
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier: ankVGkwe8X798losb43FIu1N7JJI1lbi8MQp0iKj6tU=
Subject key identifier: 31:2E:73:51:2A:91:FE:07:68:00:96:21:BD:58:3B:5D:21:A8:F1:A5
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number: 0206
Signing time: Wed 07 Oct 2026 03:40:21 +0000
Manifest this update: Wed 07 Oct 2026 03:40:21 +0000
Manifest next update: Wed 14 Oct 2026 03:40:21 +0000
Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: DbryJzP89YufErsQwNc2E6KISEsxeMgsqaQaW1rE3z4=)
2: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: ENHhkrk8BCTpwWr4aooyXoOdIvkQ+fMj1H+Xu4jYjcE=)
3: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: GFImaBIJDxKMIRAiFX2CXsx2x2WQvz0QE3N7btck8OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Validity
Not Before: Oct 7 03:40:21 2026 GMT
Not After : Oct 14 03:40:21 2026 GMT
Subject: CN=6ac5bf25-3aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:f4:c5:e2:bb:43:99:b5:78:ed:04:6f:ca:
14:a4:34:65:57:7b:fc:30:27:12:9a:df:8c:67:d7:
c8:90:99:4c:26:0e:35:7e:86:cd:c9:af:44:6c:4d:
f3:0c:a4:bf:91:d3:cd:70:e2:35:3e:b4:05:8f:7c:
43:1d:24:f1:ab:cb:14:4f:6b:21:5d:48:ee:4e:14:
74:45:9f:c4:e8:3b:b0:9b:09:a2:89:63:e0:b6:25:
03:81:64:95:15:4d:c0:82:08:93:a9:5f:f9:37:a3:
9a:e1:9c:59:34:24:70:e6:b2:80:41:91:df:a5:0c:
16:df:c9:a2:53:53:09:e5:63:40:ad:a1:8b:cd:03:
5d:45:42:da:ae:af:2e:c5:e3:aa:5e:b9:a9:27:01:
0b:c5:96:87:e6:07:b1:6b:85:40:a0:65:4f:8a:67:
75:f6:a8:7a:25:d5:0d:95:7e:68:73:64:ed:e4:01:
67:9b:0b:60:e3:66:18:ad:24:25:0e:1e:a4:7e:40:
80:4b:ad:75:50:00:a5:97:25:94:fc:47:90:2c:33:
f0:8f:67:76:ef:ff:f0:05:f6:92:9b:5e:2b:35:ff:
1d:c6:87:10:d7:c6:37:66:52:19:ef:da:47:fc:43:
99:4c:14:97:8e:1f:93:50:95:44:e0:f1:f3:46:74:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:73:51:2A:91:FE:07:68:00:96:21:BD:58:3B:5D:21:A8:F1:A5
X509v3 Authority Key Identifier:
keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:3e:ce:42:05:ca:5a:bd:4f:d7:a0:06:55:f8:f0:b0:38:02:
77:11:1a:5c:fa:82:1f:27:cc:0f:b2:24:36:c6:f6:cc:a3:0e:
83:68:30:c3:11:3f:84:72:5b:b3:bc:6b:d9:c3:0c:3f:a1:b2:
a8:f1:00:f2:6e:7c:79:e9:b6:62:fa:26:7c:48:9a:1c:32:02:
14:1a:c8:ff:31:98:a5:47:3e:a9:6f:c0:3c:aa:2d:21:83:95:
56:50:c0:76:00:63:fa:f0:ed:95:d8:62:41:30:a3:20:61:06:
9a:c7:40:a3:72:0c:f7:8b:b7:ee:7e:d2:2c:95:78:7c:81:c3:
31:ec:ff:da:84:cf:e4:33:39:ae:9b:bd:97:fc:77:40:fd:87:
c3:d9:59:49:4b:86:df:4d:e1:a4:2b:77:4b:26:ec:3b:25:6d:
7d:ff:e0:f7:7e:b8:0f:9c:52:04:1f:3a:85:02:bb:a7:48:45:
95:ad:0c:31:b4:51:5f:f5:2d:50:b8:80:19:77:c1:8b:9b:ae:
9e:d8:90:4c:ee:ed:0b:86:53:10:76:0f:7c:fd:4f:42:c7:2b:
b1:93:7d:ed:9b:82:3d:13:21:c9:f2:06:f6:9b:c0:e4:5f:c9:
86:3b:6c:e6:88:35:43:6b:58:fe:c7:56:d9:40:23:38:60:59:
72:cf:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:32:56 2026 by rpki-client