
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier: VH8Sdk4L4YNkJGytzyQYKHzVePhqdeGhEOSH/PHF1nY=
Subject key identifier: A1:12:42:D6:5A:32:2A:61:1E:E9:36:0B:94:70:4A:01:B0:FE:03:73
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial: 358A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number: 3583
Signing time: Sun 20 Sep 2026 14:48:31 +0000
Manifest this update: Sun 20 Sep 2026 14:48:30 +0000
Manifest next update: Sun 27 Sep 2026 14:48:30 +0000
Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: XYuRJsaFFLw+FwY9GEs/nwMzfaqhJRKCYiqAmfn1mpM=)
2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13706 (0x358a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Validity
Not Before: Sep 20 14:48:30 2026 GMT
Not After : Sep 27 14:48:30 2026 GMT
Subject: CN=6aaff23f-0f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e9:dc:7c:8c:3b:24:04:c5:92:91:b2:fa:ce:
42:2e:89:48:5b:03:72:09:1a:79:d6:12:20:43:99:
bd:d0:aa:57:dd:84:04:78:9c:e1:86:1c:82:74:be:
7f:fa:38:2d:58:89:f6:aa:10:b2:3d:ff:e1:78:0b:
76:a6:b2:bc:16:e1:04:27:57:f4:9b:ff:44:9a:64:
d4:0e:69:95:d0:62:1e:df:08:f5:bf:f5:c5:f9:90:
45:be:fa:b4:69:16:3c:4e:5b:46:34:58:ff:ac:b7:
bd:c9:de:49:86:ef:03:d0:87:03:38:e6:a2:7e:02:
4f:e4:6f:92:e6:43:54:32:a1:18:08:a1:14:8f:e9:
15:1f:e1:df:40:bc:8f:71:e2:f4:ba:8f:56:51:02:
54:43:57:ca:4f:43:bc:8f:d7:19:bc:2f:0b:da:60:
9f:05:5f:a3:8b:27:0d:83:77:a7:f7:e9:ce:6b:b0:
65:b8:ff:32:57:31:62:59:03:ce:40:08:4c:a1:d3:
51:9b:52:ba:4e:40:12:1a:50:b1:40:80:9d:9a:35:
8a:7f:b4:ad:2f:8d:5f:90:97:b8:7f:a6:6b:16:33:
98:4b:e2:1b:42:fb:2a:fe:e3:22:57:28:00:05:e5:
c3:36:eb:cf:f8:70:b2:eb:60:a7:9b:46:55:19:21:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:12:42:D6:5A:32:2A:61:1E:E9:36:0B:94:70:4A:01:B0:FE:03:73
X509v3 Authority Key Identifier:
keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4c:f6:6f:f1:1e:60:e1:89:30:e2:88:a5:3a:99:d2:7a:1a:
92:09:23:0f:51:46:72:0b:a2:d5:20:41:a3:7a:8b:43:7e:3d:
c8:cb:51:e6:d4:93:91:ff:61:c0:bc:3a:70:af:8d:91:86:76:
41:0a:13:91:50:fb:e3:89:73:38:0b:c0:4c:fd:44:41:d8:a0:
8d:6e:fb:f2:0b:05:b6:e8:aa:21:5a:89:35:c4:8d:d8:86:50:
7a:6e:d0:b8:e2:ed:15:cc:eb:12:b2:d1:a1:af:3b:97:90:b6:
df:25:a2:cf:99:e5:4a:e2:28:ea:c3:ba:9b:81:ba:fb:1e:9e:
0b:cc:66:1b:51:2f:34:ff:9a:03:59:f4:38:0d:f2:80:5f:0d:
be:e9:ee:bd:ee:70:a4:00:b5:42:c2:ea:6d:1f:a8:3b:75:5c:
6e:de:bf:1e:6d:5f:3c:7d:39:64:7f:3a:7c:c0:04:9f:76:63:
81:e2:e4:3a:33:04:83:b0:23:fd:98:b5:9f:cc:b0:e0:1c:ea:
2b:a1:0c:75:62:1e:8d:25:8f:c2:5e:58:a2:fc:ac:de:b8:35:
91:f4:6e:4c:a6:b3:59:ae:dd:0d:ee:a1:c2:43:d4:a7:7b:3a:
80:16:1d:be:e5:12:7f:70:c2:09:0f:28:a5:73:d0:80:f7:11:
65:a8:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:43:07 2026 by rpki-client