
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier: ZAr3K6nQp8DT93QUoNPGjg2LabXRHGGEujnXjT0Ww4A=
Subject key identifier: CE:63:56:5A:66:4B:93:19:90:2B:5F:5F:31:CA:D7:96:4C:9D:D2:FB
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial: 083C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number: 0823
Signing time: Sat 28 Feb 2026 21:31:19 +0000
Manifest this update: Sat 28 Feb 2026 21:31:19 +0000
Manifest next update: Sat 07 Mar 2026 21:31:19 +0000
Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: gx5JnT35r/V12Sg3/aj16wOgBqB5pN9mIYE9ow4uPRA=)
2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: rQ3HbUHQH7eVX3Cnh8/MApZL6I89rN2JY57V2VKSths=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Validity
Not Before: Feb 28 21:31:19 2026 GMT
Not After : Mar 7 21:31:19 2026 GMT
Subject: CN=69a35ea7-ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:33:52:6d:1f:d0:a1:64:5f:d0:18:63:bd:
5a:f2:63:61:99:3c:e8:5c:ed:42:bd:ed:5e:a4:0c:
53:1f:29:32:e0:63:4f:58:6d:c6:e7:5c:79:d9:47:
70:f5:a2:7f:25:b1:fc:30:2f:53:8f:78:91:11:58:
4d:05:32:25:f1:60:ab:0c:88:2b:07:7e:d1:47:ca:
c6:92:1d:68:87:5b:8d:99:96:28:ac:7e:e2:05:c1:
2d:d6:98:67:7a:83:0e:37:39:be:6d:a2:2f:f6:d9:
fa:03:9d:a1:e1:a8:80:95:8a:19:a2:3f:04:12:db:
ab:2f:f7:dd:c7:a3:9b:45:5d:53:81:7d:33:8b:af:
bf:f5:df:b6:bb:3d:17:26:a1:67:0c:15:5d:b7:06:
5f:cf:3c:e9:cb:02:81:36:03:fb:d4:64:6d:16:a1:
61:0f:df:e8:8e:fe:b0:9d:07:77:a0:c9:40:b3:e1:
62:59:b1:9a:94:3d:4f:53:2d:49:1b:85:4f:d2:a4:
57:c8:22:a8:33:ee:1f:ea:60:9b:b9:ad:e2:e9:48:
b1:ec:fe:18:9b:72:1d:4c:88:fe:2e:2d:92:4b:93:
64:ff:9e:4d:a1:32:41:43:c7:56:aa:4e:2e:2b:93:
6a:61:e9:42:36:04:c0:8c:ad:ca:25:86:15:c5:6e:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:56:5A:66:4B:93:19:90:2B:5F:5F:31:CA:D7:96:4C:9D:D2:FB
X509v3 Authority Key Identifier:
keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:76:7e:8d:c7:08:fb:a4:3d:96:09:28:d0:b1:70:bd:6f:bf:
28:c2:8f:2a:77:e4:96:71:26:9b:53:b7:43:ad:0c:76:a8:92:
a7:03:e7:6e:7a:1f:19:c6:57:43:94:d7:ae:e4:18:7d:b4:c4:
66:4f:24:65:6f:b2:a3:b0:f4:4d:6b:e7:f1:cb:e4:25:19:8d:
9d:4f:cb:8d:71:39:7d:69:f1:7b:64:d1:92:b1:26:a2:a6:09:
c3:53:62:6c:96:63:2d:8d:c2:a4:97:05:3e:90:36:13:1e:5b:
59:ee:a7:18:17:fd:8b:41:71:5c:38:3b:45:50:ee:3c:c3:f3:
14:e3:e8:97:76:67:4b:48:70:32:78:9e:f8:1d:65:a0:8d:20:
9c:5d:8e:5b:db:7b:28:cc:e6:77:81:cc:63:72:02:15:e9:99:
96:bd:ac:63:41:09:78:eb:1d:40:58:11:e7:9c:c5:8d:77:fb:
3b:83:29:7b:c7:38:73:73:00:76:9f:61:f2:f8:a9:92:e0:14:
e1:24:4d:cd:9b:58:e1:73:4c:5e:f9:97:5e:0a:da:25:7a:20:
3c:33:5b:4a:dd:0f:65:39:36:8b:a6:1a:10:ce:51:1c:3a:4e:
0b:6a:0b:53:cf:94:8b:c1:24:b7:0a:5f:b0:e6:d3:73:2b:be:
87:ee:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:01 2026 by rpki-client