
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json)
Hash identifier: 1PbBSUSHJgIqrNm6tUbJ5ULe4XTIyFcDD2vQ99UqA0A=
Subject key identifier: C2:D0:1E:C5:BC:A8:DD:2A:C1:AB:6D:52:F2:B2:75:48:B9:6C:27:2E
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
Manifest number: 01E3
Signing time: Wed 09 Sep 2026 04:24:49 +0000
Manifest this update: Wed 09 Sep 2026 04:24:48 +0000
Manifest next update: Wed 16 Sep 2026 04:24:48 +0000
Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: 5Cuk0hmLsVa7KC7Rg/YD9L4eTlkPR26UjuFJy7Z9pzw=)
2: FEEAACB46EE411F1B1ADB68B72A30FBC.roa (hash: +RE3q3/GU0kCkkSEOZVKPz8xcTRHljskjLwvIsQq2ns=)
3: 8F65EB2E222711F1BF2828673E3D8C67.roa (hash: qmo0KXQGv/zbQZwW5eSufteMAOTzrrUI2IHsP4izFvM=)
4: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: QEKWRIaz5rVdXFnVefwWj5qXkTtKhbq7VuHmNmjPbRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 04:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Validity
Not Before: Sep 9 04:24:48 2026 GMT
Not After : Sep 16 04:24:48 2026 GMT
Subject: CN=6aa0df91-510e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:19:ed:34:b5:80:84:45:41:74:f0:02:a7:
2d:cc:c7:e7:91:b9:f1:e6:bf:85:b7:97:f2:d2:f4:
b4:cb:55:4d:0f:bc:f7:45:0b:04:70:5f:8d:7a:3b:
b0:7f:9e:e7:d5:42:26:7f:1b:e0:22:ca:a1:c5:11:
2b:d2:5e:d9:a8:5b:3f:c2:9e:5a:ae:bc:7c:69:7c:
76:00:14:22:59:b2:a1:56:27:02:2c:84:e1:eb:70:
87:dc:c7:51:14:a3:7b:ba:0f:94:4b:79:07:84:0f:
56:72:7f:99:e5:ad:99:fa:0b:4b:3c:9e:7d:22:ec:
d5:85:bd:06:1b:2f:8a:03:5d:4a:3b:f6:e4:32:86:
82:9b:df:d6:7b:72:55:11:d8:de:62:f4:3c:33:8d:
b9:c2:37:e9:ee:fe:cf:92:e7:93:9f:65:9c:1e:d8:
10:38:05:25:9f:e2:3b:24:9f:5d:36:e0:51:06:d9:
ef:f9:51:ee:d1:71:a3:77:4c:f4:db:bf:62:d5:70:
98:43:c8:86:09:60:2b:d8:b0:76:7d:b0:95:e9:b6:
5f:d2:70:50:0b:3e:f5:71:5f:d4:80:6a:7e:dd:32:
36:6b:92:2e:46:e8:26:47:1e:ba:1c:56:42:7c:f7:
aa:74:11:62:33:4b:1b:4b:3c:8f:07:c9:66:d2:7c:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:1E:C5:BC:A8:DD:2A:C1:AB:6D:52:F2:B2:75:48:B9:6C:27:2E
X509v3 Authority Key Identifier:
keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:ea:7f:18:1d:80:b4:01:cc:eb:64:c3:b1:54:d8:b6:a4:d5:
ea:88:50:50:cd:3b:d3:eb:1c:14:38:b3:25:42:90:dc:1d:3b:
00:98:39:b4:10:59:df:2f:3c:ee:20:a5:49:bf:e1:86:d2:ee:
e3:ce:96:e5:e2:44:a8:66:5f:2f:b1:09:ad:a4:af:cf:1b:76:
87:0c:07:1a:f9:12:81:b9:cb:91:21:04:a4:06:25:0d:d5:73:
5a:14:c9:e5:2b:59:cf:3c:f6:72:24:14:3a:00:48:af:74:80:
4a:88:38:77:7d:9a:cf:b0:04:62:c1:63:40:e2:7f:a4:d6:70:
98:22:85:27:76:48:e4:92:86:12:7d:3f:da:48:02:f5:be:b8:
78:ed:12:be:96:f3:46:c9:bd:f1:69:dc:63:bf:53:72:6c:ef:
8e:37:4e:da:13:bb:8e:26:f3:75:b3:4e:c0:bc:06:d0:2a:39:
45:b0:fc:51:44:2e:0b:d5:52:bf:0f:e1:46:24:06:1a:c1:2d:
dd:63:97:ce:c4:11:69:6b:c0:f1:35:c0:c3:68:b6:be:3d:e1:
01:1d:bf:30:69:27:5b:eb:68:7e:1d:47:7e:38:bb:44:36:8e:
22:5b:ca:f4:38:69:ec:be:33:8e:86:71:b9:31:c1:07:fe:64:
aa:0f:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:56:58 2026 by rpki-client