
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: 2ySlztlBjJYLHFRulXolHYm1GvtL1NiChdt+3n1AYBA=
Subject key identifier: 85:AB:46:65:E5:5B:18:49:52:F4:82:93:EA:41:6E:9C:E3:DB:A2:82
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E5C
Signing time: Sun 20 Sep 2026 16:01:46 +0000
Manifest this update: Sun 20 Sep 2026 16:01:46 +0000
Manifest next update: Sun 27 Sep 2026 16:01:46 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: hoCg7FaJ4lWthTYcKpAN1q5aWqP/2qON4ldZxUaaIb4=)
2: B842F0DEDB8A11F09F03163163D3641D.roa (hash: ks313B+YVez30ZvOkXppIDe7jBhr+JL2wzA7+C6C6as=)
3: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc=)
4: B7BA9860DB8A11F09F03163163D3641D.roa (hash: O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7794 (0x1e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: Sep 20 16:01:46 2026 GMT
Not After : Sep 27 16:01:46 2026 GMT
Subject: CN=6ab0036a-3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:ee:a0:e9:eb:3e:35:52:d1:f7:02:d5:d6:
be:8f:1e:bf:46:e9:d7:99:7d:59:fd:e4:0d:dc:ad:
bd:12:e3:07:5b:46:de:63:59:c1:bc:b7:fc:a8:69:
fb:01:72:72:1d:04:2f:96:82:3d:09:62:52:bc:cf:
ea:38:67:78:1d:10:5f:0c:ee:86:9a:50:d3:88:95:
ae:c1:58:96:d6:ed:32:f6:ad:6a:51:d4:66:13:d7:
7d:65:a4:48:83:ca:ae:2c:7f:3e:9a:90:03:a2:37:
71:48:60:75:2a:a1:06:ef:c4:74:21:50:b9:99:c9:
c5:aa:f2:47:2b:34:d3:c2:37:78:0e:a5:32:30:86:
07:8b:ba:1d:89:09:11:73:85:42:1f:9f:08:b8:5e:
0f:4a:35:71:c0:dd:2e:63:30:90:b3:1e:b9:20:b8:
d5:f7:9e:c4:3c:52:e1:9d:a1:b0:53:56:d0:1f:a0:
b3:67:ae:95:2c:fe:1c:23:34:33:75:6a:82:85:d2:
80:28:b3:26:18:6c:93:6c:ad:bd:50:b8:cf:a2:13:
4d:90:7d:c2:1d:bc:35:30:87:b0:89:f6:d2:73:ab:
a5:6c:df:8d:9e:e5:07:74:8c:e8:cf:ce:41:f2:6d:
b3:f1:a9:17:23:25:8f:a1:7d:80:4a:71:96:8f:7d:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:46:65:E5:5B:18:49:52:F4:82:93:EA:41:6E:9C:E3:DB:A2:82
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:aa:96:b2:e5:87:93:f4:d5:b5:40:76:8f:cc:2d:79:3d:
2f:29:76:b0:e2:10:77:75:1d:f5:42:a8:15:2a:59:35:1b:df:
36:b1:69:20:0b:5f:eb:b1:b5:3f:82:9b:47:13:49:f6:a5:4b:
4d:a7:a6:5f:72:6d:98:74:38:d3:18:3a:1f:08:34:08:90:4d:
f8:b5:93:98:ff:06:46:7b:a5:de:a9:f6:73:11:8c:93:3a:c5:
a5:ed:df:a5:46:f8:9a:0c:ca:6c:62:e0:8c:c1:65:d2:4f:67:
93:88:3b:97:1d:6c:de:42:5b:e0:70:e2:b0:1f:ff:1e:90:e5:
68:3a:7f:cf:4b:75:af:97:3b:f5:0c:d4:5e:e6:89:8a:40:2c:
67:6f:9d:65:4e:f7:6d:24:59:fa:3b:54:e2:c2:a9:53:bd:9d:
83:30:b4:f1:f0:83:07:d8:c1:90:e7:ec:40:59:31:85:80:a6:
52:9f:f5:05:30:0d:94:83:42:f4:91:fc:82:e3:1d:47:82:42:
e9:ab:bc:74:72:9e:3f:de:62:df:a7:da:14:11:cb:b6:18:fd:
6c:14:da:51:ac:6a:b2:50:9d:4a:4c:7f:2c:db:a5:a7:8b:ff:
57:f4:6a:f2:cb:f9:7e:f4:5e:5c:5e:d1:10:b2:37:d2:80:a5:
69:a1:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:38:38 2026 by rpki-client