
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
File: 6xID5pA4E7MN-RtMaXlSXctjCBU.mft (raw, json)
Hash identifier: IaDTp+DSXO5j3mplJQHg9k81I3hfWxeBVKrQqRGL1i8=
Subject key identifier: 26:AF:84:7E:DB:E8:E0:49:E3:D1:25:78:E4:95:02:B8:7A:09:9C:9E
Authority key identifier: EB:12:03:E6:90:38:13:B3:0D:F9:1B:4C:69:79:52:5D:CB:63:08:15
Certificate issuer: /CN=A91FF5DA/serialNumber=EB1203E6903813B30DF91B4C6979525DCB630815
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
Manifest number: 31
Signing time: Mon 21 Sep 2026 08:40:45 +0000
Manifest this update: Mon 21 Sep 2026 08:40:44 +0000
Manifest next update: Mon 28 Sep 2026 08:40:44 +0000
Files and hashes: 1: 6xID5pA4E7MN-RtMaXlSXctjCBU.crl (hash: yTNOU8XsAw9GTbecYqlYma/VEQCmDtsXDir+88Ln8Jg=)
2: E2C181D2707111F1B7FB9D3F77A30FBC.roa (hash: xSJ4aIOrc6x+QwiP0rZxv5INu2KqemCI5ZONBKN16C8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.crl
rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5DA, serialNumber=EB1203E6903813B30DF91B4C6979525DCB630815
Validity
Not Before: Sep 21 08:40:44 2026 GMT
Not After : Sep 28 08:40:44 2026 GMT
Subject: CN=6ab0ed8d-45d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:c7:74:66:fd:16:11:03:be:22:ff:ed:93:
ce:1d:23:ff:df:d6:55:e8:7c:bb:74:0b:67:55:4d:
5b:73:7a:29:aa:47:63:50:dc:de:5a:09:22:f4:0a:
d3:d8:47:dd:4d:a2:d3:31:77:f8:68:2e:25:f1:06:
3a:b6:ef:5b:b0:6e:fd:2e:4f:ea:47:cc:b2:18:c9:
52:37:91:95:3d:da:4f:6e:a7:fe:bd:c7:20:68:ea:
50:d2:3e:1f:6a:b5:a9:ee:bb:eb:e1:ef:fd:8d:a4:
3e:29:21:5b:e4:8d:91:34:6f:3e:8e:93:a1:fc:8c:
37:62:1a:02:33:b5:99:79:7d:5e:62:3f:f1:ea:1b:
22:6b:d4:6c:b9:9b:0b:90:81:28:0a:08:b1:a0:82:
88:fe:61:c6:1b:16:59:54:2c:cc:a6:48:8c:3d:90:
d0:d8:ca:50:12:3a:5c:6f:27:5b:a9:cb:9e:c1:92:
0e:79:70:e3:91:00:28:1d:16:5d:31:d3:55:8d:52:
9b:85:af:14:02:59:6c:c1:06:39:03:16:df:a5:f1:
54:7a:35:da:2f:1a:29:ca:a0:14:1f:1f:8c:be:6b:
83:ba:52:95:8e:ec:39:9d:0f:94:a8:c2:ea:ec:38:
14:09:85:cc:f8:e7:76:c0:a8:77:49:f5:bc:28:2c:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:84:7E:DB:E8:E0:49:E3:D1:25:78:E4:95:02:B8:7A:09:9C:9E
X509v3 Authority Key Identifier:
keyid:EB:12:03:E6:90:38:13:B3:0D:F9:1B:4C:69:79:52:5D:CB:63:08:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:c9:cc:dd:b9:bd:ca:09:ed:03:d1:30:d8:d3:4e:f3:9a:
0c:4b:57:40:31:89:23:29:d3:14:fa:1e:b1:0f:f1:38:b5:61:
2a:24:18:59:ff:1d:e4:40:0b:74:65:d1:32:02:08:bc:2d:c6:
b5:95:98:be:ea:d7:e2:37:12:01:79:d7:3b:6c:d6:4f:b7:9e:
fe:6f:d6:2c:86:1d:d2:70:98:33:03:a9:1e:e0:e7:82:01:46:
fd:c2:4d:6b:39:97:e4:a3:fe:77:75:34:42:3e:f7:15:22:23:
9d:a9:ea:c3:65:40:72:04:46:21:0d:c4:f6:95:64:6c:49:90:
3a:30:c6:67:0d:db:87:8d:4d:5d:05:93:9c:0c:d2:a5:7b:fd:
4a:b6:f8:87:28:97:aa:2a:81:89:41:5d:b8:32:2e:b4:03:01:
3c:9e:e2:86:82:eb:99:c9:a9:8a:66:8e:0b:ac:68:3e:c2:50:
a0:2e:ed:53:4e:c5:f3:ea:95:0a:9b:af:ae:e0:ed:26:e7:e1:
da:ed:01:33:e0:53:8a:f2:a3:25:49:33:a2:bd:a1:e3:3a:71:
90:dd:5e:3d:36:27:4d:8b:c4:c9:78:37:03:af:8a:54:a8:88:
df:95:45:4c:fb:79:4c:01:35:3a:f0:72:f0:1f:52:cd:62:55:
6c:ac:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:26:10 2026 by rpki-client