
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File: 8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier: cECKYUvnphnFFeSdVbZwnKOAb7YrwfJj5NGPwvMGpEM=
Subject key identifier: E5:BD:E3:D3:78:34:DA:B6:5F:3B:A9:D2:D7:C7:79:BA:56:AF:51:CD
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer: /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number: 82
Signing time: Tue 27 Oct 2026 08:01:58 +0000
Manifest this update: Tue 27 Oct 2026 08:01:57 +0000
Manifest next update: Tue 03 Nov 2026 08:01:57 +0000
Files and hashes: 1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: OW62L6/KIQe9FtKM1bwGE/ecdY+isuIW0ATbgh/OZ8g=)
2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Validity
Not Before: Oct 27 08:01:57 2026 GMT
Not After : Nov 3 08:01:57 2026 GMT
Subject: CN=6ae05a76-2d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:30:66:1d:c4:86:de:fd:fb:37:e1:cb:a8:
27:de:70:f2:21:c5:e9:6a:08:7b:bd:16:15:94:af:
3f:4a:f8:84:17:5f:c6:a3:29:e0:c4:7c:ab:0d:52:
b6:18:fb:56:86:cf:b3:b1:67:43:40:ae:b3:ff:55:
cb:01:e5:3c:2b:ee:51:5d:c5:3c:09:54:e4:20:30:
71:99:dc:92:e6:06:08:1f:9b:70:b0:19:c8:29:df:
d0:86:e5:0c:e0:41:bd:f1:40:a4:54:09:61:d4:48:
b8:2e:5b:18:75:64:f9:33:77:c3:7f:82:ff:32:fd:
f0:f4:93:f7:a9:19:09:a3:96:e2:6d:fb:96:34:62:
07:52:9c:08:9a:2f:20:01:91:2d:10:07:62:af:e5:
88:59:45:60:da:a1:97:e0:71:e9:2d:22:5c:e0:9e:
e1:de:f9:89:04:84:ac:ce:93:f8:af:bb:38:c8:4b:
41:7e:80:79:2c:f8:16:74:72:ec:51:91:20:8d:bf:
3e:41:eb:d9:2a:2b:67:13:b4:6f:ec:93:6a:80:9b:
5b:0f:f5:e2:8d:fa:35:d3:1e:9a:95:a4:2e:ac:5f:
c4:1f:12:73:cc:cd:b9:44:21:0f:a1:8f:d8:67:bf:
d6:ae:2e:81:28:a1:c8:5b:9c:0c:86:91:91:aa:aa:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:E3:D3:78:34:DA:B6:5F:3B:A9:D2:D7:C7:79:BA:56:AF:51:CD
X509v3 Authority Key Identifier:
keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:24:88:0e:93:6b:51:7c:b4:b0:88:69:b2:63:38:b4:19:
74:b8:2a:c9:b1:ed:64:57:54:02:f3:84:c5:97:93:25:fc:4d:
87:bb:5d:43:d6:8a:8f:95:12:3d:d0:7b:73:0c:d8:4c:34:23:
17:8c:16:70:e2:21:c6:28:c3:3a:9e:b2:75:11:96:a4:c9:b5:
49:f6:04:50:02:9c:e9:27:26:ff:53:64:76:9b:b4:e1:bd:2f:
97:ce:f8:14:71:0b:9a:47:e8:0c:50:ae:8b:8a:51:e7:bc:dd:
da:de:03:9c:ef:30:f9:12:42:b4:a3:9f:4f:e4:f5:41:cf:f4:
6b:c9:e0:2c:84:ee:70:df:1c:3a:bc:77:5d:90:4e:31:6b:56:
91:3a:22:40:bf:22:98:63:25:11:7f:5d:4c:d3:4e:75:01:d5:
dc:f2:32:16:0a:93:e3:98:75:23:b2:4b:41:a5:c7:30:23:8c:
93:3a:ad:23:5e:1d:7b:3e:73:2c:7e:39:26:50:cc:da:5b:44:
8c:32:f2:c6:f6:a9:3f:7c:cb:80:a5:f3:93:51:c0:bd:26:eb:
ac:c3:f9:55:96:5f:06:11:64:a4:34:33:b5:4a:a3:37:a6:59:
12:c6:44:3e:2d:bd:ed:4a:d9:cc:29:ff:33:a6:4d:72:1d:71:
ee:6b:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:29:59 2026 by rpki-client