
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File: C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier: ZZwDWt008+fkt0bdH4vRQBFDt3CNlbX7PUGt9bE6QD8=
Subject key identifier: 2F:E0:1B:F4:68:49:B6:A5:EE:56:83:03:94:89:6A:80:FA:9A:0D:7B
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial: 04D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number: 04A1
Signing time: Tue 27 Oct 2026 01:56:57 +0000
Manifest this update: Tue 27 Oct 2026 01:56:56 +0000
Manifest next update: Tue 03 Nov 2026 01:56:56 +0000
Files and hashes: 1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: Ph7d+2QfGZz+d6unzMMEVPCkceTnGI/Yf/incDVJCyw=)
2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: bDXcTdd3+KI00Tu5QIah+xvRBUeXyNYVufxWd0r1cSs=)
3: 6JggnNBEBmW0NOOpT1kmMLSTxlc.asa (hash: vWJdxlf9pMjz7v8i92m43PW1g6SNyLUB/b+VOBjlBAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Validity
Not Before: Oct 27 01:56:56 2026 GMT
Not After : Nov 3 01:56:56 2026 GMT
Subject: CN=6ae004e8-65ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:47:e5:ae:7d:04:fc:b8:be:82:19:45:e9:
32:f4:08:49:f2:d4:d1:d9:5d:e1:43:52:b3:95:7c:
35:5a:9f:97:b1:75:83:d6:10:72:7a:0d:b9:61:d5:
2e:85:5e:77:1c:ab:0f:63:ba:0e:5a:ab:73:59:e6:
be:1f:fb:6c:8c:6a:51:e7:02:f6:1d:81:90:d2:a0:
f8:a3:b3:db:ed:c2:8b:c8:26:0c:38:d0:a4:bb:dc:
a4:7d:05:1d:90:86:a4:4d:98:7c:df:62:8b:a3:2e:
1d:6c:56:74:c8:66:af:e2:cb:39:ba:37:4c:c8:99:
b3:e1:b5:56:83:ab:9f:a3:23:3c:b5:ee:e7:21:ee:
a9:93:4f:db:cc:9a:e1:23:2a:4a:ce:ce:14:61:84:
a9:40:4a:a1:8b:a0:41:7e:32:d0:8a:cb:86:76:e3:
a0:4a:10:5f:3d:11:86:39:c8:36:73:bb:fe:55:66:
ce:72:ae:e9:c4:25:7f:9b:3f:3f:60:e2:12:1c:09:
06:d6:83:a7:ed:01:42:e1:20:3f:26:e7:81:d0:1b:
01:af:12:91:e0:18:c9:7c:6d:02:3a:60:1a:2e:56:
e6:bd:c1:81:77:a0:fe:54:2c:22:75:04:1d:5e:ec:
2e:cd:7e:81:17:c4:6a:3e:b1:f2:f7:a0:e5:fc:f1:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:1B:F4:68:49:B6:A5:EE:56:83:03:94:89:6A:80:FA:9A:0D:7B
X509v3 Authority Key Identifier:
keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b5:fe:95:f8:c0:da:95:b1:b7:c6:12:fe:94:6e:81:a8:6b:
3a:8a:8a:67:f9:5b:c7:64:1d:a0:98:d2:75:ea:8e:9e:46:5b:
db:88:3c:a6:8a:50:c7:fb:9f:68:40:04:65:fa:e5:33:90:79:
fd:33:5d:88:21:1b:60:11:7a:f3:d0:48:ce:0a:a8:61:74:09:
bf:0e:43:79:f9:fd:18:01:36:61:db:8f:c1:22:3d:94:9d:ed:
ae:86:2a:74:1b:67:c0:a5:7b:cf:c0:31:ee:db:06:2d:ef:8a:
0f:f2:9b:8a:44:a1:8e:fb:3b:ef:5d:aa:81:05:3c:ae:dd:82:
a2:d6:01:c8:e6:c4:9d:1b:4a:bf:5c:27:3b:98:59:39:98:22:
55:65:be:3a:a4:c8:84:36:3a:87:c0:e2:16:2c:76:e2:32:c6:
d1:dc:fe:75:05:f5:5f:a9:84:e3:13:85:66:a4:55:88:47:80:
7e:6f:ad:6a:72:50:40:a1:ec:ed:4c:08:23:47:ce:c3:b9:a0:
e1:e6:e1:47:0c:65:50:5a:a9:34:f9:b1:6f:51:b9:f5:48:53:
f5:72:f4:41:40:be:f8:5d:bd:35:db:b8:39:b8:a7:ca:cd:42:
2b:76:2c:9f:d9:22:5b:fc:08:e0:e9:a1:f9:6d:b3:3c:5c:af:
c7:ba:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:53:44 2026 by rpki-client