
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
File: g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json)
Hash identifier: XLhTVXvGcknIVCCY3Wa/2imvjnzeM5IVzptpdxKfKuE=
Subject key identifier: CA:A1:CF:CC:CD:83:28:56:D1:CA:B4:A8:58:6A:BB:7E:B1:A1:70:F6
Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
Certificate issuer: /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Certificate serial: 0F20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
Manifest number: 0F14
Signing time: Tue 18 Aug 2026 17:49:25 +0000
Manifest this update: Tue 18 Aug 2026 17:49:24 +0000
Manifest next update: Tue 25 Aug 2026 17:49:24 +0000
Files and hashes: 1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: wUimQajnzt4P+yQ8txHd+lPMMEiUkWYkmfs6YZf4RhQ=)
2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: 4lDpGUim/KAgzaEuEFqQeILbJPyTanzET71bwtPn5Wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl
rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3872 (0xf20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Validity
Not Before: Aug 18 17:49:24 2026 GMT
Not After : Aug 25 17:49:24 2026 GMT
Subject: CN=6a849b25-004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:56:52:aa:6e:3f:5b:6e:55:ee:5c:ab:7a:
0b:ef:83:97:b2:ee:f0:75:2e:60:ce:5a:a2:ff:9e:
e4:1d:60:24:08:2c:1c:c5:dc:81:ba:5d:9e:ba:f4:
88:10:bd:fd:c4:c4:02:65:29:b0:04:16:29:f5:ab:
16:0a:bb:d9:dc:e0:99:af:89:eb:70:07:af:14:b2:
2f:23:a3:a7:77:16:3a:53:e5:31:a9:05:bb:12:a7:
59:c4:12:fe:3b:c7:1c:95:37:77:38:d7:25:81:ff:
a7:6c:32:11:0f:57:bb:68:93:c6:08:bb:ce:c3:2b:
c7:d1:4c:1c:3a:2f:00:cb:e8:b1:2f:4e:f8:0e:85:
2a:83:a7:5a:da:07:b3:3c:b0:b9:82:5d:15:e0:6e:
3c:25:dd:0e:3d:98:d9:24:2c:79:49:b1:dc:b6:b7:
82:1d:10:64:a2:d5:f1:2f:8a:0a:f1:f2:be:ad:e4:
25:a0:9a:6a:3f:ae:89:57:cd:5c:bb:c4:23:ec:36:
68:a3:42:2c:e5:86:fb:b1:2e:9c:ea:37:7e:5f:83:
5e:80:de:4a:6a:a4:75:23:b1:8b:b8:6b:2e:46:91:
a9:d7:c2:33:07:4d:e2:6f:53:ca:d0:41:21:96:28:
06:79:8b:73:a1:ea:de:ad:82:c8:9b:83:e0:1a:2e:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:CF:CC:CD:83:28:56:D1:CA:B4:A8:58:6A:BB:7E:B1:A1:70:F6
X509v3 Authority Key Identifier:
keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:12:28:9d:17:fc:7d:54:3a:65:5e:3a:b8:bb:da:18:80:1d:
71:34:0b:bc:b4:23:ab:4d:3b:46:cb:c1:81:c5:63:d6:e1:33:
81:2a:ff:eb:f4:91:35:d0:7f:66:76:bc:91:12:34:e9:58:c6:
0e:04:23:a9:c1:6a:97:bc:41:0b:d5:d8:cb:0c:d2:0d:5e:ca:
4e:86:19:84:8a:c5:2d:a2:73:34:7c:76:1c:8a:2f:de:cc:08:
f5:ce:1f:fb:43:51:65:12:d9:1b:14:7f:e8:13:0c:2c:8c:d1:
dc:bf:d5:67:a2:58:87:c6:d1:eb:bf:82:4c:c5:05:99:fa:85:
f5:b1:6b:f4:47:28:fc:f7:85:4b:64:23:a3:1a:dd:06:5c:5e:
5b:28:b1:74:b8:b2:e0:01:ea:49:fa:73:f2:e5:d8:0d:b4:48:
3a:6d:71:6a:89:55:ca:35:c8:fe:fb:d1:e7:2b:31:e7:46:f8:
bb:be:14:91:17:12:0e:97:f3:a9:b6:47:a6:f1:11:d2:45:ed:
97:b1:3a:8e:bb:34:f4:9d:5c:d3:8a:ea:c4:ad:bd:82:a1:86:
9b:d2:de:2b:3f:f3:86:32:6f:b2:8b:1c:13:9f:c3:21:a2:02:
ae:47:1d:d0:94:82:62:0c:cd:21:54:39:15:2f:1d:ef:54:91:
6a:15:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:45 2026 by rpki-client