
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier: QnvchPYjN9WzRI0VNmHarw8gbZHr/++64U0/O2E4lJM=
Subject key identifier: DF:8A:63:74:CB:AA:B2:3B:DE:86:13:D0:90:1B:8B:F1:FA:A4:9C:25
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number: 0831
Signing time: Tue 24 Mar 2026 20:49:55 +0000
Manifest this update: Tue 24 Mar 2026 20:49:54 +0000
Manifest next update: Tue 31 Mar 2026 20:49:54 +0000
Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: P2Fw73qg2Lygjnojgq+Fhc0+6pcw0EP6YFBBp961bpM=)
2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: syS+9guCxEoztAFQkgarn4bONRAd62QCH19yi6osoP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Validity
Not Before: Mar 24 20:49:54 2026 GMT
Not After : Mar 31 20:49:54 2026 GMT
Subject: CN=69c2f8f2-b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:71:0c:7b:ac:6b:e2:a9:2a:22:24:bb:75:
36:38:32:11:f7:93:b4:b0:04:7f:30:b2:f8:25:b8:
22:51:56:b1:23:3b:3b:1b:72:24:a9:ae:05:9e:a7:
d0:bc:d9:f0:72:7f:42:f2:86:c6:ac:88:6a:d1:4a:
34:6a:52:8c:88:54:83:48:3c:06:69:df:ec:bf:7f:
32:ec:d8:16:f1:da:01:9c:a9:20:29:b3:8e:43:c1:
22:42:5d:98:ea:ea:2d:fa:df:2d:ee:10:a1:de:9e:
7c:49:24:0e:c0:05:a5:b2:b2:53:1e:b7:21:c9:a5:
e7:30:02:9c:6e:05:a2:a8:dc:27:51:a6:fe:3d:7b:
5b:cc:63:82:66:ea:0e:59:0a:cd:ac:c4:46:9a:f5:
25:d1:5d:1d:39:5f:d3:e9:01:f2:00:3e:14:ac:e3:
df:f9:6e:9b:01:31:3c:31:a2:10:97:36:48:e9:1f:
c6:6a:79:c0:87:df:21:c9:49:84:2a:4a:f0:12:d7:
1e:6a:64:9f:bd:18:6b:77:bd:14:33:f0:a9:1c:c9:
a4:aa:72:5b:23:80:88:f3:cf:06:5a:3a:9e:af:7d:
45:f6:bf:fa:26:ce:02:6a:2f:55:20:73:5a:d9:86:
76:0e:6b:10:f6:76:e9:3a:63:df:8d:0b:63:90:88:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:63:74:CB:AA:B2:3B:DE:86:13:D0:90:1B:8B:F1:FA:A4:9C:25
X509v3 Authority Key Identifier:
keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:42:a8:0e:b0:07:a8:f6:5a:0e:2f:5b:94:66:05:be:f6:46:
15:3b:8c:3f:29:8f:cc:19:12:8c:8c:49:6f:3f:75:d3:ff:0d:
88:8a:21:cd:7c:40:bf:4c:16:e6:4f:6a:c1:9b:92:1b:1d:ea:
f5:e0:51:0e:a1:73:59:52:af:66:62:6d:1f:de:d1:e1:49:ed:
56:a0:7c:15:d0:e9:4d:e2:34:51:7a:7f:af:18:83:41:df:4a:
38:f3:db:8f:1c:4c:cc:5d:80:4d:a6:56:1c:1f:8b:8a:3e:86:
17:4f:af:c1:cf:d1:63:48:6a:ef:0f:b0:6a:ac:a1:1b:cc:31:
b5:d3:20:a9:c9:9d:e4:e5:49:fe:fa:c7:dc:53:55:96:68:06:
4e:7a:0a:20:8c:20:df:ed:9f:42:f8:87:30:66:7d:a0:b5:a3:
fd:8b:d6:f8:0d:ff:25:1c:16:35:65:bf:9b:08:04:d3:cd:47:
b1:74:41:f6:5e:09:cd:1a:5a:c1:fd:ce:e9:8b:5d:ac:d6:20:
57:d5:e2:cc:2a:5f:ba:02:e9:7e:4f:dd:b0:e5:84:48:81:b7:
77:78:ad:50:ce:25:a8:e4:8a:c5:1b:a3:2c:e8:3a:51:7a:d2:
7a:5e:af:55:cb:bb:22:29:ba:13:14:9e:80:b5:1a:d6:40:23:
2f:4b:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:28 2026 by rpki-client