
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
File: IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft (raw, json)
Hash identifier: rs5fJOpXUyFxyioutZGfbLrxlzYaURMqxWArVKKe6pM=
Subject key identifier: 9A:DD:AA:9D:0E:5F:31:83:AA:34:73:C7:7B:C6:F4:F9:85:47:F1:E6
Authority key identifier: 20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2
Certificate issuer: /CN=A9164F6C/serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
Manifest number: 53
Signing time: Mon 21 Sep 2026 03:52:16 +0000
Manifest this update: Mon 21 Sep 2026 03:52:15 +0000
Manifest next update: Mon 28 Sep 2026 03:52:15 +0000
Files and hashes: 1: IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl (hash: Bwi8NVlQSfycsX3/S4K5WfcEPDppyoqlLYUEl24KI+s=)
2: 959E1E5C438911F199AC3545C7833773.roa (hash: o/N5wMgvItXdP3V7fouQN7Bkpr2EmsUXoWrtblWz5Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl
rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F6C, serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
Validity
Not Before: Sep 21 03:52:15 2026 GMT
Not After : Sep 28 03:52:15 2026 GMT
Subject: CN=6ab0a9ef-98e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:02:45:b4:64:db:78:25:a5:78:ee:19:a8:d8:
6a:19:d8:df:9b:c6:8c:d0:b7:f3:09:16:bb:0f:fc:
9b:ed:85:c2:48:90:0c:45:66:09:7f:83:0b:b2:86:
44:4d:76:6e:d2:26:89:f4:7b:9c:11:e7:5f:51:1e:
0f:83:92:da:b3:3b:1e:13:f2:18:45:ae:33:32:50:
8b:94:4c:d5:94:83:41:6c:b4:93:fe:60:67:f6:4e:
64:5a:6a:75:0b:60:ed:1e:f9:2a:eb:61:c1:a7:be:
50:1a:89:95:17:22:1b:ad:f6:cd:ee:dc:8e:3c:09:
a8:f1:c6:11:6f:83:08:ce:4d:12:39:28:8c:40:e5:
bc:2c:5c:bc:d3:55:3d:8c:61:15:26:81:2e:f9:0f:
fb:a5:56:41:18:5b:d4:e9:93:8b:54:3e:55:99:c3:
99:5e:19:fd:17:de:d2:92:6a:8b:3b:35:dc:20:e0:
05:5e:15:61:51:2b:7d:ee:3e:51:04:44:22:f0:c6:
1f:10:6b:c8:00:32:0c:1a:67:f4:a5:5a:29:33:d9:
bb:29:35:07:42:2b:e5:af:59:66:ec:8b:ac:5e:e7:
17:9f:72:52:3a:d0:cb:20:ee:f8:59:de:3a:12:87:
4a:cf:b8:13:d2:31:dd:06:2c:d4:3d:27:b5:f6:ca:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:AA:9D:0E:5F:31:83:AA:34:73:C7:7B:C6:F4:F9:85:47:F1:E6
X509v3 Authority Key Identifier:
keyid:20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c1:5d:de:97:04:bf:08:2c:07:75:1c:2e:aa:81:3b:fe:6c:
a1:a2:4b:8f:59:9c:09:99:96:3a:c7:1d:6c:50:76:c0:f1:b7:
df:98:62:d6:5a:0a:10:80:6c:58:bd:c5:5d:36:3b:cd:83:3f:
23:7f:fe:c7:ff:36:72:76:83:64:58:61:62:9a:f2:41:e3:1e:
02:d2:a8:ac:d3:84:00:e4:dc:2d:d1:22:cc:e0:b7:de:42:20:
1a:ce:ec:de:67:9a:c3:03:40:98:a4:d9:06:4b:30:72:31:99:
c4:aa:41:62:c0:63:4c:b5:f4:d7:da:b4:76:e9:d8:ea:bc:aa:
c7:bb:c5:ec:1d:33:2f:40:cc:fe:b4:d0:27:7f:23:1d:78:80:
2f:4a:02:5f:4e:2b:ef:2a:30:1c:fd:83:dc:2f:44:f5:7a:fa:
ec:6e:db:71:9b:d4:2b:1f:cd:02:77:c3:53:07:74:b9:f7:08:
22:d1:af:bd:9a:40:44:58:e6:d0:8e:58:6f:d4:17:8c:47:b3:
68:0b:16:60:00:de:09:80:67:46:4e:38:fb:4f:e6:12:99:0a:
c6:4b:01:af:5f:9d:2b:e4:85:77:8d:84:2d:bb:b0:69:2a:9f:
58:ce:c1:18:51:49:be:7a:03:de:8f:56:44:81:1a:ad:a2:12:
35:18:ac:d0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NEY2QzExMC8GA1UEBRMoMjBERTkxOEQ0RjkyM0MwMkZFMjNFQjkxNjM3NUJCRjg1
QjAyNENEMjAeFw0yNjA5MjEwMzUyMTVaFw0yNjA5MjgwMzUyMTVaMBgxFjAUBgNV
BAMTDTZhYjBhOWVmLTk4ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD0AkW0ZNt4JaV47hmo2GoZ2N+bxozQt/MJFrsP/JvthcJIkAxFZgl/gwuyhkRN
dm7SJon0e5wR519RHg+DktqzOx4T8hhFrjMyUIuUTNWUg0FstJP+YGf2TmRaanUL
YO0e+SrrYcGnvlAaiZUXIhut9s3u3I48CajxxhFvgwjOTRI5KIxA5bwsXLzTVT2M
YRUmgS75D/ulVkEYW9Tpk4tUPlWZw5leGf0X3tKSaos7Ndwg4AVeFWFRK33uPlEE
RCLwxh8Qa8gAMgwaZ/SlWikz2bspNQdCK+WvWWbsi6xe5xefclI60Msg7vhZ3joS
h0rPuBPSMd0GLNQ9J7X2yj13AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmt2qnQ5f
MYOqNHPHe8b0+YVH8eYwHwYDVR0jBBgwFoAUIN6RjU+SPAL+I+uRY3W7+FsCTNIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjZDLzRGRkIyN0M4NDI5
OTExRjFCNUVBRTY3OTlFRUU1MjhFL0lONlJqVS1TUEFMLUktdVJZM1c3LUZzQ1RO
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSU42UmpVLVNQQUwtSS11UlkzVzctRnNDVE5JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
RjZDLzRGRkIyN0M4NDI5OTExRjFCNUVBRTY3OTlFRUU1MjhFL0lONlJqVS1TUEFM
LUktdVJZM1c3LUZzQ1ROSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA8wV3elwS/CCwHdRwuqoE7/myhokuPWZwJmZY6xx1sUHbA8bffmGLWWgoQgGxY
vcVdNjvNgz8jf/7H/zZydoNkWGFimvJB4x4C0qis04QA5Nwt0SLM4LfeQiAazuze
Z5rDA0CYpNkGSzByMZnEqkFiwGNMtfTX2rR26djqvKrHu8XsHTMvQMz+tNAnfyMd
eIAvSgJfTivvKjAc/YPcL0T1evrsbttxm9QrH80Cd8NTB3S59wgi0a+9mkBEWObQ
jlhv1BeMR7NoCxZgAN4JgGdGTjj7T+YSmQrGSwGvX50r5IV3jYQtu7BpKp9YzsEY
UUm+egPej1ZEgRqtohI1GKzQ
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:37 2026 by rpki-client