
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier: uzqpzb3g3M2+a5AB97bLNz6Do+wMkJT1sjDHk8Oimcc=
Subject key identifier: 8E:05:F9:A2:7E:44:88:08:F0:9A:8A:BC:B0:3E:A0:F4:C1:64:71:EF
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial: 0296
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number: 0285
Signing time: Sat 13 Jun 2026 02:00:40 +0000
Manifest this update: Sat 13 Jun 2026 02:00:39 +0000
Manifest next update: Sat 20 Jun 2026 02:00:39 +0000
Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: OhMFm9TJBQ7N8skCVubAk/H0haGOXTJjIF6aehYhVY8=)
2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Validity
Not Before: Jun 13 02:00:39 2026 GMT
Not After : Jun 20 02:00:39 2026 GMT
Subject: CN=6a2cb9c8-d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:e4:b4:3b:a8:cd:ec:77:97:7c:7a:95:65:
26:2c:09:15:cc:1f:b6:e3:7e:cc:4a:ab:40:e6:22:
d5:76:9d:79:42:6a:07:43:6a:b6:5c:ca:5d:78:7c:
a3:1b:b1:73:b1:df:e3:14:79:8b:5d:70:41:57:79:
ef:55:c7:f2:5a:e4:53:a1:89:03:a3:e3:c4:8c:77:
c2:64:58:c3:f6:1b:4e:c6:22:67:d3:a1:7c:3c:af:
32:89:0e:22:d6:05:8a:59:b9:db:94:69:4b:a4:08:
b7:b9:6c:19:58:26:e6:71:7c:a1:63:0a:22:df:99:
d0:21:a6:4d:9f:3e:3c:ef:f3:f3:7b:66:77:31:fe:
eb:af:a3:87:33:0b:ed:fd:31:97:13:14:06:c3:6d:
85:9d:64:76:5b:cd:00:79:9e:e4:0f:ec:ea:e2:cb:
e3:e7:46:49:29:1f:52:ba:2b:d4:27:28:26:c6:52:
ba:5b:22:6b:08:54:9a:95:3a:b9:1b:c6:00:57:20:
a5:4d:eb:fc:9c:bd:a7:e4:da:d3:5c:b5:25:dd:77:
54:30:06:a6:c1:2a:b8:ca:32:8e:a4:5c:0c:65:77:
a4:47:d9:e4:dc:e0:32:9c:c9:95:4c:f0:72:31:e4:
ad:d6:92:3e:b8:23:56:b9:a5:bd:08:9d:d2:32:18:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:F9:A2:7E:44:88:08:F0:9A:8A:BC:B0:3E:A0:F4:C1:64:71:EF
X509v3 Authority Key Identifier:
keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:91:26:d8:f2:94:48:dd:90:33:1c:c8:74:e9:98:e0:6e:e8:
04:b8:06:52:1b:4b:94:73:a9:3d:41:7f:cd:aa:09:e5:12:0f:
40:82:57:c0:4d:fb:b6:0a:78:cb:dd:22:eb:ed:2a:e8:fc:ff:
16:4e:d7:50:1d:99:d3:5d:22:4d:8a:af:d8:6f:1f:e6:6b:2e:
ff:ce:51:ac:9d:c9:34:aa:58:46:48:44:35:09:d7:d6:bd:05:
c2:23:6a:75:b6:fb:79:be:57:b9:a6:d3:06:d9:3d:16:5a:8b:
df:aa:56:20:1c:9f:8d:b8:19:f6:8a:bf:78:d9:1d:f6:98:2c:
39:1e:60:d2:fe:56:ac:62:d0:bf:39:c9:49:f1:cc:ab:3d:bf:
45:a8:20:a2:d9:8c:da:3e:4a:de:f8:8c:4e:15:92:b3:ee:e4:
18:ef:67:a8:76:29:b3:a6:60:be:07:99:a4:06:f6:38:13:b8:
1f:fe:2c:49:47:12:f5:e8:4d:16:60:f9:38:67:e0:22:a2:5b:
72:9a:c0:31:42:d3:23:d3:59:cc:16:50:9f:b4:95:27:ab:85:
7c:44:53:bf:34:58:5d:56:80:e6:47:fb:75:3e:91:01:1e:d0:
21:01:2f:3c:4f:fa:74:51:42:8d:04:af:bc:ed:44:a6:f2:61:
54:e2:a3:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE
QTBGRjJFNzAwHhcNMjYwNjEzMDIwMDM5WhcNMjYwNjIwMDIwMDM5WjAYMRYwFAYD
VQQDEw02YTJjYjljOC1kMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpjktDuozex3l3x6lWUmLAkVzB+2437MSqtA5iLVdp15QmoHQ2q2XMpdeHyj
G7Fzsd/jFHmLXXBBV3nvVcfyWuRToYkDo+PEjHfCZFjD9htOxiJn06F8PK8yiQ4i
1gWKWbnblGlLpAi3uWwZWCbmcXyhYwoi35nQIaZNnz487/Pze2Z3Mf7rr6OHMwvt
/TGXExQGw22FnWR2W80AeZ7kD+zq4svj50ZJKR9SuivUJygmxlK6WyJrCFSalTq5
G8YAVyClTev8nL2n5NrTXLUl3XdUMAamwSq4yjKOpFwMZXekR9nk3OAynMmVTPBy
MeSt1pI+uCNWuaW9CJ3SMhhLwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4F+aJ+
RIgI8JqKvLA+oPTBZHHvMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3
RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y
NkxRa0htZFkxQ25hRF9MbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATZEm2PKUSN2QMxzIdOmY4G7oBLgGUhtLlHOpPUF/zaoJ5RIPQIJXwE37tgp4
y90i6+0q6Pz/Fk7XUB2Z010iTYqv2G8f5msu/85RrJ3JNKpYRkhENQnX1r0FwiNq
dbb7eb5XuabTBtk9FlqL36pWIByfjbgZ9oq/eNkd9pgsOR5g0v5WrGLQvznJSfHM
qz2/RaggotmM2j5K3viMThWSs+7kGO9nqHYps6ZgvgeZpAb2OBO4H/4sSUcS9ehN
FmD5OGfgIqJbcprAMULTI9NZzBZQn7SVJ6uFfERTvzRYXVaA5kf7dT6RAR7QIQEv
PE/6dFFCjQSvvO1EpvJhVOKjxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:33 2026 by rpki-client