
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json)
Hash identifier: zQ0ts1Sow57ef5qooX0rnWVpvwz389wwEBnpeGTZHSY=
Subject key identifier: A8:F6:E7:B0:B6:87:EB:6F:82:DA:A8:E5:6B:96:47:52:48:53:DB:AA
Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
Manifest number: 0158
Signing time: Mon 27 Jul 2026 07:00:20 +0000
Manifest this update: Mon 27 Jul 2026 07:00:20 +0000
Manifest next update: Mon 03 Aug 2026 07:00:20 +0000
Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: J9yYzZz1jXCUASGTLCo7VE+aT/cdvVOXCwJi4T+YwuQ=)
2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: YCyt4eq0YTJbjtnPvyQjHsHsHz1MnNzHboaf/xb9tXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Validity
Not Before: Jul 27 07:00:20 2026 GMT
Not After : Aug 3 07:00:20 2026 GMT
Subject: CN=6a670204-d14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:c3:d1:4e:2d:b1:c9:15:99:3e:7e:b1:c2:
b2:c2:58:9f:d6:e6:66:ed:37:7a:77:b7:8d:63:b7:
38:c5:85:17:67:db:9c:69:95:3e:e1:9e:96:15:39:
76:88:67:04:43:9f:b0:58:a2:62:14:70:dc:f7:00:
7f:26:11:8b:4a:49:9a:9e:04:f1:98:53:85:e2:b3:
6f:48:f5:1c:ce:50:d0:64:28:77:5e:00:51:b9:12:
45:90:be:39:fa:fa:ec:8d:41:17:a6:eb:23:8c:87:
8c:da:fe:95:1f:d1:bf:28:cc:5f:b0:08:16:17:1b:
4a:1c:fb:df:86:57:f6:90:71:57:b4:1f:c4:2f:8e:
18:98:bf:d8:05:f4:52:70:ef:a8:65:27:98:3f:e4:
54:c9:7f:a0:24:23:0a:b4:a0:0e:1f:e8:41:ed:52:
65:d0:a2:df:63:47:76:89:8b:5d:67:f0:e8:2c:65:
24:a8:2f:45:3e:16:a6:5c:17:94:ed:18:7b:67:e1:
48:4b:63:b7:31:e3:10:0b:8a:8c:80:38:8b:13:5c:
4a:43:31:6d:da:25:2f:6b:c2:30:e7:93:0a:44:85:
31:9b:50:f2:fa:3a:8a:ad:a6:68:aa:b7:92:ef:a3:
30:50:31:d0:01:f4:48:b8:50:6e:cc:55:4f:09:ac:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:E7:B0:B6:87:EB:6F:82:DA:A8:E5:6B:96:47:52:48:53:DB:AA
X509v3 Authority Key Identifier:
keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:e1:e3:2f:37:bd:de:3e:83:14:30:a2:3e:f4:62:72:74:1d:
25:e5:f1:0e:06:64:4c:c9:01:f5:d2:a2:5d:ef:c3:64:15:2c:
8b:69:9a:9d:54:f0:57:fb:dc:e0:7f:55:93:4b:42:7b:0a:28:
91:ca:b7:82:e8:65:76:78:be:4f:d3:c8:39:8b:1c:f2:63:e3:
e3:11:85:58:d8:f1:a2:e2:b4:d2:1e:f3:9c:69:2b:ed:b2:75:
17:c0:af:16:c9:28:d6:f9:3c:71:37:37:87:62:71:ad:db:b4:
c0:b5:79:a0:ef:c0:c8:29:f1:40:4a:45:cb:5e:bd:d5:83:ac:
a2:4f:81:06:d6:a4:94:82:98:69:77:79:a2:fd:60:e5:b7:45:
f1:aa:63:5f:57:fa:f6:92:44:04:20:9a:8f:80:e9:68:c5:29:
ed:f2:f0:77:57:f3:03:52:28:b6:ba:e9:56:f6:bc:f4:e1:75:
da:d6:73:a2:21:96:f9:d7:a5:3d:90:31:c2:c4:cc:fb:36:c7:
63:01:c3:ff:f0:45:22:2a:15:0e:57:e4:79:2d:52:c2:58:19:
38:a8:cc:b8:1c:53:15:fa:e2:a8:a9:b6:90:0d:d5:08:1c:0f:
69:c1:2f:ee:74:90:f5:13:59:9c:4c:51:0e:e2:da:6d:94:cd:
b2:d1:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:32 2026 by rpki-client