
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier: iXi9xCQd2rFBX0af4hx7B6D4xRkO+hr3ge7a1w2+Cn4=
Subject key identifier: 3F:5C:E7:84:3D:86:31:A9:A4:77:FF:6D:C5:84:23:99:14:DD:DA:0C
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial: 0BAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number: 0B91
Signing time: Sun 20 Sep 2026 19:04:42 +0000
Manifest this update: Sun 20 Sep 2026 19:04:42 +0000
Manifest next update: Sun 27 Sep 2026 19:04:42 +0000
Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: 80iRgp3uQi7TckfRklWmiBv60xKFcFOmCR+NKBq90fo=)
2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=)
3: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=)
4: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Validity
Not Before: Sep 20 19:04:42 2026 GMT
Not After : Sep 27 19:04:42 2026 GMT
Subject: CN=6ab02e4a-0ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:14:01:7c:25:0a:14:fc:d4:b0:7b:e7:db:
26:11:66:c8:50:73:f1:a5:13:60:83:9c:5d:21:dd:
54:48:f6:33:1f:b5:0e:20:5e:31:b9:33:2d:47:94:
cc:2f:4d:5b:d6:77:3a:50:00:b0:7a:af:2a:d7:95:
2c:a4:8d:ab:a8:c4:a2:33:b9:64:a3:c0:94:1b:0a:
58:06:fb:5c:b7:39:61:8d:ab:6c:3b:c7:c0:dd:32:
14:c0:76:61:91:66:ff:b0:cb:42:4c:9d:9e:fd:96:
77:ae:1c:2e:6c:7f:bf:00:43:56:8b:77:ba:d8:01:
b7:04:60:f9:e8:84:35:b3:15:3c:1d:b3:fa:f1:89:
25:19:ec:e3:7b:99:57:71:1f:d7:71:5b:bc:b9:cd:
1f:59:3b:e8:61:69:12:c0:8b:4a:b0:6e:d9:1b:79:
2a:4d:6f:22:9f:a3:2a:e7:e6:c9:98:57:0b:33:d6:
4f:ee:b9:89:ce:84:a6:9e:a2:18:3b:65:3d:97:a0:
9c:4d:bb:30:b9:eb:1d:11:9c:b0:93:70:74:3a:b0:
3f:62:2b:62:6e:fd:1a:9d:5d:09:4d:ff:69:7b:a8:
9f:18:d6:a6:b8:66:12:46:ff:e9:16:f9:a7:93:fd:
67:77:28:22:65:39:d0:07:f6:1c:18:a0:5c:1a:fb:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:E7:84:3D:86:31:A9:A4:77:FF:6D:C5:84:23:99:14:DD:DA:0C
X509v3 Authority Key Identifier:
keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:7a:41:62:ed:9b:ff:07:ce:82:18:61:34:1e:d8:12:60:68:
9b:c3:e8:d1:16:ce:23:39:52:b7:d1:47:9d:8a:33:d3:8a:94:
f1:6d:e0:80:1b:d4:a0:25:0c:b5:60:6b:f6:0a:be:4f:24:ac:
3d:7e:73:92:95:3c:24:63:e5:4d:8b:d7:52:7f:d6:b9:dc:87:
83:c8:c0:d6:be:d0:b1:b0:8e:ed:df:1a:0e:02:58:75:85:9a:
20:7f:bb:8f:d3:18:44:ca:59:39:bd:dd:62:e5:d9:c6:53:db:
d6:0b:4b:f4:a0:ad:0c:54:90:04:4a:2a:2a:5d:4e:07:08:c2:
2e:cc:b0:31:96:0d:f1:db:7e:69:85:d9:ca:3b:1a:82:ca:3c:
be:36:1a:9f:d6:3e:c6:21:ed:6e:14:b9:fa:71:f4:54:e3:8e:
81:fc:bc:aa:8f:c7:3e:ca:59:51:75:35:c4:04:01:c9:fe:41:
aa:4a:05:5b:aa:27:9f:cd:82:ac:82:ec:3e:22:18:e0:49:29:
37:54:4d:9f:2a:51:9b:54:40:4e:7d:cc:88:6b:b7:05:af:fd:
0d:ca:a6:ce:d6:e7:f4:43:09:e2:7b:1e:8a:0f:d1:60:36:f4:
93:92:4e:f6:5e:64:0c:8b:32:2e:15:5e:4a:bd:94:2b:fc:4f:
9c:f5:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:11:16 2026 by rpki-client