
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
File: a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json)
Hash identifier: SFG0RX44HtT3sy+qQg1jesgtSyLlBzACkq8c7IlCzxw=
Subject key identifier: EA:05:BE:6D:97:64:10:B1:59:44:B3:49:05:04:C6:75:FD:94:C5:95
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial: 0C9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
Manifest number: 0C80
Signing time: Mon 24 Aug 2026 18:38:08 +0000
Manifest this update: Mon 24 Aug 2026 18:38:07 +0000
Manifest next update: Mon 31 Aug 2026 18:38:07 +0000
Files and hashes: 1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: B8ifD9MVs20/TuDzgg3XNnixzhIf7RY6BRyvGI9nCNo=)
2: 777A546212E511EFB071A31CC4F9AE02.roa (hash: 1/NLiEaXUISjb820jybpDIK6VnxjvAXi+rdfnuVEGtY=)
3: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: AlMNQVgOtpgnBSe6UFI6r8IqzTubbKL0YXL2eJjxBI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 18:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3226 (0xc9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Validity
Not Before: Aug 24 18:38:07 2026 GMT
Not After : Aug 31 18:38:07 2026 GMT
Subject: CN=6a8c8f90-d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:60:35:c4:4a:7e:9f:2a:00:16:77:06:54:
85:bc:ef:79:56:4f:0c:6d:15:9b:49:52:32:a8:ef:
1c:c1:a3:ef:12:61:e8:82:ee:31:3e:4c:95:d2:4b:
18:e7:07:e9:22:a6:46:d3:24:c9:ed:fe:14:cf:cd:
19:07:94:fb:c7:9d:fb:dd:e6:10:f4:5c:bf:50:82:
f7:cd:38:66:45:92:13:03:b9:04:2a:1a:79:76:0f:
82:ed:2a:14:6c:0d:9c:03:f6:72:48:4d:4d:c9:a2:
d6:10:df:b3:3a:f7:bb:21:60:88:e4:84:e0:af:e5:
6b:b0:06:27:a5:55:3f:91:4a:bf:f0:2b:86:6f:36:
6c:43:a0:b5:b4:32:fd:26:cc:20:2b:7d:c6:0e:ce:
bf:42:99:1b:41:b5:92:cb:00:f0:09:f0:bb:16:27:
3d:25:a5:54:80:a3:2f:d1:e4:e7:c5:d4:57:d1:e4:
95:2e:21:4a:e7:13:4c:4c:92:bd:94:a3:b7:1f:bb:
1d:ca:3e:ca:55:96:12:b0:c7:cc:71:1f:aa:de:e3:
6a:09:1e:bd:d3:6f:72:5e:5a:4b:49:2c:69:c6:6d:
ba:43:e1:b9:d6:f9:c6:59:b7:ae:54:f9:cf:74:33:
1a:a2:69:3d:63:9f:8a:78:1c:a4:fe:1b:57:fd:a3:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:05:BE:6D:97:64:10:B1:59:44:B3:49:05:04:C6:75:FD:94:C5:95
X509v3 Authority Key Identifier:
keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:52:ab:36:d6:20:d3:f4:76:4b:88:b6:24:de:d7:e2:f2:8f:
16:17:fd:d8:f3:5c:b1:97:ac:dc:59:73:6f:b4:b6:34:66:92:
d8:8b:07:2a:34:c4:e9:38:00:5b:0e:01:74:d6:68:c0:17:36:
b7:ca:c3:0e:9d:7e:db:f4:57:60:47:4e:02:de:a5:a7:6b:e2:
fa:f5:15:16:06:d2:cf:d4:4b:72:16:2a:c8:48:9d:50:9d:be:
b5:bc:3b:3e:24:df:ba:34:5f:12:8b:7a:be:53:38:0b:b2:10:
c9:13:36:27:2a:01:00:45:d1:42:1c:31:e0:0c:a9:81:01:5c:
58:9b:48:e6:c2:dd:d4:c4:7b:78:64:fb:2b:9d:b5:b8:14:8e:
2f:7d:4b:f3:f9:69:02:cc:10:49:9b:12:f9:cc:c5:65:c4:c7:
a8:5c:48:7e:e1:3d:06:f2:a0:a3:62:bc:3a:62:35:25:ed:30:
dc:f7:ce:df:1d:bf:a8:9e:24:b9:9e:6a:6a:62:a0:7b:60:c1:
96:f9:9b:7a:7e:54:10:ed:89:88:2e:fe:69:c1:af:61:fb:65:
c2:2f:29:d9:54:7f:39:49:86:94:1b:5b:d1:63:9a:44:8e:26:
13:e5:d0:24:68:1e:b6:2b:d3:f3:73:38:b1:19:07:4f:c8:21:
dc:76:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:53 2026 by rpki-client