
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier: GR40FcGvBm3FP0N304Doudq4IBcZh7u4bfEAbh6rqrs=
Subject key identifier: C7:C3:F8:13:8A:B9:82:AF:46:C7:12:86:6D:6B:E6:67:67:D3:6C:5F
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial: 214D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number: 2124
Signing time: Tue 16 Jun 2026 15:56:24 +0000
Manifest this update: Tue 16 Jun 2026 15:56:24 +0000
Manifest next update: Tue 23 Jun 2026 15:56:24 +0000
Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: RsV3tUSGqF1oBUVqdxVaYQAAWG0c34RkhlFnFO2IXqo=)
2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8525 (0x214d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Validity
Not Before: Jun 16 15:56:24 2026 GMT
Not After : Jun 23 15:56:24 2026 GMT
Subject: CN=6a317228-b809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:d5:b5:d7:35:a4:34:62:27:9a:de:9f:e6:
74:1c:54:e4:ac:95:32:f7:f1:4e:b7:f5:47:1e:8f:
c3:03:f0:fa:f3:69:35:7d:8f:bd:cf:49:9a:a8:e3:
69:17:d0:71:50:f8:06:45:d7:50:d6:48:a3:f7:3e:
c0:5a:8c:51:49:85:fe:9e:ab:b9:2a:11:4a:0b:18:
2f:aa:92:98:07:f9:25:00:fe:6f:a3:6d:ba:08:36:
3d:19:bf:35:eb:d0:96:ba:a8:41:2b:80:a2:d2:7b:
47:c4:73:c8:e2:22:b9:da:28:07:7f:84:d8:d8:e5:
93:6a:b8:1a:bd:e4:4b:f6:45:96:e6:41:4a:11:6b:
6e:47:1f:10:28:1b:a5:38:d7:57:74:01:c1:a3:b0:
14:b7:7c:90:22:34:03:8b:9c:57:22:34:4e:85:b0:
c1:c4:9e:95:3e:bb:3b:3c:ba:7b:54:8d:e1:92:73:
7b:fd:e1:0f:a2:69:a6:bb:b5:31:c6:29:ce:40:d8:
28:a0:79:95:29:f9:60:14:13:07:e9:08:f4:70:00:
db:2d:86:78:97:72:6c:37:50:d2:df:80:87:d9:c7:
1c:1a:0a:b1:3c:d3:2d:cc:80:d3:87:37:0e:29:84:
6e:3a:d7:80:e6:40:39:bc:98:9c:9c:99:87:cc:82:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C3:F8:13:8A:B9:82:AF:46:C7:12:86:6D:6B:E6:67:67:D3:6C:5F
X509v3 Authority Key Identifier:
keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:78:23:b6:da:84:fb:23:28:fd:1c:57:d4:36:d7:ce:fa:74:
2b:19:83:fa:d6:96:d1:9d:58:9e:f0:a9:0b:02:67:e9:a3:86:
10:aa:de:ae:83:ec:42:d8:b4:02:c9:a8:c1:6e:a8:ac:b9:24:
44:1f:85:7e:cc:d7:36:ca:3a:01:61:79:5d:b6:11:0a:d7:f7:
e0:99:58:67:a8:01:db:e8:d6:98:0a:7f:f4:9b:66:dd:74:70:
5a:51:70:2b:56:7c:32:de:94:37:a6:ca:ca:7f:97:28:a3:69:
9e:3a:d8:11:3d:9b:78:11:78:da:79:fa:8b:73:df:29:34:aa:
6f:c3:29:bb:46:4a:ba:2f:94:ac:d3:82:02:3f:37:ee:7e:a6:
28:87:56:56:a0:25:f3:7f:6b:f4:48:f4:2b:a3:48:99:9c:4f:
44:39:b0:7b:5a:81:6c:fc:d8:86:d7:1c:3a:b5:6e:43:fa:d4:
4a:80:46:c8:b7:b5:24:1a:24:92:1b:8a:09:96:dc:74:27:17:
e6:0f:98:67:09:9a:17:53:bc:b8:31:fd:8f:ec:8b:22:26:45:
99:7f:14:68:ea:da:0f:bf:1b:8d:65:7d:32:43:3e:ac:79:64:
b7:d6:42:b2:a1:53:95:35:93:43:8a:ba:3d:9b:49:b4:d7:75:
c2:75:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:58:09 2026 by rpki-client