
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier: cMreaL2lR1wLo2CRNvQcv+0wYZ4lMKFU7TKOlB6sk0c=
Subject key identifier: 77:7A:85:2D:52:C3:7F:6B:FB:1A:C4:A3:CB:DA:58:12:A2:35:F9:A9
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial: 02D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number: 02C9
Signing time: Sat 05 Sep 2026 01:08:19 +0000
Manifest this update: Sat 05 Sep 2026 01:08:18 +0000
Manifest next update: Sat 12 Sep 2026 01:08:18 +0000
Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: Qz9c7AbWzid1YzTqt/iACo7cgWiHl9TuAiUzb3Jv7oc=)
2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: 4eRmnV1SKuH1F3TR04UxwRBazkfSRALaDVotnHYReM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Validity
Not Before: Sep 5 01:08:18 2026 GMT
Not After : Sep 12 01:08:18 2026 GMT
Subject: CN=6a9b6b83-6506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:67:54:61:b8:63:8d:b7:f5:6c:c7:63:8d:
7f:f0:15:e9:35:af:fc:96:ee:b4:ce:0c:b4:bd:01:
60:d8:4c:d5:09:bf:32:de:0a:7a:8e:a3:12:94:33:
b5:4c:6e:01:23:d9:01:e6:80:98:35:a6:7e:03:e1:
9b:be:ba:2f:e6:2c:0b:b3:c7:2b:d5:40:23:d5:7a:
b6:e7:e3:18:1f:56:38:f6:a6:86:a9:9a:bc:f7:a7:
0c:e9:da:e1:41:47:25:34:dd:94:f8:81:f8:9d:6f:
7f:34:c0:59:c3:d2:62:dd:4e:48:e6:6d:33:29:d0:
37:7b:33:a4:1f:f4:0c:de:88:5b:95:79:46:19:36:
f1:c2:2a:39:75:f8:79:ad:c2:1b:3a:ce:41:35:73:
08:e0:e9:ba:24:f0:f6:2a:26:3b:65:e6:b5:49:00:
17:0c:28:31:8b:02:c4:8c:18:2b:ab:5c:a7:11:34:
e6:05:01:f7:69:14:21:bc:e3:e9:b4:63:c3:b4:89:
52:a1:83:42:38:59:f9:12:bc:df:81:c4:b7:10:e8:
82:df:70:81:a7:ca:e6:77:24:1f:03:c5:ef:a3:38:
cc:06:63:52:05:c4:35:c7:02:ed:9c:9e:e1:66:62:
e9:ed:0f:63:d0:bc:a6:dd:34:63:72:9a:e2:ab:62:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7A:85:2D:52:C3:7F:6B:FB:1A:C4:A3:CB:DA:58:12:A2:35:F9:A9
X509v3 Authority Key Identifier:
keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9a:f4:d3:c9:b7:c3:52:f9:86:26:c4:11:51:c6:7e:30:a9:
71:b8:5b:a7:10:84:65:f1:7c:2b:a1:ba:5e:23:65:8e:92:21:
03:cc:17:fb:7e:34:9b:97:b6:c7:e9:b3:b5:60:25:41:9d:a6:
51:7b:fc:fe:e2:b9:9f:a4:9e:1c:71:1c:eb:f6:87:2b:b6:23:
e0:dd:9d:05:bb:82:b5:43:46:23:50:d6:13:19:06:2a:cc:a3:
09:ae:89:bd:0a:ac:c3:f8:84:7b:4a:85:e9:05:83:b0:ff:9a:
be:a1:b3:ec:ef:00:28:2a:03:99:2c:2e:3b:e0:ae:dd:a1:d2:
38:4f:18:13:71:55:d6:05:05:81:35:36:98:ac:87:11:57:0e:
b1:a4:d7:cd:62:61:03:62:4d:72:a3:7e:9a:95:c3:53:50:8b:
a7:c7:a2:16:09:3f:6f:32:19:bd:6e:8d:65:5e:1e:de:8a:2b:
0d:cb:53:75:b4:db:c7:13:a9:f0:a6:0e:cf:fe:6e:68:7b:6a:
0b:08:df:78:1d:17:3b:30:86:9c:1e:4a:70:83:f2:76:30:d0:
5b:2e:c2:0d:74:a4:62:be:14:e4:76:cf:65:48:7f:dd:ca:df:
97:9f:1a:53:d8:28:db:55:bd:37:c4:d2:60:73:61:7a:c9:82:
5f:a0:b0:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz
NTgzMDk1NkMwHhcNMjYwOTA1MDEwODE4WhcNMjYwOTEyMDEwODE4WjAYMRYwFAYD
VQQDEw02YTliNmI4My02NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyhFnVGG4Y4239WzHY41/8BXpNa/8lu60zgy0vQFg2EzVCb8y3gp6jqMSlDO1
TG4BI9kB5oCYNaZ+A+Gbvrov5iwLs8cr1UAj1Xq25+MYH1Y49qaGqZq896cM6drh
QUclNN2U+IH4nW9/NMBZw9Ji3U5I5m0zKdA3ezOkH/QM3ohblXlGGTbxwio5dfh5
rcIbOs5BNXMI4Om6JPD2KiY7Zea1SQAXDCgxiwLEjBgrq1ynETTmBQH3aRQhvOPp
tGPDtIlSoYNCOFn5ErzfgcS3EOiC33CBp8rmdyQfA8XvozjMBmNSBcQ1xwLtnJ7h
ZmLp7Q9j0Lym3TRjcpriq2J5DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHd6hS1S
w39r+xrEo8vaWBKiNfmpMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD
QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0
RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf5r008m3w1L5hibEEVHGfjCpcbhbpxCEZfF8K6G6XiNljpIhA8wX+340m5e2
x+mztWAlQZ2mUXv8/uK5n6SeHHEc6/aHK7Yj4N2dBbuCtUNGI1DWExkGKsyjCa6J
vQqsw/iEe0qF6QWDsP+avqGz7O8AKCoDmSwuO+Cu3aHSOE8YE3FV1gUFgTU2mKyH
EVcOsaTXzWJhA2JNcqN+mpXDU1CLp8eiFgk/bzIZvW6NZV4e3oorDctTdbTbxxOp
8KYOz/5uaHtqCwjfeB0XOzCGnB5KcIPydjDQWy7CDXSkYr4U5HbPZUh/3crfl58a
U9go21W9N8TSYHNhesmCX6CwVg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:32:14 2026 by rpki-client