
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier: 2qpfQZzmTG1oOddah3P7ZkaG6bjKLcGL7ucNtbWIJ9A=
Subject key identifier: B6:17:92:21:D3:A9:8D:6F:97:49:E8:4A:80:03:18:21:5B:E6:AB:87
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number: 01B7
Signing time: Mon 21 Sep 2026 03:58:21 +0000
Manifest this update: Mon 21 Sep 2026 03:58:21 +0000
Manifest next update: Mon 28 Sep 2026 03:58:21 +0000
Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: oTV5YR6hISx0rbESmBTctbDKEA+Cmz0+UT/o+JXnMh4=)
2: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: luJDZXUCsErEO6dlGQ0NaKVijOt5Fv1/7lPhVmE4g3Q=)
3: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: P9IZK1ovU783CyWJnT8g69cd8sfR6u3xdDmab8jhoBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Validity
Not Before: Sep 21 03:58:21 2026 GMT
Not After : Sep 28 03:58:21 2026 GMT
Subject: CN=6ab0ab5d-32aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:b6:31:d4:68:3f:ed:8e:7e:ae:0d:48:4d:
12:a2:ad:06:7c:84:aa:40:8a:1d:bb:00:3c:cb:06:
b0:61:90:b9:6c:f5:19:8a:11:54:c8:e0:85:48:10:
7b:83:e5:e1:0b:2a:04:68:bd:62:df:ed:52:84:99:
67:78:11:10:28:97:c0:e0:03:b2:35:3f:f1:ac:db:
18:a0:b1:c4:04:23:25:5a:49:9a:cc:27:b8:21:f3:
fb:7a:03:63:4c:34:22:33:fe:1b:9d:15:f4:66:e0:
4f:20:c6:b2:cb:eb:19:14:c3:c9:38:64:63:3f:95:
1b:41:c5:98:31:66:d8:1d:80:b4:ac:83:78:20:68:
c1:cb:46:df:05:79:56:5e:31:1c:e6:1d:bd:87:2e:
b8:2d:1e:0c:a3:34:ab:39:ee:b8:61:50:e7:55:16:
0e:b8:8e:f0:b2:d1:51:38:5d:e4:c9:59:8c:6b:fe:
bd:10:d7:ea:60:77:b1:c2:d5:57:80:d7:1a:5f:a2:
91:83:03:da:c4:28:1e:54:93:ff:51:d0:ec:79:4d:
a1:c0:e8:84:c5:a4:1e:cb:cd:f7:55:a1:3c:66:ce:
bf:e8:20:68:39:53:2f:5d:de:48:f0:2c:2e:a5:22:
ee:30:05:1e:21:d9:7d:1b:4d:5f:ba:ae:86:9a:43:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:92:21:D3:A9:8D:6F:97:49:E8:4A:80:03:18:21:5B:E6:AB:87
X509v3 Authority Key Identifier:
keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:8c:b8:a0:73:7f:16:16:a4:43:55:5d:55:11:95:ea:6d:
7d:87:35:39:be:28:ad:db:8c:0b:fd:df:70:cf:20:8a:6d:a4:
30:f9:7b:4c:42:2f:be:46:f7:8b:53:8e:c5:de:63:5c:c5:9e:
32:b9:86:98:6a:64:00:c6:1b:9f:2d:2b:28:dc:7d:be:95:67:
49:6a:54:fe:80:ba:e6:79:84:8c:63:3b:4a:f7:b6:b0:d0:27:
81:e9:4b:e1:fc:c0:e1:33:8e:2c:c3:10:62:bd:44:e4:73:e8:
c6:d5:6e:5a:e6:fd:eb:e9:39:f6:b2:29:79:b3:36:b6:d0:ed:
2b:70:a7:ba:31:21:26:2f:66:22:ce:a0:91:8c:88:6f:88:a8:
f2:4a:d5:ce:a7:b3:3b:95:79:97:1e:df:32:ee:27:5c:b4:f4:
62:14:50:70:b4:ca:26:42:e1:64:fd:a9:5f:49:ff:7e:2c:71:
f4:bc:e7:c0:ce:a4:49:53:1c:cf:ea:d7:6b:2e:8d:01:6f:b8:
c0:6f:ba:d1:23:da:61:fd:03:66:96:ed:bf:f1:08:14:19:d9:
99:07:de:ab:2c:af:15:67:e0:1d:ba:61:e8:33:4d:66:2c:c7:
a1:7c:eb:ed:4c:6c:21:09:02:f4:45:5f:0d:a6:3c:8a:b2:7e:
35:b7:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:54:29 2026 by rpki-client