy1Qn89rHPz/e+GEvUQXhCK6E2
Afj+xPgHw1fiLkQhEfKxKLtFCn8pFM2F3a16BpN/8AX/uBRm650FHtL3Ohe3ATVI
SmuelD/Slx+mx1cBiJxYdDy7RgxeO6eFAyT9VNE1aK44XIznAcvINePTpwpghs0T
O7jVhK5v8EVmnS9e/iwnrq7s6A==
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:01 2026 by rpki-client