
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json)
Hash identifier: mpt6bAmL4299Tnw6pi4ESh5FkI5q/R6TcppTy4xE/Wg=
Subject key identifier: A2:E1:B2:CE:C0:C0:13:22:6D:33:8E:95:2F:CE:E1:5B:0C:A3:8E:9B
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial: 0D67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
Manifest number: 0D51
Signing time: Tue 22 Sep 2026 18:03:19 +0000
Manifest this update: Tue 22 Sep 2026 18:03:18 +0000
Manifest next update: Tue 29 Sep 2026 18:03:18 +0000
Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: C+61msK4qIRey+KZ1sdWHJoe0tERoiF926KPScbTTms=)
2: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: hx/XClGOxlPW04zDBJmjurX9BHlhYbmPzElIhNfYLOw=)
3: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: oNk2Yj7BAXr53shotI4NPG4FvCYNPLa/xgmkzr6F1Yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3431 (0xd67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Validity
Not Before: Sep 22 18:03:18 2026 GMT
Not After : Sep 29 18:03:18 2026 GMT
Subject: CN=6ab2c2e7-759d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:c3:c6:38:2b:aa:65:32:0b:06:59:ad:b2:
e3:a0:60:9e:cd:34:97:de:4b:c8:37:0d:a0:fa:37:
7f:ed:55:16:d0:7f:b5:07:d3:02:5c:d7:a4:a1:f8:
b3:8f:74:aa:d2:8d:7a:9d:22:9f:10:93:8a:9d:d4:
2e:a1:2b:3f:40:36:d3:7a:58:3c:60:a5:0b:2c:1c:
cc:11:2e:a7:bc:f4:09:64:b3:2c:95:79:8e:b0:f9:
fb:38:a9:72:c3:65:da:0a:10:4e:e9:cd:dc:b6:bf:
c0:be:c5:5c:7e:d8:c9:5d:5c:41:a5:53:3b:58:a2:
82:ad:08:86:ce:90:19:00:e1:f1:42:ed:6a:4b:39:
d3:08:43:be:9f:5f:cd:f5:cd:f6:1e:26:d2:7e:3c:
41:87:3e:67:8a:ae:bb:a8:38:b9:c8:ea:f9:d1:d4:
fb:2d:b0:24:9b:70:36:42:ae:f0:b2:ef:c6:ad:4e:
69:a5:86:90:f9:24:d5:41:3d:92:34:b7:47:a0:f4:
e6:07:52:65:26:36:9f:ff:f9:d2:4d:8e:c8:9f:ad:
d1:b2:a2:f1:71:33:9e:07:6c:d5:19:2c:50:a7:3a:
3c:77:49:42:3f:29:73:63:31:2c:0d:f8:e1:7b:52:
16:cc:34:20:be:3d:85:f9:75:49:03:c6:99:d3:0c:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E1:B2:CE:C0:C0:13:22:6D:33:8E:95:2F:CE:E1:5B:0C:A3:8E:9B
X509v3 Authority Key Identifier:
keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:7a:65:a8:2a:cd:66:64:d3:c1:a8:8e:61:d5:23:2d:c5:
d9:48:b7:06:48:d2:e7:ef:5f:b3:ed:26:33:18:63:47:54:c2:
e8:9f:06:4f:f2:59:09:e9:df:3a:38:29:37:fd:12:5f:8a:f8:
2c:4b:49:22:3f:3c:b3:43:a2:4b:48:53:43:83:66:62:1c:82:
17:0c:27:2c:50:11:9b:85:d9:a5:5a:e8:b1:26:cc:15:3c:ba:
f9:8e:8f:43:65:60:9c:ac:d5:49:21:31:df:e7:c6:bc:4c:0c:
5a:cd:2b:12:94:33:db:7f:a9:42:23:cd:2c:ad:46:df:fd:54:
98:41:51:f3:29:ef:10:89:9d:18:7c:2e:48:03:78:b9:b8:e5:
09:3d:ec:3d:66:0e:c0:11:39:6f:ad:0b:74:0f:d1:b8:c8:4d:
5e:91:3b:68:48:4e:b7:a5:f4:3e:66:93:9f:69:25:7d:8f:fa:
81:c1:5d:a9:bd:81:90:52:52:f5:b0:8d:42:63:0e:58:d0:23:
a2:80:74:5c:36:34:f7:3b:60:1d:92:82:4f:27:42:f9:17:68:
6b:7f:df:02:f6:b1:ad:f5:a9:8a:de:da:e9:53:82:6f:28:a0:
19:e5:5d:e4:c6:73:c5:ad:15:c5:af:35:a9:f2:71:f2:14:ae:
ab:ff:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:19:19 2026 by rpki-client