
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier: lcbU+AQeX36sYFkjfCQilNdko139VXeL6PxSWzTUads=
Subject key identifier: 6B:EA:32:2E:8C:FC:78:95:7A:4D:69:AF:8E:25:9A:65:91:DE:6D:0E
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number: 08AC
Signing time: Sat 14 Nov 2026 20:40:16 +0000
Manifest this update: Sat 14 Nov 2026 20:40:16 +0000
Manifest next update: Sat 21 Nov 2026 20:40:16 +0000
Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: bc7MisdssmFs1+Qkkzb0l6Mmlxx5vE6WHtXQMZISeLs=)
2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: 7l8WCyK2qB5Ax8El2bn7f20GEIYhxxt3GqqtbVDOp/I=)
3: 550C6AC4BF1711F18CC048DD6411F970.roa (hash: +9EX1wz9/mSm2v5dku3xql0aNVLi6Nv65cVjhwOpnHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 20:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Validity
Not Before: Nov 14 20:40:16 2026 GMT
Not After : Nov 21 20:40:16 2026 GMT
Subject: CN=6af8c730-caf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:63:2b:42:42:cf:a3:be:68:40:e3:ff:49:81:
93:0d:75:d5:ad:ed:3c:ce:6b:be:1d:70:37:ac:75:
98:4a:b9:19:79:5c:94:45:a9:e2:6e:6b:ec:a0:a1:
89:92:e1:b0:15:fb:f1:76:84:cc:05:7e:4d:b7:f8:
46:57:36:4d:d2:0b:29:19:f7:11:30:a0:a4:a5:fb:
5e:a3:d4:eb:7f:97:b4:2f:10:59:bd:6a:b7:cb:4a:
89:2d:6f:ad:17:6a:74:e9:08:32:ed:71:0b:53:5e:
59:6a:de:d1:d9:02:e5:3d:b3:12:76:d2:a3:c5:92:
d7:f8:71:dd:a6:24:8c:3b:f8:d4:1d:d7:85:e9:ba:
88:47:c1:f5:e6:80:91:bf:73:ed:a1:71:bb:00:a9:
36:e0:3e:a1:bd:3e:76:3d:39:cb:7d:eb:40:f0:82:
41:db:9b:15:ac:e9:69:64:0d:a9:41:9a:7e:a6:08:
54:eb:3c:6c:75:34:46:04:4d:60:e6:7d:af:0a:59:
95:34:e1:f5:e2:5b:dd:32:c1:ab:b1:e3:4f:ad:07:
b3:5b:71:24:8b:ea:4d:e4:eb:bd:0f:bb:9c:86:ea:
73:8a:73:a5:cd:2c:d1:5c:2c:31:91:c4:66:74:ca:
7e:ee:a2:ef:c7:4c:12:df:b5:bb:7c:c5:1d:5c:f5:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:32:2E:8C:FC:78:95:7A:4D:69:AF:8E:25:9A:65:91:DE:6D:0E
X509v3 Authority Key Identifier:
keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:78:bb:a7:05:de:1a:59:db:18:bf:8e:3a:aa:bd:4e:9b:e2:
dd:41:9d:f1:6e:71:ff:bb:54:29:65:ac:87:60:b3:a5:c5:7f:
2b:c3:45:d0:f7:ab:21:5a:44:9d:2f:c4:03:19:4f:59:0a:97:
54:fa:c2:ad:07:37:53:93:f6:79:b3:33:c6:ba:50:70:d1:47:
77:2e:27:48:19:c8:d3:18:46:4e:42:e0:3e:b2:3c:86:69:eb:
67:8a:86:44:bb:1b:bb:7a:27:7d:4c:e9:1f:62:1e:44:3e:1e:
19:da:d9:80:aa:2f:a5:3a:2d:49:3c:ff:ee:6f:a2:88:d6:32:
e0:26:c1:45:d3:0c:1f:18:a8:76:d4:ea:ea:01:62:45:0f:f3:
72:20:74:e5:9b:9c:ac:54:94:0b:f6:8d:c1:0b:83:71:05:f6:
31:31:16:c1:cb:80:db:61:17:d8:af:90:9a:b0:95:65:74:26:
f0:dd:36:82:c1:ec:66:51:2a:df:40:78:40:1b:dc:b0:99:5f:
a2:03:af:4c:84:60:b6:a9:42:97:0f:37:0e:36:b2:57:53:d6:
a0:44:b5:28:9e:2c:c5:5e:3d:37:b9:37:d8:d4:23:5e:9e:fb:
f4:cf:02:7d:fd:2f:55:9f:3e:ca:56:7e:0a:cd:9c:96:35:8e:
9d:26:de:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND
NUE3Mzk0OEUwHhcNMjYxMTE0MjA0MDE2WhcNMjYxMTIxMjA0MDE2WjAYMRYwFAYD
VQQDEw02YWY4YzczMC1jYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjmMrQkLPo75oQOP/SYGTDXXVre08zmu+HXA3rHWYSrkZeVyURanibmvsoKGJ
kuGwFfvxdoTMBX5Nt/hGVzZN0gspGfcRMKCkpfteo9Trf5e0LxBZvWq3y0qJLW+t
F2p06Qgy7XELU15Zat7R2QLlPbMSdtKjxZLX+HHdpiSMO/jUHdeF6bqIR8H15oCR
v3PtoXG7AKk24D6hvT52PTnLfetA8IJB25sVrOlpZA2pQZp+pghU6zxsdTRGBE1g
5n2vClmVNOH14lvdMsGrseNPrQezW3Eki+pN5Ou9D7uchupzinOlzSzRXCwxkcRm
dMp+7qLvx0wS37W7fMUdXPU+FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvqMi6M
/HiVek1pr44lmmWR3m0OMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1
MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w
Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARni7pwXeGlnbGL+OOqq9Tpvi3UGd8W5x/7tUKWWsh2CzpcV/K8NF0PerIVpE
nS/EAxlPWQqXVPrCrQc3U5P2ebMzxrpQcNFHdy4nSBnI0xhGTkLgPrI8hmnrZ4qG
RLsbu3onfUzpH2IeRD4eGdrZgKovpTotSTz/7m+iiNYy4CbBRdMMHxiodtTq6gFi
RQ/zciB05ZucrFSUC/aNwQuDcQX2MTEWwcuA22EX2K+QmrCVZXQm8N02gsHsZlEq
30B4QBvcsJlfogOvTIRgtqlClw83DjayV1PWoES1KJ4sxV49N7k32NQjXp779M8C
ff0vVZ8+ylZ+Cs2cljWOnSbepA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:19 2026 by rpki-client