
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier: pePwm8zhJ8XnP39Tnx901/08mZLUyas3spT6Y3hnaPI=
Subject key identifier: 83:7F:DE:26:E0:FE:64:2C:E9:16:F8:2A:E5:67:15:42:94:C5:B9:A3
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number: 86
Signing time: Mon 05 Oct 2026 08:04:05 +0000
Manifest this update: Mon 05 Oct 2026 08:04:04 +0000
Manifest next update: Mon 12 Oct 2026 08:04:04 +0000
Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: QOAF1athY1wtw65Mydz6i88BojJ/xCoxFFwiA3ytC08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Validity
Not Before: Oct 5 08:04:04 2026 GMT
Not After : Oct 12 08:04:04 2026 GMT
Subject: CN=6ac359f4-12fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:79:64:83:1b:f7:0c:53:14:7f:d6:40:71:
5a:c1:22:28:0a:bb:96:b9:68:75:1d:a7:d6:3f:e2:
b3:41:c6:67:69:b8:77:e0:80:fe:20:94:b4:6e:5f:
37:b6:fd:d7:6c:84:ea:5f:01:e7:19:c6:b8:62:b1:
89:0e:19:f6:84:70:4f:b7:46:88:7f:64:d6:81:0f:
e1:20:0f:b5:a9:9f:89:ad:f9:d6:9d:87:02:51:01:
0c:64:48:cc:4c:53:77:cd:cb:03:38:fa:e6:7d:e3:
4c:ff:51:88:64:4c:f8:dd:70:03:2e:7c:77:0c:58:
92:f4:8c:23:05:76:dd:6a:f3:d0:e1:5a:c5:30:b9:
2c:a4:a2:3d:d6:5f:cc:e1:a3:9f:6d:25:61:f6:a5:
8e:2b:2c:ba:15:e8:b8:27:90:2d:2b:97:0a:36:c2:
2e:c7:45:fe:5f:ae:00:be:5c:e8:96:ae:7c:b5:89:
15:66:a3:01:7a:81:0f:82:83:49:99:eb:35:0f:16:
23:56:15:4a:32:1c:16:29:89:3f:da:05:02:df:40:
2b:c3:4d:d0:4e:c5:42:d4:98:3b:be:39:68:46:e9:
dd:ea:65:25:3e:0b:9d:bd:ec:c6:2d:0e:0d:d4:de:
15:ba:eb:d3:b4:34:33:ac:aa:6b:b5:02:fe:cf:5f:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7F:DE:26:E0:FE:64:2C:E9:16:F8:2A:E5:67:15:42:94:C5:B9:A3
X509v3 Authority Key Identifier:
keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6f:97:70:f4:1f:40:94:e2:2b:d8:59:59:61:5f:e0:4e:fe:
c9:83:20:d8:ba:62:4e:15:b8:15:ad:4a:d1:e6:a6:96:6d:21:
ff:70:e4:31:f2:b6:30:f1:de:3e:b8:a5:81:e2:cc:fc:59:dd:
89:4d:c4:59:9b:48:96:ef:e8:b5:00:6c:6a:bc:98:51:02:cf:
cc:59:78:17:ed:5f:4c:9e:80:46:a5:92:19:50:26:ae:93:d0:
f6:1f:b9:ae:61:73:e2:a4:74:8c:93:bc:a2:a9:17:ef:de:6f:
82:22:9c:fd:9a:74:10:f1:2e:a6:3c:6b:5b:0e:37:47:7d:17:
55:e1:ad:ab:d5:f4:86:64:c5:9e:e6:2f:a8:0e:ab:53:78:eb:
8b:35:df:0e:94:b4:88:fd:f9:05:13:d2:46:e5:2b:1a:17:85:
07:fc:22:d8:be:21:47:d7:60:8e:44:f0:52:a5:b6:bd:0b:9f:
dd:56:b1:8b:aa:74:cc:51:c3:f4:7c:c4:41:a4:1a:1b:ac:fe:
d0:f2:3c:32:ee:e5:31:95:14:32:2d:01:f2:3e:a7:43:1d:82:
76:c7:ac:5f:95:7c:a1:fc:26:78:cd:5d:98:a8:e3:72:c3:d8:
b2:b0:0e:99:25:38:98:af:52:71:35:aa:b3:cb:b1:a3:6a:1a:
61:88:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:45:59 2026 by rpki-client