
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json)
Hash identifier: HnVdNrwm6gr6FfaOO665yI85JcYbCRYM89bTyfLDjFk=
Subject key identifier: D1:D1:0F:A2:D9:AC:46:DF:3C:39:62:2A:D6:C7:35:66:10:E9:6C:1A
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial: 3583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
Manifest number: 3582
Signing time: Sun 20 Sep 2026 14:31:46 +0000
Manifest this update: Sun 20 Sep 2026 14:31:46 +0000
Manifest next update: Sun 27 Sep 2026 14:31:46 +0000
Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: cd6scbqNKhRfDUmqny6ZrV7L14YB8SzRXqv9xXHA30k=)
2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Validity
Not Before: Sep 20 14:31:46 2026 GMT
Not After : Sep 27 14:31:46 2026 GMT
Subject: CN=6aafee52-515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:69:a0:ef:17:f5:7b:46:4b:73:fb:2d:c8:
17:ee:2e:4b:25:28:dd:f0:31:84:43:2e:94:7d:bd:
28:db:ee:17:dd:52:d6:d9:6a:7d:4c:40:ae:56:03:
37:f9:b6:6f:4b:e7:18:8a:18:19:38:e7:c6:2c:7f:
9c:2d:64:cc:29:ce:20:92:12:69:d9:c7:a6:c7:b3:
ce:4e:a0:0b:a9:30:1b:59:7c:ee:fb:0d:fd:76:2f:
99:75:75:d8:c9:e2:09:25:d4:b7:b8:a5:02:da:72:
98:eb:1a:a3:ac:84:a1:ab:fa:22:d8:f0:00:97:31:
98:f8:0e:8f:55:db:2f:9b:bb:df:e5:e4:94:7a:ed:
e4:fb:ba:9c:ee:61:77:1b:13:92:f6:ff:d0:55:fc:
8e:60:dd:35:fa:9c:12:be:54:2f:cf:16:5d:58:e6:
fd:43:6e:19:f2:f6:4e:65:f5:cc:30:37:31:ed:4e:
99:4c:55:74:ae:db:56:a4:8b:59:0e:fb:05:9a:ff:
21:6a:62:04:57:83:c3:e7:1f:50:45:49:d5:3a:8d:
98:cf:29:42:50:4a:9f:5c:50:02:b2:6a:17:1b:0e:
e6:79:f9:c9:3d:3a:06:2a:53:5e:28:e1:b3:33:99:
45:f9:21:ba:d4:30:87:42:b6:1e:be:03:e3:28:9a:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:0F:A2:D9:AC:46:DF:3C:39:62:2A:D6:C7:35:66:10:E9:6C:1A
X509v3 Authority Key Identifier:
keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:9b:5c:f0:3e:65:6e:10:59:34:1e:93:16:8a:1b:4a:5b:
9f:51:e1:1c:5d:9d:e4:82:51:5e:77:ab:03:7a:af:d6:06:0e:
f7:64:6d:b8:c4:30:01:e5:b6:fe:ca:57:14:1e:5d:92:70:f4:
86:38:b5:92:a6:e7:9e:65:7f:6e:32:ba:09:b8:1b:94:45:97:
3d:32:60:28:9b:b0:4d:c6:11:a5:a6:07:ed:d0:3e:5a:5e:60:
05:0b:f1:58:d7:d5:dc:d3:d2:9e:e3:46:f5:ba:ff:7d:3c:e8:
08:d2:c5:6f:66:e9:59:07:a5:6d:06:00:5f:bc:74:ab:6f:0f:
75:5f:a9:99:5c:ff:48:6f:07:aa:3a:0b:f2:02:67:e7:75:26:
c2:1c:53:22:b2:83:d2:5d:9c:0c:ca:c6:5e:02:39:c7:8c:72:
46:93:79:f9:14:e0:e1:f4:21:b7:a7:e6:15:2e:75:01:2d:dc:
cc:5d:99:b9:ae:f3:99:64:ab:e5:a7:39:b0:de:f2:e5:ff:65:
af:ea:8f:fe:74:d9:ee:f5:ea:e6:ed:09:05:c9:55:bf:4a:dd:
1f:f4:f4:cd:a2:c1:92:1a:47:5b:15:48:4a:bf:a6:a3:40:25:
db:7c:69:9d:21:c8:0e:9a:d2:ca:17:01:12:c0:ca:7f:99:a1:
b5:21:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:05:51 2026 by rpki-client