
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
File: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft (raw, json)
Hash identifier: iVetw7FYkRwnyg6Ua3plT9Pj/qeVwFZvDIoUoNvlBxQ=
Subject key identifier: 66:90:11:91:01:DE:63:20:80:46:74:23:6A:54:6A:76:78:67:F4:88
Authority key identifier: 47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C
Certificate issuer: /CN=A91BE8A9/serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
Manifest number: 8B
Signing time: Wed 21 Oct 2026 08:08:56 +0000
Manifest this update: Wed 21 Oct 2026 08:08:55 +0000
Manifest next update: Wed 28 Oct 2026 08:08:55 +0000
Files and hashes: 1: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl (hash: Wq1p/7ZzNIKdlk+DEVnP04MSfH2LdfmS2BB5Zy6iE4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl
rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE8A9, serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C
Validity
Not Before: Oct 21 08:08:55 2026 GMT
Not After : Oct 28 08:08:55 2026 GMT
Subject: CN=6ad87318-e517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:20:2a:f7:e2:91:85:93:3b:b5:7e:47:45:
ab:f2:c5:ce:e4:88:77:61:99:a9:22:68:28:46:e0:
ae:98:96:33:48:28:65:fb:cb:c2:78:f7:13:d9:6e:
09:4b:4b:33:ea:e3:69:48:33:7a:2e:f0:a3:17:62:
9e:ef:72:3b:a3:88:7f:34:b9:4a:85:58:d3:62:86:
a5:6d:02:21:3e:31:7d:3f:ae:af:dc:5c:a0:a1:54:
73:ff:b2:92:1b:22:fe:ec:18:8a:b3:74:71:33:30:
3e:37:0b:cb:b9:6d:bd:85:c3:ee:86:83:22:46:fa:
66:53:fb:db:06:ee:dd:d6:18:6c:37:96:bf:a3:97:
1f:8b:26:d0:96:37:06:4f:26:68:40:b7:89:ba:63:
56:ce:28:2a:cb:9c:84:48:2c:cb:f9:be:f5:bf:87:
29:b6:34:40:89:cd:9a:d5:56:7d:4a:73:27:7c:a8:
7b:fb:63:f1:63:7c:58:9b:a3:b1:06:ad:c6:d9:28:
ad:0e:5f:6e:92:58:22:e9:ca:db:76:c3:10:59:79:
1c:7b:38:0d:46:41:1c:c5:35:14:64:48:4a:db:aa:
05:26:d6:c8:0e:db:35:be:90:71:bc:ee:eb:21:f4:
cc:98:16:c2:c8:14:e8:75:2f:38:30:e6:69:39:f0:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:11:91:01:DE:63:20:80:46:74:23:6A:54:6A:76:78:67:F4:88
X509v3 Authority Key Identifier:
keyid:47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:49:6b:3f:3c:5f:b4:4d:bb:58:8f:d6:92:1b:d9:e3:ea:
ca:fe:9a:93:46:36:35:95:48:12:fb:a4:bb:93:39:f2:c0:33:
24:e1:24:81:84:7f:2d:3b:c9:7a:05:1e:ff:e2:f2:08:03:4c:
a7:87:49:34:ef:06:60:99:25:14:88:b8:ce:36:28:93:bd:56:
48:6b:0d:bb:d0:7c:d4:e9:76:e5:05:57:05:23:13:1c:c0:43:
4b:ea:b4:0b:dc:76:43:fc:cf:03:75:82:08:9a:37:4f:4e:9c:
38:c1:e9:4a:d8:39:99:e0:37:3b:b1:82:d1:c2:7c:f7:bc:74:
5a:de:0a:55:69:ba:99:5a:b5:52:c4:e5:9a:8a:e8:75:c2:cf:
9f:06:a4:8a:ed:51:eb:61:9b:44:36:74:5a:ff:9e:4b:60:b8:
74:26:e0:4f:4f:83:50:ac:f5:b1:e4:1e:8e:ab:0c:14:9e:74:
0d:70:26:89:cf:06:79:43:70:ef:9f:2a:6e:89:eb:0d:4b:34:
2a:e2:20:a0:52:b0:ee:42:f5:f7:cd:78:93:90:72:e8:29:03:
0c:8d:05:3f:3c:b6:3f:dc:aa:d5:2e:67:fc:a1:3f:9c:58:15:
72:23:55:cf:ab:ac:19:52:35:c5:a9:53:1b:8a:4b:67:f8:31:
ab:10:78:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkU4QTkxMTAvBgNVBAUTKDQ3NjNBQURGMEFCQTc4RTRDMDIyNEQzRURBMDZDNDQw
MEU5NzE5OEMwHhcNMjYxMDIxMDgwODU1WhcNMjYxMDI4MDgwODU1WjAYMRYwFAYD
VQQDEw02YWQ4NzMxOC1lNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYcgKvfikYWTO7V+R0Wr8sXO5Ih3YZmpImgoRuCumJYzSChl+8vCePcT2W4J
S0sz6uNpSDN6LvCjF2Ke73I7o4h/NLlKhVjTYoalbQIhPjF9P66v3FygoVRz/7KS
GyL+7BiKs3RxMzA+NwvLuW29hcPuhoMiRvpmU/vbBu7d1hhsN5a/o5cfiybQljcG
TyZoQLeJumNWzigqy5yESCzL+b71v4cptjRAic2a1VZ9SnMnfKh7+2PxY3xYm6Ox
Bq3G2SitDl9uklgi6crbdsMQWXkcezgNRkEcxTUUZEhK26oFJtbIDts1vpBxvO7r
IfTMmBbCyBTodS84MOZpOfDAIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaQEZEB
3mMggEZ0I2pUanZ4Z/SIMB8GA1UdIwQYMBaAFEdjqt8KunjkwCJNPtoGxEAOlxmM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThBOS9DRURGRjUxNkZC
RjcxMUYwOERDMUQ4MTg3MTZGNTZCQy9SMk9xM3dxNmVPVEFJazAtMmdiRVFBNlhH
WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1IyT3Ezd3E2ZU9UQUlrMC0yZ2JFUUE2WEdZdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RThBOS9DRURGRjUxNkZCRjcxMUYwOERDMUQ4MTg3MTZGNTZCQy9SMk9xM3dxNmVP
VEFJazAtMmdiRVFBNlhHWXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmDlJaz88X7RNu1iP1pIb2ePqyv6ak0Y2NZVIEvuku5M58sAzJOEkgYR/LTvJ
egUe/+LyCANMp4dJNO8GYJklFIi4zjYok71WSGsNu9B81Ol25QVXBSMTHMBDS+q0
C9x2Q/zPA3WCCJo3T06cOMHpStg5meA3O7GC0cJ897x0Wt4KVWm6mVq1UsTlmoro
dcLPnwakiu1R62GbRDZ0Wv+eS2C4dCbgT0+DUKz1seQejqsMFJ50DXAmic8GeUNw
758qbonrDUs0KuIgoFKw7kL19814k5By6CkDDI0FPzy2P9yq1S5n/KE/nFgVciNV
z6usGVI1xalTG4pLZ/gxqxB4qw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 16:09:28 2026 by rpki-client