
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
File: g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json)
Hash identifier: FUVowFIafQ50bgOWHUjeoq+yPPBebNHgBBqmFwQTxOg=
Subject key identifier: DF:87:1B:E0:8D:01:98:29:A9:E3:F1:91:DA:D8:C0:CF:64:6B:4C:D7
Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
Certificate issuer: /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Certificate serial: 0F12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
Manifest number: 0F06
Signing time: Wed 22 Jul 2026 17:47:48 +0000
Manifest this update: Wed 22 Jul 2026 17:47:48 +0000
Manifest next update: Wed 29 Jul 2026 17:47:48 +0000
Files and hashes: 1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: OaYTHsUed4o6Q1wWKjBlx9o62PXwKH/S/A0GIlVB1Ok=)
2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: 4lDpGUim/KAgzaEuEFqQeILbJPyTanzET71bwtPn5Wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl
rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3858 (0xf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Validity
Not Before: Jul 22 17:47:48 2026 GMT
Not After : Jul 29 17:47:48 2026 GMT
Subject: CN=6a610244-7a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:54:a4:78:eb:2e:e8:b1:5f:31:f0:4c:bb:
48:a7:65:03:d2:67:c5:a2:14:2e:44:24:da:5b:bd:
97:68:47:15:03:51:31:36:6c:f1:f8:c9:61:db:4c:
4a:ac:ba:10:eb:c9:0d:e6:3a:56:be:43:3d:10:2a:
e0:e6:5c:97:ca:99:18:a2:b9:ee:e7:f9:ea:fe:86:
bd:8e:4d:5a:ab:44:b9:54:af:d2:c8:02:2e:57:d5:
1c:33:39:c1:e2:56:d8:f4:e6:f8:d8:c9:71:48:75:
ff:d8:b7:6c:c8:1e:b5:6f:95:88:c1:e1:a9:ad:e8:
bc:36:2e:ac:7e:65:d2:fb:45:d3:65:f1:e7:8e:85:
3d:2c:0c:85:ce:ba:d6:0f:50:aa:73:ce:be:ef:94:
ad:60:2a:9d:c6:9e:98:9a:01:f2:cc:c3:fb:6b:30:
ef:09:28:e6:bd:d4:dd:d3:0f:be:ba:06:66:83:20:
a5:8f:a2:6d:0e:91:ac:0c:e5:d2:99:97:7f:de:cd:
e8:53:4f:ba:2f:96:22:06:d5:c4:15:4c:9a:27:f8:
66:28:db:76:fd:68:4d:c8:ec:d6:b6:73:b3:ec:b5:
a8:bf:2a:19:1b:f2:c1:01:d6:fd:94:4b:f9:ea:89:
9e:ef:2e:cc:28:a4:51:c6:96:6f:85:9d:b4:a5:79:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:1B:E0:8D:01:98:29:A9:E3:F1:91:DA:D8:C0:CF:64:6B:4C:D7
X509v3 Authority Key Identifier:
keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:73:fb:5b:e5:8f:cd:4e:0a:55:b9:7b:96:3f:48:8a:5b:6f:
af:85:16:67:9c:36:e0:04:8e:a8:36:8e:77:ab:05:5a:9e:49:
c4:d5:30:89:fe:b3:bf:54:95:e2:ca:11:24:20:0c:85:43:a1:
c2:98:64:a1:bb:41:18:15:9c:12:a0:a6:48:cc:fe:45:65:93:
bc:e4:39:4f:73:0b:d7:50:21:93:48:65:5f:b1:84:cb:67:80:
c7:0d:34:57:4a:5f:d6:d2:1b:d6:cc:51:e0:e1:a7:16:1f:e7:
78:9d:dc:14:0d:7a:bb:e1:98:d0:ed:0c:ae:6b:64:83:35:6e:
11:51:2a:06:ee:fd:70:ee:db:cc:3d:20:ca:68:55:94:2e:23:
cb:79:77:83:c3:67:07:fb:8d:a8:05:c4:87:08:d4:f2:8f:79:
8f:09:38:2f:1b:29:44:52:1c:3e:72:06:75:d6:b4:9b:ee:3f:
56:7f:ac:33:82:b2:57:1d:a7:ec:b3:5b:4b:06:16:d8:48:2f:
5b:3c:b9:59:96:bf:1e:a9:58:9b:87:d9:8f:02:c9:e2:be:51:
45:7b:ba:18:cf:7f:25:df:fe:c9:54:e1:88:9b:a2:8c:61:aa:
68:c7:23:3c:1c:46:62:f2:a0:21:af:d0:ac:63:1a:de:59:0e:
59:68:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:34 2026 by rpki-client