
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier: spuWRw0bVMkd/KKtHHGnQIhq+2uOEq2WeHkIrM1IfTQ=
Subject key identifier: 78:E1:F5:6B:85:FC:8F:C8:F2:71:9D:6E:C6:07:C1:63:2A:8D:FD:34
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number: A1
Signing time: Sun 27 Sep 2026 07:46:20 +0000
Manifest this update: Sun 27 Sep 2026 07:46:19 +0000
Manifest next update: Sun 04 Oct 2026 07:46:19 +0000
Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: gv4YclOEdQ8GwHwBHAqqe4jg/B6QCrR4/lm7RgytWao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Validity
Not Before: Sep 27 07:46:19 2026 GMT
Not After : Oct 4 07:46:19 2026 GMT
Subject: CN=6ab8c9cc-336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:bc:88:0c:bf:7b:ff:b2:30:38:38:0e:e5:
c9:df:f7:ad:75:1f:5e:8e:d3:c0:41:3b:ba:49:44:
81:84:78:57:e7:3a:40:4f:c8:fb:f5:5b:26:5c:03:
48:c9:35:fa:f5:b7:5c:80:77:e4:86:27:7f:ff:78:
d4:d0:6c:91:42:14:86:86:04:cd:90:34:75:ec:bb:
64:b2:c1:81:e7:8e:c1:4b:75:3a:e2:69:47:64:d1:
2d:58:7c:fd:2c:4e:8e:66:ba:88:13:a6:36:fc:45:
cf:7c:a0:e0:5a:31:7d:27:ff:7e:8e:21:ec:c4:5a:
56:26:52:54:af:da:37:d6:fd:dc:87:c8:66:6d:32:
c9:ff:68:c6:a3:69:b5:11:bd:58:9e:7d:8b:32:b0:
cc:02:da:b3:3a:78:de:6e:7b:30:89:e9:4c:5b:2b:
f7:0a:7f:00:0c:82:57:1a:0c:bd:b7:a1:b1:99:00:
f7:4c:1d:3d:8e:6f:51:ef:1e:5d:d2:81:2a:b9:71:
d2:e4:03:19:ff:98:9e:d6:a1:c1:c2:b8:ec:17:e4:
49:05:29:25:69:90:1b:8a:03:de:5c:c9:38:a6:88:
13:23:2e:4d:2c:b8:43:22:82:a0:33:10:89:5d:78:
c8:e6:42:27:ad:3d:95:bc:2c:ff:8a:f4:08:f4:a0:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E1:F5:6B:85:FC:8F:C8:F2:71:9D:6E:C6:07:C1:63:2A:8D:FD:34
X509v3 Authority Key Identifier:
keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9d:e9:7c:c1:92:e3:9e:4c:d4:b4:68:be:d2:83:c5:8f:fe:
5c:f7:f7:cc:f1:c1:49:b3:1a:6b:6a:f9:a0:8f:6b:03:21:7c:
a6:5a:e9:bd:2a:5f:6b:a1:a5:c1:ca:4f:23:7c:88:ee:b0:b8:
1c:40:5d:2b:54:8b:7a:46:d8:95:ec:2a:04:6e:93:40:f3:b9:
cb:be:92:64:8f:e9:fb:69:75:32:15:09:ce:8a:11:2b:35:bd:
75:5d:6f:04:67:b1:c2:7b:8c:1d:eb:51:88:85:46:ed:f2:17:
5b:4a:c7:6d:8a:38:e4:45:e9:a8:fb:43:07:89:d5:73:4d:69:
e2:06:d2:22:45:14:90:a5:ff:9c:eb:09:cb:98:b9:83:4a:18:
af:03:88:23:b2:10:e8:4f:fc:83:ef:c6:1f:b3:29:1d:97:c8:
59:a0:2d:aa:32:38:44:aa:21:57:ca:40:0d:81:9b:11:52:42:
3b:94:cc:35:4a:36:fa:5b:6e:9d:2e:c8:3d:a1:b3:c2:12:34:
db:12:f4:c4:a2:7f:a3:b7:b4:15:ac:ec:84:86:ff:dc:c8:91:
06:5a:5f:36:c6:84:31:ca:61:f4:0b:12:ad:06:14:89:5e:77:
e4:15:9e:e8:86:61:cb:a7:e4:f7:da:c1:0c:5f:ee:c3:d9:a1:
2e:3b:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:35:42 2026 by rpki-client