
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier: ovnCW8J1FyblV/qAp6XYjapPTuTVUFu/0VFVbNpVzpE=
Subject key identifier: AD:0A:34:5F:BB:AE:E3:C1:93:89:4C:25:99:FF:E2:FC:9B:B9:86:38
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number: 02DE
Signing time: Mon 21 Sep 2026 01:04:50 +0000
Manifest this update: Mon 21 Sep 2026 01:04:49 +0000
Manifest next update: Mon 28 Sep 2026 01:04:49 +0000
Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: miuo9j99O6MgxhtZkVZvFbd3V81yU+QBwKnoEJETElo=)
2: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ufXIWT3ybJ8GsLB+9LFHnYVpVRoxtUOEddi9vIDDRZ8=)
3: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: 0TEewgELmV5zVXvWVafqWeimsKRDC+bmdch2A5FjSG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Validity
Not Before: Sep 21 01:04:49 2026 GMT
Not After : Sep 28 01:04:49 2026 GMT
Subject: CN=6ab082b2-4595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:c2:f3:d0:72:f9:3c:9f:e1:a7:ad:5f:a5:
90:58:ba:6b:b5:f2:45:19:44:9b:33:8b:ef:66:d5:
c0:0d:d1:7f:05:a3:52:6c:20:9f:04:8c:59:db:f0:
3a:f9:41:56:05:cf:a5:12:75:f3:18:d7:4c:a8:63:
65:e8:6a:4a:2c:5c:6f:6f:8c:05:c1:75:8c:a8:41:
16:df:91:20:86:61:00:93:67:8b:95:52:32:86:96:
15:ac:0a:08:d1:f2:1f:18:d7:1f:90:4b:f7:d4:20:
e3:15:4f:3b:c3:20:c5:32:0b:e5:a0:52:94:a2:4a:
5c:41:62:1e:7f:e1:79:60:4d:aa:e2:eb:8d:fa:43:
2b:96:ee:c2:42:0d:4e:ea:3f:6d:19:27:9a:1e:63:
fe:52:46:68:69:57:30:6a:f4:a6:80:a6:9f:6d:e0:
e1:87:79:8f:a7:ac:75:df:ea:78:68:91:a4:96:4f:
a8:28:a0:30:d8:9d:30:eb:48:5f:12:bc:cc:1f:47:
45:80:25:cf:37:4b:06:0f:f0:66:65:33:bb:92:ea:
ce:51:45:20:20:dd:4e:3d:9c:19:23:c1:4b:85:24:
9a:44:8c:9e:6d:22:ae:3a:4e:c6:8d:34:a5:07:27:
3b:af:f4:98:cf:ba:17:fd:a0:eb:a8:c7:8c:17:8d:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0A:34:5F:BB:AE:E3:C1:93:89:4C:25:99:FF:E2:FC:9B:B9:86:38
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:02:15:ab:a8:80:c4:98:26:4f:80:4b:4d:ea:1c:2a:5d:85:
e6:75:6a:a1:41:cf:47:e1:4b:f3:13:c8:f7:c1:ab:61:1f:77:
4c:cb:da:e8:cc:b7:c9:35:1d:7d:68:5a:2c:a1:2b:e2:84:f9:
4c:18:a4:25:6f:6e:f7:bd:4f:92:79:26:70:bf:a9:b3:88:21:
6d:45:d7:0e:5b:0d:ef:1c:bf:95:ee:3b:e7:a8:7a:ed:2b:82:
b2:13:ba:44:14:32:d7:cf:51:6e:0b:37:af:db:77:77:af:96:
0e:a3:d0:11:4b:d0:0a:96:92:62:83:26:05:3b:f5:73:98:01:
4a:f7:b8:d1:60:e5:c8:9d:17:c1:2b:83:44:35:26:c3:e2:57:
f2:3f:a0:59:0c:3f:c8:3f:0f:01:68:de:bf:3f:bd:f6:25:41:
58:ad:96:9a:89:a9:9f:cd:78:65:b8:64:56:9f:ba:e6:5e:32:
dd:b6:a7:e5:b6:b1:d0:d3:d6:c4:3e:6b:7e:df:fa:36:75:c3:
ff:a8:d4:61:bb:46:d4:a3:23:1e:8c:19:c0:f7:bb:cf:66:0b:
44:30:1d:2d:da:aa:21:3e:29:e3:93:9c:dc:43:c9:e5:fc:e6:
dd:e5:74:c4:06:5d:a8:50:d3:36:7f:88:a1:33:f2:dd:56:bb:
c0:e9:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:42:31 2026 by rpki-client