
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier: B7Nxm5QBvu2qnp16kPo3ni6OpQEZDv2rNpDa+nzr16k=
Subject key identifier: D8:06:BA:25:DD:3D:5A:CB:07:79:C1:23:8E:7B:6D:52:60:67:60:2E
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial: 08AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number: 088F
Signing time: Sun 20 Sep 2026 20:46:23 +0000
Manifest this update: Sun 20 Sep 2026 20:46:23 +0000
Manifest next update: Sun 27 Sep 2026 20:46:23 +0000
Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: oBxf2wqmaVjwB08VhqLxWWed+g6Jd1CskhGIk5WIg48=)
2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: 7l8WCyK2qB5Ax8El2bn7f20GEIYhxxt3GqqtbVDOp/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219 (0x8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Validity
Not Before: Sep 20 20:46:23 2026 GMT
Not After : Sep 27 20:46:23 2026 GMT
Subject: CN=6ab0461f-fcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:13:ad:e4:ed:8b:70:c5:6d:ab:b3:dd:4c:
62:71:93:b0:05:91:46:41:5e:81:59:f0:68:26:ba:
78:b7:59:97:29:18:80:b9:b2:e3:70:75:ba:6a:aa:
dc:1c:da:9d:d4:14:39:a8:db:92:6c:78:ba:a9:36:
99:67:bf:da:96:27:c5:e9:0b:b3:e5:18:fd:58:02:
a3:17:6a:70:b1:1a:7e:82:b5:39:1b:95:91:66:df:
38:25:40:17:84:9f:ae:1b:86:6a:aa:76:84:dd:1b:
1e:69:0f:9a:ed:ab:c3:49:fb:6e:3b:18:7c:4b:3b:
17:94:9f:a6:09:c2:74:ec:42:f3:cb:36:ad:9e:3e:
ab:3b:51:e2:2d:ac:e1:af:d6:1a:3d:a1:89:04:76:
91:1e:99:51:94:39:2f:f3:a6:95:54:5c:8b:fd:21:
24:e0:93:b4:d6:d3:45:7c:7a:5b:75:94:40:6f:8d:
bd:5f:f9:78:06:1b:7f:0f:28:c8:86:a5:67:33:38:
c8:58:33:36:05:4c:2f:75:8e:ad:d0:00:20:1d:fc:
6e:60:92:a5:f7:be:a1:c7:64:de:56:aa:f6:bf:ae:
67:f7:8f:6f:6d:8a:9c:39:1f:89:2b:6c:92:97:88:
27:dc:1d:2b:7d:71:f4:44:01:86:2e:fa:f5:93:8b:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:BA:25:DD:3D:5A:CB:07:79:C1:23:8E:7B:6D:52:60:67:60:2E
X509v3 Authority Key Identifier:
keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:8c:60:28:a2:7a:cf:d4:a0:17:09:49:c3:8d:76:9e:bf:
86:49:a0:1e:4c:7f:4b:26:e8:44:67:71:29:fb:55:bf:10:cc:
97:58:06:59:da:9d:aa:fe:29:bb:3b:35:f0:d9:72:8e:5f:1d:
fe:d6:56:83:df:51:48:09:36:88:86:9c:be:32:b6:c7:73:54:
56:66:2c:24:98:c9:be:f4:78:3b:48:7d:91:d2:91:e4:9b:3a:
3e:53:6d:c5:d3:79:86:cb:65:9b:ea:24:07:a1:d5:64:f0:9f:
62:f7:54:0a:fb:62:e4:04:cb:76:27:10:9e:a4:89:c2:f8:a1:
e0:bc:c2:56:f6:6a:40:91:dd:3c:a8:3d:0d:bb:e9:37:38:74:
6c:ed:33:04:35:54:d2:8d:15:f9:18:15:cb:ea:58:65:7f:a4:
1c:1b:74:05:4a:e0:3a:a2:33:bc:a1:db:63:14:4a:45:68:a4:
f4:21:f7:11:52:0c:ea:99:8e:28:a4:ba:c9:28:89:e5:02:07:
da:f2:95:f7:73:3c:95:0c:1b:67:94:1c:d7:83:74:86:5c:0c:
d5:ca:de:09:bc:de:e4:07:86:5b:32:51:06:79:f6:bd:7c:8f:
d3:c1:cd:61:19:8e:0f:73:1e:b9:5b:f7:fb:ca:cf:8d:06:f8:
61:5d:f0:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND
NUE3Mzk0OEUwHhcNMjYwOTIwMjA0NjIzWhcNMjYwOTI3MjA0NjIzWjAYMRYwFAYD
VQQDEw02YWIwNDYxZi1mY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFQTreTti3DFbauz3UxicZOwBZFGQV6BWfBoJrp4t1mXKRiAubLjcHW6aqrc
HNqd1BQ5qNuSbHi6qTaZZ7/alifF6Quz5Rj9WAKjF2pwsRp+grU5G5WRZt84JUAX
hJ+uG4ZqqnaE3RseaQ+a7avDSftuOxh8SzsXlJ+mCcJ07ELzyzatnj6rO1HiLazh
r9YaPaGJBHaRHplRlDkv86aVVFyL/SEk4JO01tNFfHpbdZRAb429X/l4Bht/DyjI
hqVnMzjIWDM2BUwvdY6t0AAgHfxuYJKl976hx2TeVqr2v65n949vbYqcOR+JK2yS
l4gn3B0rfXH0RAGGLvr1k4surwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgGuiXd
PVrLB3nBI457bVJgZ2AuMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1
MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w
Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV/CMYCiies/UoBcJScONdp6/hkmgHkx/SyboRGdxKftVvxDMl1gGWdqdqv4p
uzs18Nlyjl8d/tZWg99RSAk2iIacvjK2x3NUVmYsJJjJvvR4O0h9kdKR5Js6PlNt
xdN5hstlm+okB6HVZPCfYvdUCvti5ATLdicQnqSJwvih4LzCVvZqQJHdPKg9Dbvp
Nzh0bO0zBDVU0o0V+RgVy+pYZX+kHBt0BUrgOqIzvKHbYxRKRWik9CH3EVIM6pmO
KKS6ySiJ5QIH2vKV93M8lQwbZ5Qc14N0hlwM1creCbze5AeGWzJRBnn2vXyP08HN
YRmOD3MeuVv3+8rPjQb4YV3w1w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:03:58 2026 by rpki-client