
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json)
Hash identifier: o28kTsLJm6evIRXa/LMlvHsdoiRygMxzRlmzNZF4vOg=
Subject key identifier: DB:2D:84:AB:40:5F:BD:41:58:23:92:97:3F:0C:75:03:9A:24:E5:E1
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
Manifest number: D3
Signing time: Sun 20 Sep 2026 22:54:42 +0000
Manifest this update: Sun 20 Sep 2026 22:54:41 +0000
Manifest next update: Sun 27 Sep 2026 22:54:41 +0000
Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: mEbZSRhm/J91yzzDJAIsytNQUOgVaJsLv1J+xLMYaXI=)
2: 889930E805E011F18AD458A9133D8C67.roa (hash: coEpUspblzPFvORawLzP4BPk3NGo6TsW79ltjfm6ee4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Validity
Not Before: Sep 20 22:54:41 2026 GMT
Not After : Sep 27 22:54:41 2026 GMT
Subject: CN=6ab06432-331b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:a0:b9:1d:39:64:2c:1e:3e:52:4c:99:57:
d2:e1:92:e9:7f:95:94:21:e8:1a:c7:dd:27:99:dd:
f9:84:2d:9e:c7:a6:4f:5e:5a:d7:db:e5:c4:5c:95:
09:1e:36:bc:fd:6b:46:ac:d0:47:73:54:09:1d:ca:
dd:df:05:bb:e3:4d:41:57:7d:7f:2a:da:10:48:af:
31:50:d9:a9:b0:6f:bb:80:b7:d4:13:26:ad:1d:93:
f8:d6:12:90:10:34:20:a1:63:b8:8b:a0:38:59:57:
79:7d:07:6a:f8:60:92:3f:a3:f7:de:1f:74:2c:c4:
9f:ab:37:de:84:dd:fd:f9:4d:f4:40:3f:9f:79:0c:
7d:67:80:b2:a5:4b:69:82:cf:73:a8:de:8e:21:1f:
7c:08:48:6b:c0:39:90:01:85:31:0b:25:c7:22:c8:
90:ab:cd:51:27:e8:1f:4d:e6:1f:f6:e1:51:be:14:
9a:df:6d:6c:b9:54:a3:b1:ed:90:9c:2d:6f:65:ce:
28:70:e0:88:75:da:f3:35:19:ca:49:be:70:df:ff:
a2:21:84:10:7c:46:03:a5:c9:74:1e:05:62:a7:0d:
05:dc:bb:e4:3d:e3:47:c4:a6:80:f0:64:b8:b2:a4:
15:d9:c7:54:21:cc:8a:4d:8e:14:95:51:bc:7b:77:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:84:AB:40:5F:BD:41:58:23:92:97:3F:0C:75:03:9A:24:E5:E1
X509v3 Authority Key Identifier:
keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:8e:97:4a:e4:8d:f1:77:e0:b3:b1:0d:2e:a6:f9:d1:65:3f:
f3:8a:3c:37:77:0b:30:7e:d3:00:cc:10:ec:5e:cc:2f:b0:ea:
03:b7:a8:79:ad:85:84:2e:45:f9:0d:be:76:fe:5b:d8:3e:4d:
e7:07:e5:60:71:da:65:4f:63:0f:52:15:b6:ac:5a:49:10:ad:
11:e8:bb:82:00:d9:5e:a4:5e:8b:6b:bb:39:d2:19:cb:35:e4:
44:04:5c:34:bd:a5:5f:a3:8a:1a:8a:e6:b2:fa:eb:52:7b:32:
36:0e:77:7f:83:48:2e:55:42:8d:26:63:8b:97:51:72:64:b0:
b3:84:26:4f:5a:3b:20:81:b1:0c:c9:90:3b:74:8a:34:da:97:
1a:f1:29:a2:4a:b3:68:76:6c:3b:12:5f:a4:5e:07:34:fb:31:
03:2d:49:7e:38:34:2c:38:1a:9c:ce:ff:22:f1:b6:de:2a:71:
fb:64:4c:d6:cf:ea:0f:23:59:7e:39:76:73:48:07:7b:3e:aa:
65:44:5a:56:36:15:85:17:44:d8:18:04:09:75:05:0a:2d:a6:
da:51:4a:90:87:0e:44:8a:4a:f3:8e:a6:44:5b:6b:f1:71:3c:
5a:fb:01:1c:d7:d4:32:62:6d:4f:77:58:c3:aa:dd:a8:99:7a:
95:45:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:14 2026 by rpki-client