
$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json)
Hash identifier: XPckbL9LzoBAH7TQHS57PzY8KWEyZJjO40VZ5gpXQJY=
Subject key identifier: B7:96:83:D1:E5:9E:F0:11:B7:5F:78:E5:E2:AF:17:EF:C0:6F:19:DB
Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
Manifest number: 01E0
Signing time: Mon 27 Jul 2026 05:07:16 +0000
Manifest this update: Mon 27 Jul 2026 05:07:15 +0000
Manifest next update: Mon 03 Aug 2026 05:07:15 +0000
Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: 64LVvkNKrxXZzH1zJyb30wy2GtH+CmVkcksNgxfchjY=)
2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: EOPbg9QX3y+KSQTjZuqYiRYhOfIVTo3ThIwiR0D8klE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Validity
Not Before: Jul 27 05:07:15 2026 GMT
Not After : Aug 3 05:07:15 2026 GMT
Subject: CN=6a66e784-6b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:b9:47:0c:01:f7:2b:d6:da:bf:ac:27:42:
7e:bf:d7:98:3c:1e:1d:50:4d:bf:14:48:fd:8e:ab:
13:f6:63:25:80:87:bf:31:cb:d5:79:af:fa:6c:e1:
e9:2c:4c:92:08:8b:00:2c:43:3f:b6:7e:85:27:d5:
f7:de:dd:2e:9b:1a:1a:d1:19:40:0c:fe:c1:78:d7:
7b:99:96:14:22:69:c8:3f:6d:9a:98:59:2c:bb:4b:
f9:ac:82:43:d2:81:f2:bb:36:ef:eb:d9:b8:74:8e:
9e:58:7a:88:d0:80:0a:c7:32:ae:d0:fe:fa:e4:06:
60:23:08:55:6b:ce:31:f5:ee:9d:c6:47:6d:43:e5:
9a:49:eb:ca:f8:2a:06:0d:55:17:90:39:e7:ae:bb:
bd:ef:1d:61:83:2a:00:59:29:ce:f2:75:fc:9b:89:
28:68:90:6e:78:cb:77:cb:e9:87:b7:ca:cd:45:6c:
44:46:6c:0a:ff:9a:b0:f3:8a:1e:d0:d0:1c:1d:6f:
0e:83:75:99:70:5d:35:2c:ec:f1:9a:08:64:c6:67:
24:7b:db:6e:f4:35:3c:c3:24:ec:15:6c:3d:4b:1f:
54:dd:87:4b:47:8e:be:fb:36:d7:38:22:68:92:03:
54:c5:9e:69:86:ea:0e:e2:c3:5b:d6:50:81:f5:b3:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:83:D1:E5:9E:F0:11:B7:5F:78:E5:E2:AF:17:EF:C0:6F:19:DB
X509v3 Authority Key Identifier:
keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c3:a7:f4:c4:4b:37:84:f9:8b:38:24:79:e7:f9:e9:5d:6c:
38:a3:d9:07:9a:cb:bd:de:84:e3:51:c8:4f:bf:cd:2f:0b:77:
32:80:a2:36:7d:8b:f6:2f:ac:01:26:ed:f6:25:d4:d3:3b:76:
46:fa:ad:bd:1b:e7:c0:7e:6f:91:0a:29:3a:9b:f8:c4:95:cb:
c4:4e:29:68:ef:ea:05:f2:a9:85:d3:bf:28:c0:9f:02:44:5b:
7f:fe:8f:da:d6:36:58:59:95:8d:83:a8:0f:a3:35:db:ee:f8:
49:46:12:0e:44:88:f7:36:86:66:71:82:49:7c:90:ae:63:ba:
06:23:65:25:19:9c:db:a9:e4:8e:57:57:a5:77:f7:3d:ca:4c:
96:61:ca:de:9d:e5:8e:14:e0:b4:64:9a:30:29:aa:1a:43:4e:
88:97:6f:80:4e:0c:83:c9:3f:43:6e:35:6e:66:7f:c6:e9:7a:
0f:7c:98:ea:29:9a:72:82:2d:8d:8a:c3:78:d0:1f:89:aa:47:
56:e8:e4:6f:88:3d:4e:7e:c6:cf:74:cf:85:66:28:4b:5e:72:
c4:b1:bb:ee:6f:42:a7:a6:52:77:0a:19:54:db:1f:39:98:d4:
a9:bb:66:11:9d:86:b4:12:be:f2:51:f1:0b:cc:1f:b5:b0:33:
ec:5c:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:29:42 2026 by rpki-client