
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json)
Hash identifier: 5zcjgauGwuOCexJtLdPdcU2INOR5d/R0YAM14HpB0Cs=
Subject key identifier: 1E:D8:41:6C:1C:2E:C5:C3:CD:F6:CE:64:1A:C0:5C:30:B0:9A:BC:68
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
Manifest number: D6
Signing time: Wed 23 Sep 2026 06:27:33 +0000
Manifest this update: Wed 23 Sep 2026 06:27:32 +0000
Manifest next update: Wed 30 Sep 2026 06:27:32 +0000
Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: eOzTQOTWZP1Q6Wo41eMr+yac4EdiyMVf1nlEZZPDTtI=)
2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Validity
Not Before: Sep 23 06:27:32 2026 GMT
Not After : Sep 30 06:27:32 2026 GMT
Subject: CN=6ab37155-dff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:a9:66:eb:01:e1:9f:0b:0f:12:2d:47:50:
08:b4:a2:8d:d2:b2:83:8c:18:12:6f:7b:8f:4a:bb:
f3:25:c3:ec:66:b2:63:ef:55:d0:d6:99:75:81:9c:
0d:48:0f:c9:74:8c:04:ee:0c:80:ed:5e:68:6e:a2:
af:da:01:9a:ab:aa:fa:a3:88:c7:b3:0c:da:39:6b:
18:0c:96:d1:04:c0:e7:ae:d7:38:d9:8f:39:53:5a:
b1:8a:b0:c0:8b:f2:15:04:52:b4:38:02:29:4e:0a:
cb:60:35:53:d3:96:a3:34:bb:1d:e6:ee:de:b8:12:
e5:ef:95:78:d7:74:f7:6b:51:94:3c:70:76:d8:1f:
84:45:15:c1:73:dc:b7:d6:da:ff:1f:7c:7f:36:8d:
c3:73:45:49:b8:82:15:00:91:97:cb:1d:dd:1d:4a:
df:bb:a8:73:b9:04:78:77:87:6f:33:27:cf:89:92:
2e:ef:a8:a1:ad:16:e8:98:bc:4d:de:3f:15:d0:ce:
90:8c:09:12:49:86:3c:b6:4f:7e:06:e3:ce:28:d8:
8e:9d:72:3a:fc:eb:8a:8a:ce:f4:7c:d1:87:8d:f3:
c1:e1:86:78:0c:45:24:6f:95:4c:bd:fe:32:7b:c5:
aa:8c:bc:48:f5:4b:ca:d6:a5:3a:5d:5e:79:e3:55:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:41:6C:1C:2E:C5:C3:CD:F6:CE:64:1A:C0:5C:30:B0:9A:BC:68
X509v3 Authority Key Identifier:
keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:78:97:f6:26:90:95:0a:dd:8e:de:fd:5c:a5:51:13:ec:71:
f5:ae:c6:36:2a:c8:d0:ff:23:58:79:3d:c4:44:7a:ac:5e:9b:
3a:5e:c6:79:2f:83:2f:50:e0:f6:4e:23:38:61:dd:7d:ce:80:
4d:57:af:5a:e3:c7:1c:62:96:00:74:cc:87:d6:3e:b4:59:54:
73:cd:bf:e6:be:8e:6d:e7:26:fa:b8:cc:3c:d3:f6:dc:d6:08:
1c:8c:5c:7f:f2:ee:27:6c:b1:56:53:f1:30:e2:60:dd:d4:17:
ca:da:7d:69:80:03:d4:8d:eb:6f:38:10:33:79:6f:b4:d1:1b:
bc:d7:b5:65:90:37:51:d9:ec:23:88:d9:0a:43:7a:6a:3f:d5:
6d:9a:dc:78:a8:e3:a2:fd:87:a4:c7:75:df:31:1f:a6:91:89:
70:89:05:a3:b0:3a:4d:0c:a1:a5:cd:53:75:d8:79:83:a0:32:
8b:01:39:ca:78:38:08:2c:22:85:11:8d:04:a8:38:cc:5f:eb:
27:26:2f:8f:ea:c3:e9:85:ae:c1:77:a6:89:19:18:ce:49:0d:
1c:ed:3e:f1:c9:d9:14:b4:a6:c0:db:d7:86:2d:15:7e:84:22:
f7:05:3e:00:d2:23:12:2a:36:0d:c4:9f:de:55:55:54:63:c5:
9a:d6:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:05:55 2026 by rpki-client