
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier: sMYVgbB6B/WVxGJVraH3kR9iR99XVMCsspHWpMzKTtQ=
Subject key identifier: 66:0F:E7:0B:BC:7F:29:1B:74:79:90:56:07:DB:6A:BD:36:60:76:94
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial: 2182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number: 2159
Signing time: Mon 28 Sep 2026 15:57:12 +0000
Manifest this update: Mon 28 Sep 2026 15:57:12 +0000
Manifest next update: Mon 05 Oct 2026 15:57:12 +0000
Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: fJtfCJv28WcD8ibQI/GUljiLW2X8C1/wS0w/ek7/48M=)
2: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
3: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8578 (0x2182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Validity
Not Before: Sep 28 15:57:12 2026 GMT
Not After : Oct 5 15:57:12 2026 GMT
Subject: CN=6aba8e58-c30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:08:eb:a3:0b:80:4a:6a:03:9f:ef:d3:82:
e3:7d:bf:09:b1:d8:df:38:a6:fb:ad:29:04:9a:42:
b4:4d:d7:c8:f0:cf:6c:2c:13:f2:d0:ee:ce:af:b4:
29:b1:d4:3c:b7:8e:32:3b:86:59:2b:cc:da:f6:13:
a3:9a:b5:2a:d0:13:56:20:d4:62:aa:3c:4b:1c:58:
f0:e8:55:5a:cb:28:ed:73:9b:6d:30:84:71:84:29:
3c:e6:17:6d:c5:e9:1a:0b:fe:2b:72:e5:35:6b:2d:
10:6b:d0:76:8f:f3:2d:1a:22:99:c2:f7:fd:06:b8:
6d:ce:60:5e:09:d5:cf:5e:bd:90:0a:b9:37:90:55:
4f:c2:b0:b0:28:06:ab:8a:97:e5:9b:9c:a1:f6:34:
ca:de:7b:49:6b:1e:35:ac:42:c1:f3:50:4c:c6:8b:
6e:c2:ac:b9:f6:00:c1:48:9f:ab:e8:d8:96:38:98:
a1:98:41:68:38:36:5a:d6:a0:52:78:d9:a5:40:cd:
c4:e7:c1:3b:e9:02:ac:53:cb:8e:72:ad:a6:d3:3b:
2f:5e:94:90:63:17:3d:0f:04:77:0f:f3:a0:79:48:
71:88:e3:d4:1a:d4:c4:96:8b:2f:29:2e:02:cd:e7:
72:0a:c2:64:8a:9f:aa:80:9b:14:14:0d:f8:af:a8:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:E7:0B:BC:7F:29:1B:74:79:90:56:07:DB:6A:BD:36:60:76:94
X509v3 Authority Key Identifier:
keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f1:68:ec:e8:ad:b5:c4:78:8d:04:1a:ff:8b:5f:04:87:98:
49:17:60:aa:57:21:eb:ed:bc:f0:94:f8:6f:24:5c:64:83:cd:
06:06:d7:4f:0c:97:6b:6c:4f:57:eb:4a:d0:33:8f:e9:57:55:
37:70:70:b9:2b:5c:b1:91:ee:11:dd:d0:9b:f9:fd:0d:f9:40:
13:e5:f4:10:15:10:b3:db:78:bd:c7:2a:cb:67:9c:e5:5b:eb:
f2:88:bc:88:0a:94:fe:e3:9d:4f:a2:0d:02:f3:c2:35:ff:e7:
7b:f0:fb:14:ed:fe:cb:11:e7:57:57:ca:8b:88:44:b8:a0:8f:
67:79:75:c1:ef:bd:8c:a6:bc:86:78:f3:03:82:43:1a:e3:96:
d5:c7:03:70:15:26:d6:53:33:bb:a3:88:ed:90:2b:44:8e:7a:
b1:a4:63:18:93:6b:d4:00:bf:e0:be:4a:a5:c1:86:6d:08:bd:
bc:02:7c:06:26:78:6e:c9:b9:f6:47:f0:88:6e:b4:a8:40:15:
0c:44:86:a8:7c:fb:dd:77:1a:90:e5:e2:97:6f:b4:09:ed:37:
51:39:65:fa:4f:58:de:28:b7:46:3e:28:69:b1:a6:43:f2:85:
20:42:8c:99:0e:5e:26:dd:e4:3b:d6:89:ba:b1:84:86:1c:06:
eb:d8:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:44:24 2026 by rpki-client