
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json)
Hash identifier: P9PFZfq43/eJE66TW5MfHhkh6YpB5x8HRGQBppwyExA=
Subject key identifier: DD:73:0B:F9:A3:27:1D:08:E8:7C:4D:1F:A9:05:1E:B6:89:23:C4:67
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
Manifest number: 6E
Signing time: Sun 01 Mar 2026 09:15:50 +0000
Manifest this update: Sun 01 Mar 2026 09:15:49 +0000
Manifest next update: Sun 08 Mar 2026 09:15:49 +0000
Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: uCpriFgIVycbh+BtzeFYj9khwtRYiHCz007cdD8RacU=)
2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Validity
Not Before: Mar 1 09:15:49 2026 GMT
Not After : Mar 8 09:15:49 2026 GMT
Subject: CN=69a403c5-e96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:b1:d5:c4:8b:54:b8:15:0d:41:23:3b:ca:
42:e9:70:be:8f:a1:c6:39:01:ee:01:96:7e:4f:f3:
f5:ef:11:9f:43:11:05:16:c1:52:7a:bc:14:ce:fa:
06:e9:4a:1e:8f:bc:b2:5f:f5:cc:19:9e:0d:95:2c:
d3:99:e3:dd:c5:d5:47:57:d5:1a:b2:5c:b7:17:1b:
15:89:df:ad:74:81:19:2b:76:19:2f:3b:14:ee:15:
c9:9e:2a:a0:84:95:67:9f:51:28:f2:65:b0:e1:fc:
f5:45:f4:30:d4:ea:40:2e:85:be:1f:26:1d:75:d8:
85:52:79:4a:33:c6:a5:f9:ff:54:1e:4b:31:d7:cc:
ec:94:93:27:a6:2b:8f:25:a0:bc:37:0d:81:57:9b:
ef:6e:44:d0:59:f7:86:73:48:1f:bc:d6:ce:b1:a2:
2e:28:b3:3b:b3:66:08:03:36:95:71:6b:38:92:1b:
62:bf:5f:a4:dd:bf:f7:42:3d:25:33:f2:ad:dd:a9:
fd:e6:78:50:12:7c:52:6b:f1:9c:1e:25:03:28:76:
61:3f:ee:0a:00:9e:dd:c6:10:0e:d4:60:3e:16:b3:
a3:b1:1a:19:05:07:02:c1:76:f6:d3:dd:33:09:9a:
c1:37:46:6f:8c:e4:5e:20:6c:4e:a1:7a:9f:e4:23:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:73:0B:F9:A3:27:1D:08:E8:7C:4D:1F:A9:05:1E:B6:89:23:C4:67
X509v3 Authority Key Identifier:
keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ee:56:4c:b4:30:be:71:af:67:12:b2:12:da:eb:21:a9:41:
fd:94:74:ee:57:37:b2:c6:38:fd:9b:70:6e:33:b7:8f:64:f1:
44:1c:5c:c0:61:e0:38:42:96:74:00:52:d5:fb:5b:ec:10:c7:
ac:d7:1a:67:7d:9f:10:b5:77:0e:87:d0:b8:ce:3a:5a:31:df:
0e:ff:69:69:64:1d:ae:af:9c:19:d1:eb:fc:10:5f:a4:01:6b:
c1:da:af:b1:5f:f8:c5:ac:bf:04:1f:d3:86:91:f2:0a:3c:08:
b2:98:fb:5e:09:82:84:40:ae:20:89:78:71:0f:f2:93:97:eb:
14:9c:49:97:cb:57:58:88:a9:50:d1:e5:01:ee:98:76:2d:7a:
d9:4a:57:f9:0a:6f:66:a1:69:64:da:14:d8:87:05:fb:b4:01:
d7:c9:07:d3:23:f8:bf:b9:90:00:b1:4b:c0:47:3e:a0:ee:92:
a8:c1:55:0d:a9:1f:d0:32:f7:76:a5:49:9b:91:90:5c:25:0d:
7c:4e:7c:72:f9:37:22:4b:c7:5c:7f:82:c7:e1:84:3b:b7:b7:
3b:58:a5:d8:94:a2:9e:29:d1:a2:0c:45:b1:ed:8f:cd:16:36:
7e:ab:29:78:a0:01:5b:82:f4:17:ee:62:37:82:fd:41:d8:16:
d7:25:1c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:36 2026 by rpki-client