
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier: en6AUTH0PFvtjadftxzTVKkrhleNfqaZTpEgZwmOvJQ=
Subject key identifier: EC:75:88:AC:4D:82:46:8A:3D:EF:6D:8F:52:82:24:2B:0D:73:F4:E1
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial: 35CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number: 35AA
Signing time: Tue 06 Oct 2026 14:43:09 +0000
Manifest this update: Tue 06 Oct 2026 14:43:09 +0000
Manifest next update: Tue 13 Oct 2026 14:43:09 +0000
Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: xXvAxN4GWa+5yXo4ao7TIly4gSZ/GoAXXktx558kTTw=)
2: BBDA65F6479111F1892030F49D833773.roa (hash: t3MKX0SQ0l2/O3Cn8Pta+/GR5x74uHYlPAkfD5y3Nzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13770 (0x35ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Validity
Not Before: Oct 6 14:43:09 2026 GMT
Not After : Oct 13 14:43:09 2026 GMT
Subject: CN=6ac508fd-990e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:b7:7a:4a:e8:26:f9:58:ea:30:0c:3f:a3:
a9:af:e6:20:5f:44:6d:88:3f:c2:60:ad:24:a6:f0:
3a:98:a3:d5:31:25:01:c3:ac:31:f9:9b:ff:d2:86:
f1:c0:89:f0:91:7d:8e:c6:cb:3c:88:4b:5b:2f:c1:
c8:23:2a:14:ee:d2:03:21:a9:b9:50:91:c3:9b:22:
d0:c2:6b:9e:a4:6f:22:29:15:8c:f0:aa:be:da:cd:
9e:02:b6:d9:0e:bd:b9:f4:28:55:85:62:f9:6d:4e:
e9:73:3c:18:8b:88:98:fd:4c:e3:ee:a7:dd:75:d1:
c6:57:77:4e:e4:e1:42:30:c7:73:5c:35:5d:9c:7e:
be:0d:7f:14:e5:6d:ba:51:71:4e:2c:1a:b4:8f:26:
99:0e:10:31:74:6b:79:7e:e1:cb:24:2b:99:fe:01:
42:c8:7d:cd:f9:fe:7b:bf:22:1e:59:e4:60:d3:dc:
51:f5:1b:73:37:f8:5d:f6:53:77:ae:fb:50:c9:6c:
2d:1b:f9:03:e8:39:2a:02:ed:72:bb:5d:29:a0:67:
86:b8:8f:d3:c0:51:f1:91:12:82:e0:7b:b8:53:70:
96:f5:a3:ba:8c:44:6e:b6:11:a4:70:1d:50:fb:48:
39:d8:23:68:eb:55:92:63:f8:71:ed:46:4a:58:a6:
84:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:88:AC:4D:82:46:8A:3D:EF:6D:8F:52:82:24:2B:0D:73:F4:E1
X509v3 Authority Key Identifier:
keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a9:c1:6e:cd:98:f1:dd:1a:e4:99:43:5f:e1:6f:ae:94:63:
22:be:52:0d:44:6c:da:de:fd:17:e5:3e:39:be:d8:e1:98:91:
86:2e:68:63:25:89:6a:4d:2e:0f:99:d7:74:ca:1f:24:9a:d7:
b8:ef:56:0b:38:21:d4:68:00:df:d2:30:ee:e8:89:e9:47:2c:
6d:9d:53:6b:eb:05:96:da:23:33:0f:45:9c:05:c4:ac:f7:56:
3d:53:02:13:81:e4:7b:19:e8:16:ca:60:d2:c9:6e:9f:f7:90:
7b:9a:2d:18:64:54:64:02:42:24:2e:cc:05:59:6c:23:38:61:
57:65:2f:ed:2a:12:39:7f:80:d3:1c:00:65:c9:69:0f:be:35:
22:ed:d9:80:8c:d6:85:e6:77:00:31:fc:d9:65:40:a2:0c:70:
72:ed:cb:3c:78:d8:92:04:8f:96:f2:bd:7f:3d:5c:3a:45:92:
9c:56:1d:2a:7e:4f:50:0e:b0:66:df:ba:9a:6c:6e:85:29:2b:
1c:f5:a5:78:fa:3f:76:24:a8:b7:fc:b5:fc:a8:20:db:f0:bd:
93:d1:6d:a5:af:75:c0:2c:f8:65:05:02:a0:d4:fd:0b:9f:46:
1d:ec:3a:88:cc:86:2a:bd:f4:41:85:b1:a0:7d:da:6c:44:89:
c0:eb:4e:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF
MEE0MTkzMjEwHhcNMjYxMDA2MTQ0MzA5WhcNMjYxMDEzMTQ0MzA5WjAYMRYwFAYD
VQQDEw02YWM1MDhmZC05OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRS3ekroJvlY6jAMP6Opr+YgX0RtiD/CYK0kpvA6mKPVMSUBw6wx+Zv/0obx
wInwkX2Oxss8iEtbL8HIIyoU7tIDIam5UJHDmyLQwmuepG8iKRWM8Kq+2s2eArbZ
Dr259ChVhWL5bU7pczwYi4iY/Uzj7qfdddHGV3dO5OFCMMdzXDVdnH6+DX8U5W26
UXFOLBq0jyaZDhAxdGt5fuHLJCuZ/gFCyH3N+f57vyIeWeRg09xR9RtzN/hd9lN3
rvtQyWwtG/kD6DkqAu1yu10poGeGuI/TwFHxkRKC4Hu4U3CW9aO6jERuthGkcB1Q
+0g52CNo61WSY/hx7UZKWKaEAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx1iKxN
gkaKPe9tj1KCJCsNc/ThMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE
OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5
b2h5MHZ1djAzMHpncEJreUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADanBbs2Y8d0a5JlDX+FvrpRjIr5SDURs2t79F+U+Ob7Y4ZiRhi5oYyWJak0u
D5nXdMofJJrXuO9WCzgh1GgA39Iw7uiJ6UcsbZ1Ta+sFltojMw9FnAXErPdWPVMC
E4HkexnoFspg0slun/eQe5otGGRUZAJCJC7MBVlsIzhhV2Uv7SoSOX+A0xwAZclp
D741Iu3ZgIzWheZ3ADH82WVAogxwcu3LPHjYkgSPlvK9fz1cOkWSnFYdKn5PUA6w
Zt+6mmxuhSkrHPWlePo/diSot/y1/Kgg2/C9k9Ftpa91wCz4ZQUCoNT9C59GHew6
iMyGKr30QYWxoH3abESJwOtOhA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:29:11 2026 by rpki-client