
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
File: q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft (raw, json)
Hash identifier: z6BOHlgjsqNDmc1bUlmNaHt5vk1/DcLRocu7yPQXxig=
Subject key identifier: F6:24:DE:3E:FB:09:67:B7:D2:8C:DF:9B:03:1C:22:7C:CE:AF:71:07
Authority key identifier: AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
Certificate issuer: /CN=A914E1BD/serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
Manifest number: 85
Signing time: Mon 05 Oct 2026 08:05:12 +0000
Manifest this update: Mon 05 Oct 2026 08:05:11 +0000
Manifest next update: Mon 12 Oct 2026 08:05:11 +0000
Files and hashes: 1: q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl (hash: wmMFaODXPZQP/Z3EncysIXAA5ISjl120h5mFmUcWFUQ=)
2: FC4E4156FB3411F0841666933D6F56BC.roa (hash: EB7Zu5vP9pgptqSutxDmsy3gmbeSeQdiZ2X1SMg8Qf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1BD, serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Validity
Not Before: Oct 5 08:05:11 2026 GMT
Not After : Oct 12 08:05:11 2026 GMT
Subject: CN=6ac35a37-65e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:37:14:ec:84:31:98:0c:3d:21:a4:10:ce:
3c:26:7f:c0:aa:a8:e7:5b:f3:05:8b:8f:eb:87:ac:
c6:43:5f:6e:a7:6a:6b:e9:e0:29:d3:c2:95:85:b0:
d4:36:14:f7:93:a7:51:15:9c:09:fc:8a:f3:f3:7a:
d9:14:70:c8:df:de:2b:fa:03:51:87:16:60:54:f8:
66:9b:53:69:03:be:e1:cd:ee:f2:dd:32:57:34:e7:
c2:55:35:41:b5:12:60:b2:e3:1a:00:51:cf:e5:f2:
c6:5a:55:9a:84:d5:83:30:84:7b:ab:df:05:54:dd:
88:9f:78:43:ab:5a:e6:60:97:24:7f:2d:2e:b2:ad:
37:98:53:3f:fa:f0:ca:e4:81:b7:49:a0:98:19:f9:
3c:c7:af:52:13:0a:18:cb:d9:cf:d3:df:7b:2b:65:
3f:3d:2e:ba:88:33:a8:95:e7:43:47:dd:72:9e:ab:
01:b7:39:43:71:5c:60:67:22:76:f4:3b:5a:f1:e0:
80:ee:72:30:8e:d7:b9:81:30:88:01:11:db:e4:7b:
4f:46:62:95:8c:b9:c6:63:8f:3a:c6:67:0a:02:5e:
23:9f:3a:5d:ff:36:6b:10:c4:a1:f1:5b:44:87:d0:
d5:be:d2:32:bd:8e:3f:1d:5b:9b:39:e0:18:99:84:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:DE:3E:FB:09:67:B7:D2:8C:DF:9B:03:1C:22:7C:CE:AF:71:07
X509v3 Authority Key Identifier:
keyid:AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:48:bc:ad:8e:cd:6d:29:b9:32:94:28:d5:35:26:60:75:14:
5d:b0:83:82:e7:17:0b:70:99:44:5d:f9:20:51:51:1a:88:57:
d2:54:a7:60:bd:14:43:c7:d9:af:90:eb:35:2d:e4:d8:37:9e:
b3:fa:1d:83:c4:cd:47:07:01:fd:93:28:64:5a:70:fe:b3:ed:
d9:e6:06:bc:04:bd:27:90:62:bf:f2:0e:56:e2:14:13:78:bd:
09:de:7b:6f:ef:6d:44:30:48:d8:2d:e3:21:c2:17:49:0f:20:
9c:35:21:c9:77:ba:09:03:3b:b4:88:4c:c1:98:29:3e:60:85:
5d:00:ce:fb:04:5f:8c:52:49:5a:8a:37:37:46:05:d0:27:87:
d5:8a:61:6f:7a:10:6a:50:bd:7e:e8:40:84:60:fd:95:1d:31:
57:12:bc:6e:dd:b2:41:66:c2:c6:6a:e4:0e:7d:d3:2e:f2:f6:
f4:01:4c:e3:fa:5c:c8:df:26:a3:d1:28:19:02:39:1e:0d:cf:
b7:2f:a2:ae:e8:1d:2e:33:5e:2b:03:df:ba:10:f0:d0:ea:d5:
08:0f:b8:88:18:a0:99:0a:cc:e1:fe:db:78:13:c0:a9:92:e4:
e0:29:52:e2:6c:98:f9:7a:e8:13:e0:19:85:f3:6b:17:cc:6b:
52:82:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:57:58 2026 by rpki-client