
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json)
Hash identifier: DBPlutoIjQSA0J3LAY3wCfBerOVFMTt1u2sfmwdh504=
Subject key identifier: 18:15:C2:E3:B4:CE:D0:E8:08:09:E5:A9:F4:3A:93:B9:4B:5A:A8:E2
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
Manifest number: 0276
Signing time: Wed 25 Mar 2026 01:23:48 +0000
Manifest this update: Wed 25 Mar 2026 01:23:47 +0000
Manifest next update: Wed 01 Apr 2026 01:23:47 +0000
Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: mAzgykuYZmEnn6TyTPktxpznirzKKIYMmjg0IcnI/uI=)
2: 5F0ACC76962011F09F73D036C4F9AE02.roa (hash: zxI7VE3eg0TasmD62sh1djQSdFuNkWLF/C/+dkz7utI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Validity
Not Before: Mar 25 01:23:47 2026 GMT
Not After : Apr 1 01:23:47 2026 GMT
Subject: CN=69c33924-2274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:52:10:f5:76:0a:04:f3:d4:6b:3b:18:a1:
3c:2b:b0:da:77:9f:fa:e4:b4:52:7b:cc:c0:4d:bf:
e0:fb:48:b9:d0:29:f2:c9:44:0f:ab:89:d3:51:09:
66:27:95:24:e2:ee:a9:6a:66:7b:ec:53:33:61:d3:
c9:55:81:a4:4c:f1:c2:80:04:6e:f7:57:a5:ca:32:
e3:e8:56:27:e3:19:28:4a:72:b8:cd:ed:5e:e1:c4:
4e:2d:8e:e9:c4:0f:32:35:ec:a7:a9:5e:f1:37:63:
a3:af:1c:17:09:fa:7b:b4:05:69:fa:d9:52:7c:3c:
26:7b:cf:32:93:36:21:e2:94:a5:09:31:23:a7:d6:
30:dc:c0:fc:de:40:07:9f:88:31:79:c4:a4:88:c1:
4a:1e:81:c9:ff:e6:29:dc:6b:73:a3:27:ca:06:f3:
af:0d:35:65:07:61:2b:3a:ce:60:e7:cd:e9:66:a6:
dd:2f:12:76:cf:1c:49:68:54:bf:d5:4e:4f:dd:3c:
7f:99:e2:2e:75:63:93:e5:98:56:95:f9:b1:81:3e:
34:00:08:6c:5a:f6:3b:31:ff:37:c4:f5:c8:d2:e6:
90:72:90:72:d5:1e:43:4f:55:d1:24:5a:20:d6:e6:
ac:76:f1:47:47:54:ad:b1:a7:fd:c8:3c:1e:dd:29:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:15:C2:E3:B4:CE:D0:E8:08:09:E5:A9:F4:3A:93:B9:4B:5A:A8:E2
X509v3 Authority Key Identifier:
keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:ee:c2:39:4c:04:60:a1:5f:08:a2:5f:93:a7:d3:95:2a:
a7:cc:72:14:57:bc:3a:57:d8:f8:be:f5:73:c3:1a:73:9c:de:
55:b4:47:7a:9c:57:57:d1:56:76:f4:13:36:bb:d7:7f:45:69:
72:02:49:1d:3a:33:b6:3b:4a:f9:8f:c7:b3:c7:76:25:ec:d7:
6e:94:14:0f:3f:11:49:4f:38:17:c4:8c:a3:83:d6:2c:f2:fa:
60:cb:76:f3:dd:4f:14:61:bd:c5:ad:13:fd:fc:18:21:56:94:
72:6e:b6:68:6c:52:b4:0c:dd:fe:36:e3:44:42:fe:3b:37:6d:
80:99:1c:c8:53:5c:47:23:de:07:7b:3a:e1:3a:c9:a0:3d:c8:
a4:28:58:81:7e:05:e6:a2:47:c0:fa:ef:ed:47:00:57:25:49:
a2:26:b8:5e:f5:83:a4:ad:99:c2:8f:43:c9:3f:8b:78:18:4a:
51:b7:d9:92:b5:eb:f4:28:97:c3:83:09:6e:19:8b:bf:c8:08:
4f:36:88:c8:19:c0:4d:68:49:57:35:c2:15:e0:f2:87:10:d2:
69:45:63:d1:da:b3:48:3c:88:61:ca:dc:17:af:a0:9e:4c:35:
23:fb:c6:33:70:5f:8e:c8:2d:73:95:eb:74:4c:9b:08:90:20:
54:c6:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:07 2026 by rpki-client