
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json)
Hash identifier: q4G9kkjKzRJhBZwiWxSup94gJ88xx7qYoHA1WF9JMEk=
Subject key identifier: 31:71:A3:08:A8:EC:5C:F7:43:C7:3D:3F:58:07:F1:81:84:1A:15:A4
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 0B13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
Manifest number: 0B10
Signing time: Tue 18 Aug 2026 19:36:20 +0000
Manifest this update: Tue 18 Aug 2026 19:36:19 +0000
Manifest next update: Tue 25 Aug 2026 19:36:19 +0000
Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: Udj/juhFu3Zl+D75+0vzJnCLP2JICuSEgHMchxwSbME=)
2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2835 (0xb13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Aug 18 19:36:19 2026 GMT
Not After : Aug 25 19:36:19 2026 GMT
Subject: CN=6a84b434-a7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:ab:0d:e8:d9:b9:1c:e5:bd:08:ec:06:b8:
39:66:d1:0c:c4:36:a4:0d:f7:a9:97:72:f1:15:ea:
91:ef:ed:4a:92:98:2a:0c:84:2f:98:ec:b8:89:d3:
52:16:22:57:43:72:74:dc:23:8e:e7:3a:a0:4d:94:
61:2b:2b:51:d2:40:15:41:79:bf:a7:cc:d5:77:0d:
d3:85:eb:9e:21:79:a2:80:cc:97:74:cb:63:0c:45:
3e:0d:62:03:55:cc:05:c8:88:93:3a:cf:e0:2e:15:
33:0a:62:09:58:b5:e6:50:6a:fe:d9:45:b2:b2:16:
09:8c:ae:d8:9b:8b:8c:77:89:31:c6:65:4c:a6:89:
ca:77:b3:b5:9c:92:38:f7:f3:d0:b2:fb:15:3c:0c:
fc:c0:f2:48:5f:05:6c:97:1e:fd:e3:57:5f:8e:c8:
db:26:ff:9f:74:f3:4e:6b:40:be:9f:ea:46:c9:5a:
25:c3:6e:7f:5b:78:36:4f:36:e7:06:df:41:24:c9:
37:f5:76:7a:89:10:18:78:57:31:30:fd:7f:ed:59:
89:f3:fa:9f:03:7f:78:36:83:4f:ca:e6:44:85:04:
82:e9:94:87:ca:1d:29:b3:6b:13:75:16:0f:17:01:
13:c3:89:2d:f3:64:a5:37:3f:5a:1b:ba:96:b7:a6:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:A3:08:A8:EC:5C:F7:43:C7:3D:3F:58:07:F1:81:84:1A:15:A4
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:9c:3f:4c:99:8c:77:a0:9b:f0:bb:5b:37:46:61:bd:df:33:
0c:19:e7:0d:43:71:bb:a8:b2:d6:65:40:ad:15:ab:3a:cc:8b:
f5:14:3f:43:01:b7:76:08:eb:7f:ad:34:47:9b:c9:41:1a:ba:
69:ea:c3:7e:6b:8d:e7:f6:c5:79:d1:a5:42:4c:65:b6:0b:3c:
b9:5f:77:bc:4d:8a:8e:40:aa:53:0e:7a:47:2b:61:90:73:c8:
62:69:2d:3f:9b:11:7a:2f:a4:54:8d:6f:8c:69:20:cc:a7:4d:
31:d9:d6:99:2d:72:6a:c9:0e:ff:f3:2b:fe:67:f5:21:71:66:
06:bb:c3:c9:ff:5e:0a:26:fc:55:28:5b:97:9a:94:cf:65:d5:
16:08:0a:a5:35:d8:b0:bc:87:d1:d6:63:86:9c:ef:d9:f8:01:
c3:e5:37:fa:fa:1b:8f:36:ae:03:25:cf:84:2e:42:1f:e7:f5:
0e:2f:ac:ce:0a:d6:aa:5c:17:22:c9:61:32:2a:85:cf:95:d6:
17:cf:d9:2e:27:8e:6d:81:67:0b:3f:92:79:85:f0:4d:5c:58:
d5:26:cf:2c:9d:bd:8c:f9:d2:d5:5e:d9:79:67:41:78:b9:10:
ff:24:66:5e:25:1f:05:a2:31:ef:e7:17:c8:6d:f0:85:69:8c:
6a:e3:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:59:12 2026 by rpki-client