
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: SPo/s0HUh7fjwxxWQnsGJeKW6PoPrdL4qqpEDlyQ7WE=
Subject key identifier: 93:35:D7:E8:40:E8:F9:C2:DC:6D:B9:30:BE:5F:88:10:CC:84:46:8F
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 0882
Signing time: Mon 28 Sep 2026 20:56:09 +0000
Manifest this update: Mon 28 Sep 2026 20:56:09 +0000
Manifest next update: Mon 05 Oct 2026 20:56:09 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: f+z+VtoOa7uKWGYaN2wy6U6h5PzAaSNKbGacSQbk23U=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: wjDSbRQKtPAWbh/Hzs+97MdegPLfvSS74VnDP3uybto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 20:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Sep 28 20:56:09 2026 GMT
Not After : Oct 5 20:56:09 2026 GMT
Subject: CN=6abad469-23b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:09:dd:7f:9a:85:5d:22:6d:0d:31:24:52:0c:
db:14:fa:59:93:e5:12:3e:4e:ac:4f:6e:c3:ae:2c:
22:58:e4:e4:18:fc:48:20:cc:58:c3:2a:81:5a:79:
00:10:33:de:ef:75:cf:4b:95:7d:d1:8f:e5:f3:80:
89:d0:ab:f7:4e:73:a1:7a:34:37:1a:63:5f:2e:f5:
9a:82:ec:67:65:59:cf:bc:43:46:4c:0e:39:1f:dc:
e8:7b:cc:0c:ba:92:a3:6b:10:c4:9b:b6:ec:49:3b:
74:3b:9b:b7:4c:86:f8:09:0c:9a:a2:b8:41:79:d9:
43:21:03:79:c9:34:f3:42:7a:75:43:b1:37:7b:cc:
b9:15:29:41:5e:06:8d:98:56:ed:52:61:e1:f2:47:
e5:43:43:42:5c:39:4f:9e:5c:8c:ab:d2:45:f3:ec:
87:6c:ce:2c:d9:5b:c2:73:e8:98:ae:e6:a0:e8:6c:
af:36:70:05:5c:7c:d3:fb:65:80:ec:8c:d3:4f:95:
65:b8:8c:62:1e:8d:94:8d:88:48:72:9c:f9:cf:77:
b2:66:17:8a:c3:38:52:59:90:e1:0c:71:64:d4:0d:
c7:1b:df:a6:f0:0a:7b:93:87:fd:f3:7d:bc:47:a0:
d1:1f:cd:e6:b8:35:80:63:9a:ae:76:aa:84:21:45:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:35:D7:E8:40:E8:F9:C2:DC:6D:B9:30:BE:5F:88:10:CC:84:46:8F
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:43:51:30:39:2c:bb:13:ce:55:17:4c:ac:f6:82:80:f4:8a:
a2:62:89:d8:6e:fd:c8:53:e2:d3:47:93:d5:bb:b8:cd:9a:74:
c6:62:4e:bb:8b:2c:36:ff:2e:c2:f1:cb:b8:66:e9:c1:25:e9:
83:b6:59:8c:79:3a:ac:46:94:0c:78:fc:e8:5b:bc:57:13:ce:
67:f8:50:6f:07:f1:11:89:6e:b3:11:e3:1e:93:1e:ff:72:17:
c1:54:c1:59:bf:44:25:93:3d:24:1f:b9:f6:22:1f:cd:37:0a:
d0:3e:60:48:e8:5c:be:d4:0a:ac:73:4f:00:44:ac:99:36:db:
03:d3:4b:40:8e:b8:40:77:7d:b9:5f:07:fb:e0:95:33:34:fd:
7f:5c:67:67:60:13:ce:05:7c:88:d7:7e:31:12:a3:8f:c2:fa:
68:08:b6:03:5a:42:d2:76:55:27:45:fd:7c:89:ae:42:b9:79:
5b:bc:95:73:51:96:a5:15:f5:0e:b3:67:e8:9f:d8:2d:2e:dd:
14:81:7b:c9:a1:93:7f:c4:f0:9c:9f:a5:a2:9c:50:30:0b:3d:
3a:27:a1:28:b9:dd:7d:cd:8d:57:0a:dd:cd:c0:e8:e2:95:55:
ab:15:39:00:11:88:72:49:53:4a:5f:d9:54:fd:90:45:13:18:
b7:0e:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:56:36 2026 by rpki-client