
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
File: 6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft (raw, json)
Hash identifier: 4r1MzNLLhXMqnCDd1b7KhyCup+4wp83/YlleuM+jqdo=
Subject key identifier: 48:A6:E5:A6:32:B9:DB:3C:4B:62:A5:FD:C4:1C:14:29:DC:94:6B:6F
Authority key identifier: EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
Certificate issuer: /CN=A91A68C0/serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
Manifest number: 84
Signing time: Mon 21 Sep 2026 07:39:49 +0000
Manifest this update: Mon 21 Sep 2026 07:39:48 +0000
Manifest next update: Mon 28 Sep 2026 07:39:48 +0000
Files and hashes: 1: 6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl (hash: EBo+C9wG3EVj1/a4s9wf1aEX/pQ7nQ0V4Zb0/iqP63M=)
2: 539136C6F0E511F09202A4D23F6F56BC.roa (hash: POQzXqy3RM4ojD7gxxBinSVyVZFrKpKfKTRx+tHtaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A68C0, serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Validity
Not Before: Sep 21 07:39:48 2026 GMT
Not After : Sep 28 07:39:48 2026 GMT
Subject: CN=6ab0df45-6fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:31:d0:65:a2:c8:9a:a3:d0:d2:25:d2:41:
98:78:32:62:54:83:aa:b9:b7:cf:65:1c:3f:a5:24:
f4:4d:fc:f9:a3:a9:b1:95:48:33:08:84:3d:09:2f:
c8:4e:a6:3e:cf:4d:ae:45:2b:f0:e3:f1:06:f8:a6:
46:80:65:2e:26:5b:9a:6c:2e:27:1e:76:d4:3a:3b:
c0:fa:32:b5:bc:24:49:d2:90:51:ba:98:ed:7b:0a:
e3:c4:1e:3d:fe:11:22:a3:c6:3e:65:bb:14:67:c6:
b3:ce:eb:6e:35:ad:5d:21:6f:6e:9b:92:76:06:cc:
1a:3b:c9:b7:1c:f0:20:00:18:10:26:ee:c9:43:4a:
d6:16:92:b1:ec:8e:c1:a6:c9:23:60:c9:ee:e2:5a:
db:32:ee:bf:ec:1b:6a:d5:95:2f:6b:e7:89:46:04:
7d:4f:d3:29:59:55:e3:19:a3:ab:35:2f:22:2c:f3:
28:0b:15:40:bf:42:6b:3d:f4:6f:4c:87:8c:b1:44:
64:0f:a3:2c:e5:eb:6c:3b:42:a8:fb:68:7b:16:6c:
24:09:55:a2:14:e3:fd:0c:d0:35:d2:c7:9a:7b:93:
bf:c9:9c:a1:c0:dc:3b:ce:06:b1:a1:09:d7:d5:0d:
51:a3:cc:96:32:df:11:a7:53:d1:01:a9:cb:a8:ed:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:E5:A6:32:B9:DB:3C:4B:62:A5:FD:C4:1C:14:29:DC:94:6B:6F
X509v3 Authority Key Identifier:
keyid:EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:52:d9:48:20:db:30:a2:df:ac:7a:7a:27:4d:e6:a6:fa:8d:
fe:d8:36:22:cc:5e:18:f2:f3:8c:a9:cc:46:ac:5d:f3:44:0e:
1b:b5:01:c6:2c:79:be:80:46:44:c9:d8:9a:4f:02:6e:d4:6a:
2a:30:a5:2a:d2:35:01:2d:14:ec:d1:85:0b:16:dd:60:6b:f3:
16:1c:c3:a9:52:18:f9:b4:91:be:ff:e0:7a:ee:b0:4b:97:e9:
15:db:2c:a2:ab:a3:e1:d8:dc:09:a4:1f:02:c9:be:20:3e:8c:
b8:6a:15:3c:26:99:2f:7c:7e:f8:ab:a3:22:ec:69:ae:7d:17:
f2:6e:b6:08:eb:5c:4d:ca:1a:44:39:0a:af:f1:1e:1c:9e:67:
4b:1a:5a:9d:67:41:d1:3e:e2:f0:02:0e:93:d9:8f:35:70:4a:
ac:dc:32:52:26:13:1b:72:f1:50:14:e4:e2:47:f5:97:86:20:
4d:6d:f9:73:0f:75:fc:bf:e2:ea:13:6f:ad:59:eb:8e:7f:c3:
ed:a0:47:e8:81:c6:57:97:b8:c9:55:8e:39:4e:d5:4e:da:c3:
3a:a8:3e:58:51:13:87:2d:38:68:f0:a7:4d:1c:a7:e1:4a:77:
cb:44:58:3f:7f:dc:75:1e:09:e2:a0:6c:b5:27:3c:8f:3a:82:
b4:56:5a:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY4QzAxMTAvBgNVBAUTKEVCMTI1M0QxMkMzOEZBQjQ3RUVERjI1QjZBNjQxRTAz
QzI4NjZGOTgwHhcNMjYwOTIxMDczOTQ4WhcNMjYwOTI4MDczOTQ4WjAYMRYwFAYD
VQQDEw02YWIwZGY0NS02ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhAUx0GWiyJqj0NIl0kGYeDJiVIOqubfPZRw/pST0Tfz5o6mxlUgzCIQ9CS/I
TqY+z02uRSvw4/EG+KZGgGUuJluabC4nHnbUOjvA+jK1vCRJ0pBRupjtewrjxB49
/hEio8Y+ZbsUZ8azzutuNa1dIW9um5J2BswaO8m3HPAgABgQJu7JQ0rWFpKx7I7B
pskjYMnu4lrbMu6/7Btq1ZUva+eJRgR9T9MpWVXjGaOrNS8iLPMoCxVAv0JrPfRv
TIeMsURkD6Ms5etsO0Ko+2h7FmwkCVWiFOP9DNA10seae5O/yZyhwNw7zgaxoQnX
1Q1Ro8yWMt8Rp1PRAanLqO0BrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEim5aYy
uds8S2Kl/cQcFCnclGtvMB8GA1UdIwQYMBaAFOsSU9EsOPq0fu3yW2pkHgPChm+Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjhDMC83MzNBMzc2MkYw
RDUxMUYwODQyOUUxMkIzQjZGNTZCQy82eEpUMFN3NC1yUi03ZkpiYW1RZUE4S0di
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ4SlQwU3c0LXJSLTdmSmJhbVFlQThLR2I1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjhDMC83MzNBMzc2MkYwRDUxMUYwODQyOUUxMkIzQjZGNTZCQy82eEpUMFN3NC1y
Ui03ZkpiYW1RZUE4S0diNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbFLZSCDbMKLfrHp6J03mpvqN/tg2IsxeGPLzjKnMRqxd80QOG7UBxix5voBG
RMnYmk8CbtRqKjClKtI1AS0U7NGFCxbdYGvzFhzDqVIY+bSRvv/geu6wS5fpFdss
oquj4djcCaQfAsm+ID6MuGoVPCaZL3x++KujIuxprn0X8m62COtcTcoaRDkKr/Ee
HJ5nSxpanWdB0T7i8AIOk9mPNXBKrNwyUiYTG3LxUBTk4kf1l4YgTW35cw91/L/i
6hNvrVnrjn/D7aBH6IHGV5e4yVWOOU7VTtrDOqg+WFEThy04aPCnTRyn4Up3y0RY
P3/cdR4J4qBstSc8jzqCtFZaFA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:57:47 2026 by rpki-client