
$ rpki-client -vvf rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
File: h6nyMStovlVf_ObiOfdiHcPnS8w.mft (raw, json)
Hash identifier: k4o8VntL4dW6GDDMyvDVuD+u0fC7h+SbLdhVkly7LPQ=
Subject key identifier: 70:AD:9F:1B:21:2A:AA:2B:4A:AD:3F:45:4B:D1:DA:D1:C5:E9:7F:14
Authority key identifier: 87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC
Certificate issuer: /CN=A91263B8/serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
Manifest number: 3D
Signing time: Mon 27 Jul 2026 10:53:40 +0000
Manifest this update: Mon 27 Jul 2026 10:53:39 +0000
Manifest next update: Mon 03 Aug 2026 10:53:39 +0000
Files and hashes: 1: h6nyMStovlVf_ObiOfdiHcPnS8w.crl (hash: 3ku7vh/ahs+itrdUiNEmk9kPQHuEYc53g3LRRmbYf1I=)
2: C43A6D14325511F1978F2162B6833773.roa (hash: ZQcKHfvJORnZBPl0xwIufb0foIAzEfuBoRsonDeM53Y=)
3: EB551A522F0311F19C1B78ED96833773.roa (hash: wGOSXhgMacHwlXGnpL8wWQQ1qcnmdzrNpMqajib3dOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl
rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91263B8, serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
Validity
Not Before: Jul 27 10:53:39 2026 GMT
Not After : Aug 3 10:53:39 2026 GMT
Subject: CN=6a6738b4-75a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:ab:a1:0c:8c:59:31:0a:ac:9a:1a:2a:cb:
fd:0b:10:dc:58:01:1f:b9:81:ff:cd:4c:f0:4f:7b:
86:b2:46:c3:7c:88:f6:75:0e:24:41:1f:df:35:f4:
80:d7:ce:f4:9d:57:5d:a6:db:50:e5:be:30:5b:74:
c4:b0:c2:e3:19:31:e8:75:b8:3d:7b:35:e0:b6:16:
e5:d8:8f:41:c8:cd:cd:8a:cd:c5:ef:48:4f:eb:cc:
a1:bd:cc:81:3f:a0:d5:09:b3:24:ce:17:ef:c2:a7:
67:ae:54:a4:6c:74:33:c1:d2:9b:09:a8:a3:30:8c:
5d:42:41:2b:58:84:68:ef:df:e1:85:ff:dd:28:ac:
66:b5:7a:67:24:8c:32:99:20:e4:7b:83:5b:ca:96:
fb:6f:b3:1b:e2:d1:5e:d4:f0:a2:e1:8d:ac:b4:a2:
aa:98:d4:63:e2:2d:b0:a0:67:a6:fe:10:01:ae:27:
13:82:f8:76:e7:bd:c8:5a:78:5d:8f:9f:9d:70:a5:
16:34:99:f8:2c:17:45:38:d0:a7:34:d0:89:6b:2e:
7d:61:50:51:82:1f:2c:88:e0:14:83:32:91:02:bb:
fd:e9:63:c8:6f:31:18:86:03:5a:af:ee:11:45:30:
65:44:be:81:8b:ef:7a:3a:9f:d9:93:40:c5:ee:01:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:9F:1B:21:2A:AA:2B:4A:AD:3F:45:4B:D1:DA:D1:C5:E9:7F:14
X509v3 Authority Key Identifier:
keyid:87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:74:f4:e3:84:e3:6f:c6:75:7f:0e:73:62:3b:d1:2f:8b:1a:
e0:42:97:61:49:b5:9a:99:f2:91:43:f7:8e:8b:a7:c7:52:2d:
4e:d7:a0:78:a4:53:4c:22:b5:53:ae:46:56:e3:2d:d9:4e:a9:
2a:f5:3c:df:89:6d:e5:90:82:41:52:b9:68:d1:7d:74:c5:fb:
e9:c8:79:a0:a8:e0:6e:57:72:4f:e3:9b:35:49:f5:55:57:c7:
bf:da:bc:c1:ab:c9:f3:15:4a:80:84:20:7d:2b:6f:f7:39:09:
58:cc:6a:b1:c3:b4:c4:0e:e3:2c:a9:ee:c2:8f:77:2b:11:6a:
4e:ab:dd:c7:19:56:10:0e:2d:84:22:5e:c4:bd:18:c2:02:7d:
fe:99:17:88:ba:31:83:27:f4:29:4c:23:99:68:35:44:1f:fa:
f5:65:5a:c8:2b:90:92:87:91:3f:1e:fc:06:66:6d:4c:fc:e8:
ae:b8:c4:09:3d:5c:78:cc:46:16:68:2d:d1:85:9c:ac:86:60:
26:82:8d:e6:b7:77:c4:54:b3:00:8d:b5:45:9f:04:d9:de:09:
56:45:9f:56:8e:fb:94:96:ae:6d:48:f2:79:3a:ac:9c:c4:e5:
18:04:fe:69:dc:2f:b9:5e:e0:22:cf:8a:3f:6a:82:a1:d8:50:
d7:d0:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:43 2026 by rpki-client