
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json)
Hash identifier: bQlTU0HoOA4yLYpHm8EqXfDAEKuCJGTJhMTQkPYftpQ=
Subject key identifier: 60:DC:5D:C0:39:80:2F:DB:9F:56:53:37:E4:9F:0E:95:F3:10:9A:91
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
Manifest number: E3
Signing time: Thu 22 Oct 2026 23:05:46 +0000
Manifest this update: Thu 22 Oct 2026 23:05:46 +0000
Manifest next update: Thu 29 Oct 2026 23:05:46 +0000
Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: XR/lgTOo8+joCKaTNEos8QW6bnueRyKaDf5k2OcvhqQ=)
2: 889930E805E011F18AD458A9133D8C67.roa (hash: coEpUspblzPFvORawLzP4BPk3NGo6TsW79ltjfm6ee4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 23:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Validity
Not Before: Oct 22 23:05:46 2026 GMT
Not After : Oct 29 23:05:46 2026 GMT
Subject: CN=6ada96ca-d147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:0f:7d:15:df:43:94:18:8a:fd:8a:0f:8b:
9f:ea:0c:04:fa:f7:38:74:68:7b:02:aa:e8:79:2b:
3a:b2:2f:1f:8c:07:8e:b9:89:eb:4c:14:42:83:16:
88:9a:d6:f9:41:4c:19:57:73:40:40:04:e1:81:e9:
b9:e9:a2:c3:0f:32:01:66:0f:4d:22:21:b2:82:18:
eb:6f:d4:01:73:71:10:ef:ce:2e:d8:a2:3b:a3:47:
43:f6:ce:af:83:7d:10:57:a1:16:13:7a:64:e8:89:
14:72:9c:e3:5c:e3:13:96:7c:bc:80:22:65:58:85:
77:f5:de:67:ac:8f:c1:ab:d8:d9:b8:7e:64:9d:b4:
73:9c:4b:68:89:f9:47:1a:7a:5d:ee:31:17:51:44:
16:0c:3b:4c:0d:81:6f:8e:f2:bb:a1:2b:4a:ca:fe:
bd:d8:a7:4c:3c:a1:f5:7d:1f:3e:a6:8b:f6:2c:75:
eb:f8:4c:6b:2c:58:21:cd:6a:be:76:f3:f6:9d:16:
5d:c2:1d:cc:f1:e7:74:54:e8:c4:c3:20:9d:62:4c:
18:90:3c:c9:76:c5:c0:3d:32:7c:35:c6:af:1c:01:
42:ad:3f:1c:6c:d7:02:30:ec:18:d9:28:e8:1c:3b:
5c:fc:d4:b2:e0:b5:86:b0:27:55:bb:a1:a9:e3:5c:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:5D:C0:39:80:2F:DB:9F:56:53:37:E4:9F:0E:95:F3:10:9A:91
X509v3 Authority Key Identifier:
keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:e8:7b:b7:3e:ce:b7:c8:5b:e5:02:08:e1:0a:16:89:ca:07:
44:d5:3a:97:55:97:c2:7a:dc:9f:68:d1:c8:30:8e:22:ea:79:
3a:ca:f7:52:a6:b2:ea:f3:b6:6b:6e:e9:97:3c:0f:53:bb:29:
92:30:e6:01:21:f3:d1:be:e6:67:f8:44:42:4a:52:b3:ce:4f:
dd:a6:3a:12:12:0f:db:9c:4d:d7:c7:73:db:0a:80:e2:b9:c5:
5b:8f:ff:fb:58:50:3e:c9:da:05:6e:76:3f:9a:70:83:a4:f0:
54:50:c4:ba:e0:21:d4:18:ec:17:ae:57:c1:ba:57:a4:4d:9b:
bf:2b:98:df:41:de:33:24:f4:11:44:17:06:6e:15:70:cf:5f:
98:bd:d7:3b:82:e5:ee:3d:96:d2:55:96:af:df:c8:57:d2:36:
35:74:0b:0b:ad:3a:18:b7:50:57:6e:fa:fc:c3:4e:d1:d8:3c:
ad:f1:50:06:9c:bf:d9:29:a7:29:50:e0:1b:2f:35:e7:7f:43:
03:a6:50:f8:36:49:3f:07:3a:41:07:ec:08:10:06:1a:a6:d1:
17:74:dc:a8:8c:21:17:dd:0b:13:f0:11:5e:a3:e0:bf:3e:31:
a1:95:96:52:00:48:b4:86:25:61:ae:f2:df:2f:91:f6:ed:e6:
7f:ee:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:49:04 2026 by rpki-client