
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier: RKKWSPWh/MSXeaIfNIs4YsuTf4K0j8xygsYtflFhW58=
Subject key identifier: 81:5B:FB:1F:60:75:EE:BB:5D:B9:F2:CA:FF:19:E0:4E:F5:10:21:7B
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number: 0158
Signing time: Wed 21 Oct 2026 05:50:58 +0000
Manifest this update: Wed 21 Oct 2026 05:50:57 +0000
Manifest next update: Wed 28 Oct 2026 05:50:57 +0000
Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: nY+ao4MjYgHFQKHt3qXX1drmoz2cPSDXrFouNfEIMZ4=)
2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: e4ktGAuo5yxFoy1xqQC4gIok83+jqbiUpRIx09FMOG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Oct 21 05:50:57 2026 GMT
Not After : Oct 28 05:50:57 2026 GMT
Subject: CN=6ad852c1-b340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:35:6c:36:58:a5:36:a1:32:ac:f6:1d:fa:
9f:1b:c3:c3:c2:e4:2f:04:d4:85:11:b0:f6:cf:e7:
d9:10:54:ff:7e:5a:03:6a:f0:c2:6e:7f:2f:80:11:
f2:33:a3:60:b9:5c:40:42:53:a0:d8:0f:6f:65:e6:
9f:d7:36:09:82:91:13:76:b0:81:8c:f3:68:90:65:
23:1b:b0:e2:80:ad:37:7b:63:ed:4b:7b:96:e8:6d:
d5:02:45:6d:d2:d3:de:dc:0c:46:f4:6c:83:20:30:
bf:8e:56:ae:19:77:3e:bc:82:da:3b:4c:e3:16:b7:
4e:05:55:09:4b:76:e2:1c:e0:98:bd:da:d7:0b:d0:
7f:c1:27:74:e1:54:9c:ca:d5:76:6f:5f:2b:45:b0:
28:b3:83:38:14:44:98:d8:3d:41:e7:5c:3c:60:0b:
c7:5c:17:2f:e4:94:3f:60:95:ef:e3:4c:46:f3:d4:
3c:94:bb:44:bb:cf:ca:c2:e2:5a:f2:ad:f8:f7:f2:
a8:7e:17:90:87:24:9b:4e:a3:09:aa:83:cd:95:ad:
e0:97:75:c5:3c:d1:ea:dc:45:fc:dd:6a:ce:0b:8f:
78:4c:a5:78:a6:08:78:18:2e:db:86:8e:ab:5a:0b:
04:52:db:b5:ff:61:8d:55:b1:bb:95:60:95:e5:4a:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:FB:1F:60:75:EE:BB:5D:B9:F2:CA:FF:19:E0:4E:F5:10:21:7B
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:7b:c2:15:81:0a:b2:2a:d3:85:1a:42:91:cf:f3:48:6e:
55:c4:1a:6d:27:a3:d4:f4:ef:1b:95:c3:ec:a1:37:97:18:6d:
15:46:74:cc:68:5d:f3:04:4b:70:e9:3c:26:48:36:12:f0:98:
47:77:2d:29:00:9d:96:fa:e3:27:b5:54:fe:a2:9e:e4:f9:9e:
a5:56:d9:bc:1f:f2:e6:94:2f:e0:77:33:4b:f8:65:ac:b8:ed:
1d:74:30:16:d4:04:2c:e6:3e:bc:9c:2a:50:b9:22:60:59:75:
58:c3:c4:ce:cf:75:13:e1:29:c2:fe:23:00:93:75:49:67:60:
86:d2:f5:2f:5b:de:aa:05:e2:e2:34:b3:ac:ad:7a:06:70:6a:
b2:0f:80:1f:cc:52:14:f3:8b:f9:b9:47:a5:f8:19:58:de:7e:
ca:3c:22:dd:b3:7a:f4:42:9c:59:cf:f0:de:de:16:0d:ec:c1:
40:c4:6c:a1:3c:34:d1:84:98:4a:05:65:19:c8:54:9d:92:7e:
6e:9d:61:d0:55:fd:5d:7f:51:a1:c7:6a:21:13:fd:8e:95:76:
62:fd:3f:32:69:c0:91:62:12:52:21:9c:44:d6:30:bc:07:eb:
72:a4:9f:0d:6e:c6:94:f4:45:e7:b2:4c:fb:47:03:58:95:20:
eb:4c:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:27:29 2026 by rpki-client