
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json)
Hash identifier: 2kCsVbJGspGuCgRscysnje8x852hArB1a2TBXSApG64=
Subject key identifier: B4:C9:9A:AA:85:CB:0C:AE:46:80:12:1A:A1:91:9E:51:2C:60:03:D1
Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
Manifest number: 01FD
Signing time: Mon 21 Sep 2026 03:12:18 +0000
Manifest this update: Mon 21 Sep 2026 03:12:17 +0000
Manifest next update: Mon 28 Sep 2026 03:12:17 +0000
Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: f7ftkEMwxScIIaEkynqPPRwPqUT7fe+rDISlEh1Adnk=)
2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: EOPbg9QX3y+KSQTjZuqYiRYhOfIVTo3ThIwiR0D8klE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Validity
Not Before: Sep 21 03:12:17 2026 GMT
Not After : Sep 28 03:12:17 2026 GMT
Subject: CN=6ab0a092-2fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:63:0e:0e:46:00:70:b6:e2:ae:44:48:c7:
d9:d3:a5:a5:58:eb:24:dd:7b:d9:42:2c:c1:7b:65:
f0:39:0a:f6:4b:8a:2d:68:d0:f8:fe:4a:a9:10:92:
d3:09:d5:28:71:5d:43:0f:8f:05:98:bb:04:97:98:
d0:ad:fd:2c:56:80:57:1d:18:35:06:3e:3c:23:10:
18:df:e1:95:45:b5:00:af:b6:53:f9:65:9b:c2:49:
d1:12:b2:4a:cf:9c:93:ef:b8:48:05:8d:44:ad:d6:
6a:83:a9:ed:3d:7b:3a:1d:e1:93:7f:27:ed:9b:12:
be:a6:3c:ee:a1:52:90:d5:97:64:3f:63:63:23:64:
d4:56:da:97:4f:51:d6:a6:4c:33:3f:1d:f3:3b:c6:
09:12:98:6e:c5:c4:55:c2:d1:a6:97:da:5b:c9:98:
85:b4:26:fd:ea:1a:15:e2:43:b3:d6:08:7d:1e:80:
59:02:02:8e:3e:e7:97:65:7f:80:c5:4f:5b:ca:cf:
86:a9:1a:34:5a:ec:bf:c5:b6:2c:bf:4f:37:25:2f:
13:12:2e:94:df:e7:01:4f:26:e1:25:5e:81:3a:f8:
63:95:99:49:f6:ff:6c:c4:98:36:19:a1:36:63:3a:
d0:27:2f:ed:6f:a2:17:0c:fa:b4:cb:13:e4:37:2f:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:9A:AA:85:CB:0C:AE:46:80:12:1A:A1:91:9E:51:2C:60:03:D1
X509v3 Authority Key Identifier:
keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:f5:ee:63:f0:61:c5:81:2f:cd:29:fa:d9:be:b1:f8:a9:25:
9f:99:e0:bb:ae:21:70:b4:10:07:35:e4:8f:09:52:e3:94:f4:
39:10:cd:5d:a6:fb:1d:21:db:97:8d:1b:2d:ea:05:9d:68:2a:
a2:7c:49:51:94:23:28:fd:48:e3:06:b8:1f:24:0c:e0:40:fb:
0d:e6:08:1d:2b:13:69:fa:b4:4d:3b:a0:20:7e:2d:10:ce:d1:
12:07:5f:8b:ac:8f:ae:40:ab:c5:de:15:0c:39:d0:c2:8b:60:
01:b9:88:c1:fa:8f:3d:bd:10:00:c9:92:83:d6:f5:25:ab:1a:
38:bb:64:5d:ac:dd:7a:e1:75:b6:db:23:be:d5:59:91:4e:f5:
80:73:f5:67:c5:bb:3d:f9:9e:51:86:7e:80:60:1f:35:eb:56:
67:53:57:20:0b:12:4a:15:6e:0b:43:c6:97:79:54:ca:51:6c:
5f:24:47:23:c7:13:3e:c1:ad:a6:64:4f:e0:c9:16:3d:7c:ba:
cf:3e:b2:6d:22:e5:ab:62:ba:04:eb:c8:48:41:f9:d6:a8:0a:
cf:37:9b:82:89:41:2c:76:45:8b:8e:62:18:42:a8:93:28:5d:
d3:f7:8f:3f:dd:45:09:85:b0:28:de:b8:1c:8a:99:d0:3e:5e:
61:9c:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:19:48 2026 by rpki-client