
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier: 7DW5ZBtgJQiXv8jGdH8w4jbNOZBTGlrkRERYLrx2bVs=
Subject key identifier: BF:6F:24:22:21:30:77:36:E9:9F:10:92:A3:1A:E2:3C:ED:DA:B8:EF
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial: 2B1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number: 2AEF
Signing time: Tue 28 Jul 2026 15:39:45 +0000
Manifest this update: Tue 28 Jul 2026 15:39:45 +0000
Manifest next update: Tue 04 Aug 2026 15:39:45 +0000
Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: SIOBU4xwabfxnrM575cwdVq68ajZjJH+qciNsScvZ1I=)
2: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: EzjCQSqiPhSaFvXF1H6L31ZEuTh+F8SaBy2h9H/JZOI=)
3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dSCz7IvNO2r+X8zYzOrzx4jBPpWQHgUEzjmsQAJr19U=)
4: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 0j5aE5hiEdJstFRcjjMbmu5rVLRxiGYSHh/mpTlglk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11038 (0x2b1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Validity
Not Before: Jul 28 15:39:45 2026 GMT
Not After : Aug 4 15:39:45 2026 GMT
Subject: CN=6a68cd41-4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:61:63:df:8c:7f:11:1d:72:cc:29:02:45:
20:b5:e8:44:91:67:72:54:b1:9c:97:51:3d:98:fa:
4e:a2:cd:f4:4c:1e:b7:13:5c:35:f7:28:ce:d7:8e:
eb:db:c8:9f:26:c9:49:64:da:76:85:2f:ae:c1:d0:
89:91:9d:ab:79:92:00:ad:3c:94:c4:5f:2e:a8:5e:
e7:95:c9:3d:cf:af:4c:f0:67:3c:0f:31:83:cb:eb:
6d:16:c5:08:13:cc:68:f1:1a:0e:7d:b2:54:0a:18:
64:8e:34:fa:99:8b:b1:c9:58:8e:4b:5f:ee:79:cf:
81:88:f0:da:44:14:fc:2e:9d:90:2c:0e:6d:1a:fb:
af:e8:a6:cc:a7:68:2b:ae:ac:d7:b2:1d:da:94:b8:
57:31:7c:6b:a9:cb:77:a1:dc:ed:8b:b5:cd:2f:91:
44:4c:27:53:5d:38:09:13:07:a8:18:c0:9b:40:f9:
c2:60:8e:ea:97:85:9c:70:86:4e:ef:ec:02:2b:55:
92:db:94:da:5a:8e:98:e5:72:cd:10:f9:8f:ba:d3:
c0:e2:2b:5c:52:a4:a3:07:96:94:19:fb:15:e5:0e:
a7:7a:68:74:c9:c6:ac:25:50:a7:e5:3b:96:66:ae:
e9:ea:fc:84:f6:cf:40:b8:32:ea:92:a4:0e:70:7f:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:24:22:21:30:77:36:E9:9F:10:92:A3:1A:E2:3C:ED:DA:B8:EF
X509v3 Authority Key Identifier:
keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:75:46:b0:32:0d:22:25:b8:17:2f:22:e8:23:ad:40:bd:52:
c6:7a:38:c8:74:92:09:9b:2d:10:87:0b:8f:ed:da:94:ab:61:
71:0d:f9:80:94:7d:58:c4:ee:a1:90:52:70:ac:83:46:fc:3a:
bd:52:07:46:60:ca:fa:f6:f3:6c:87:c0:ff:b4:c4:88:fb:0d:
ff:7f:15:9e:76:ee:7c:7d:15:aa:e3:20:54:55:93:8d:15:a6:
de:bc:59:03:7a:84:33:bf:36:e2:42:4a:13:cb:18:f3:c3:fd:
2d:67:32:fa:0f:11:bd:36:f5:ce:aa:fb:72:d0:3e:2f:64:62:
37:08:f9:53:ec:ad:ea:66:11:dd:7c:e8:ca:38:c0:fe:6b:9e:
7f:b4:ae:53:67:79:85:b9:71:2c:75:3f:8e:14:59:18:94:f4:
8b:ef:d1:86:47:b9:b3:a8:a6:1b:00:fc:bc:b9:87:0d:6a:e4:
9d:c8:8a:e7:b5:a4:55:2b:e2:e7:ae:3d:56:1a:13:0f:03:d2:
40:26:5f:07:70:5f:12:03:13:ee:44:c1:81:7b:f8:ab:a2:6e:
b4:fc:df:a9:57:a6:f2:ef:65:61:8f:f0:f0:cd:3c:a3:18:85:
fa:b9:4e:c2:24:f0:e7:53:15:b3:54:59:1c:63:64:9c:45:ad:
8a:b2:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:39:17 2026 by rpki-client