
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
File: h6nyMStovlVf_ObiOfdiHcPnS8w.mft (raw, json)
Hash identifier: VRg/YR7STDdBCz9JVsn7Vf0YgrXqVrQEscXdgrsX6j8=
Subject key identifier: B3:9F:F6:E9:2F:7D:F2:13:27:0E:83:BF:DC:40:F6:26:68:CC:1D:C8
Authority key identifier: 87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC
Certificate issuer: /CN=A91263B8/serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
Manifest number: 5A
Signing time: Mon 21 Sep 2026 08:11:40 +0000
Manifest this update: Mon 21 Sep 2026 08:11:40 +0000
Manifest next update: Mon 28 Sep 2026 08:11:40 +0000
Files and hashes: 1: h6nyMStovlVf_ObiOfdiHcPnS8w.crl (hash: 8W54zzrtgZ0kMNeeWD0wTclFyhRTyIjXGxZ2KcUouvE=)
2: C43A6D14325511F1978F2162B6833773.roa (hash: ZQcKHfvJORnZBPl0xwIufb0foIAzEfuBoRsonDeM53Y=)
3: EB551A522F0311F19C1B78ED96833773.roa (hash: wGOSXhgMacHwlXGnpL8wWQQ1qcnmdzrNpMqajib3dOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl
rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91263B8, serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
Validity
Not Before: Sep 21 08:11:40 2026 GMT
Not After : Sep 28 08:11:40 2026 GMT
Subject: CN=6ab0e6bc-abfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:23:c5:5d:ea:2d:db:95:4a:98:00:8c:57:
14:77:04:89:7f:b4:4a:d6:ea:f3:7b:76:10:e7:99:
65:0c:11:1f:db:74:09:c3:fd:9a:29:1a:15:28:63:
fa:5f:37:bc:47:c8:15:5a:a7:26:fa:af:d8:9b:fa:
53:c4:b4:bf:ce:be:fa:94:17:81:35:07:c6:eb:0a:
db:ac:c1:1b:0a:e9:8a:ed:f7:f5:89:87:9a:a2:e3:
c3:0f:f0:b2:e2:68:57:a7:20:3f:c5:16:4e:30:6f:
7f:e7:96:6a:44:bd:98:91:d1:7e:9d:dd:16:b2:d9:
41:37:e1:8f:7f:43:ce:1f:83:3a:74:a4:d9:da:13:
1d:1a:28:c6:0d:55:b3:84:02:31:70:04:9c:67:7f:
0c:3b:62:d9:fe:d0:0b:1c:a9:ba:10:2e:69:35:4f:
d5:e6:e7:bd:6b:a6:58:11:a7:ce:e0:e8:ff:66:9d:
c9:61:d8:09:06:a7:54:bb:55:56:c8:ce:60:1b:30:
9a:4a:06:eb:cd:26:ba:40:3e:6c:67:45:91:91:42:
a9:3a:0f:c5:90:62:82:e0:51:aa:25:fc:a3:6a:74:
ce:66:48:c2:b1:30:63:14:9b:c7:77:9f:3a:5e:5a:
92:4d:1e:82:8e:79:7a:a8:93:0a:98:7d:ed:b0:c7:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:F6:E9:2F:7D:F2:13:27:0E:83:BF:DC:40:F6:26:68:CC:1D:C8
X509v3 Authority Key Identifier:
keyid:87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c4:d4:35:73:3a:81:bf:24:0a:a5:b4:6b:f4:b0:40:a5:4c:
f3:56:ff:d1:65:9f:42:e2:7f:ff:04:c3:07:47:79:5e:e6:28:
77:ce:f0:01:2a:86:be:ac:ba:66:3b:9b:03:c1:3a:f3:db:87:
dd:2b:c3:20:a3:e0:e4:7f:d8:13:8d:0f:15:39:14:b5:f5:32:
96:dd:96:0a:ee:62:70:9f:e5:dd:58:88:ca:6e:77:ad:9b:62:
48:58:52:06:74:12:3e:e9:3d:05:c9:21:24:c4:57:59:19:f2:
6f:f1:18:47:9c:c0:d4:19:55:a1:5c:53:0f:27:21:19:67:1c:
37:55:be:51:cd:8d:e3:a7:31:6b:80:1b:ac:e0:1b:a8:1c:bc:
20:71:5d:10:dd:26:ad:10:1c:34:b9:25:46:44:3b:93:4a:10:
44:3c:05:45:89:a1:a8:99:87:56:dd:b0:d9:2f:73:83:31:34:
3e:c3:df:f5:c5:86:67:38:5e:6b:c5:1a:06:d9:36:59:9c:3b:
8f:a4:d1:e9:90:8a:54:15:1e:dc:4e:31:30:e6:c0:e8:d2:d6:
3d:f6:a4:b8:35:af:5a:e4:3c:d2:2e:27:87:05:05:89:09:2a:
7b:c9:ba:dc:e2:f5:58:01:af:e7:fe:8a:a0:88:87:7d:99:6c:
b4:b7:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:49:36 2026 by rpki-client