
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier: 8FhOM6rX8aDqDJmv/BCOpFuhmzxzIkAvKJoxsDiuTik=
Subject key identifier: B7:D4:4E:E0:AF:11:65:B0:C5:96:06:E8:5D:A1:F2:33:4F:F7:2F:00
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number: 0111
Signing time: Mon 01 Jun 2026 06:53:25 +0000
Manifest this update: Mon 01 Jun 2026 06:53:25 +0000
Manifest next update: Mon 08 Jun 2026 06:53:25 +0000
Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: 2II4UBmXO+ai1rni4AdxB2gaYYGoiMiXPPOPq5mqqEk=)
2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: e4ktGAuo5yxFoy1xqQC4gIok83+jqbiUpRIx09FMOG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Jun 1 06:53:25 2026 GMT
Not After : Jun 8 06:53:25 2026 GMT
Subject: CN=6a1d2c65-3211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0d:41:57:65:62:4b:d9:e6:65:55:f5:76:d2:
43:a9:d1:1d:2b:4d:3e:6c:3e:be:5a:22:02:73:bd:
66:67:eb:81:02:5d:29:23:16:a9:ea:ec:97:f9:9f:
d8:8c:cc:8b:2a:9d:7d:3d:6f:64:80:93:20:67:d3:
cd:96:f1:85:6d:1b:56:6e:b3:ad:b0:80:10:a8:0a:
2d:e2:44:af:98:ce:22:a4:9b:57:8d:65:03:5c:a5:
8b:a1:22:21:7d:81:06:cd:95:5b:b8:43:c4:e4:d4:
7c:62:85:38:e5:c0:cb:02:4b:aa:92:a0:23:5d:95:
52:e1:c0:d8:ed:30:dc:6b:0d:5a:5f:39:0a:ec:00:
35:fd:db:98:65:94:06:02:d1:6b:a1:dc:04:d5:e7:
e4:7b:69:36:86:bf:f9:60:ab:c7:5a:80:56:ba:e5:
50:e3:fc:d4:ee:11:ea:b5:1a:ab:86:8c:d7:a9:77:
f3:49:0e:9b:bf:54:4f:53:1f:14:78:29:42:1c:3b:
79:e2:6c:d9:1e:70:8a:30:0a:c6:2d:94:f3:85:f0:
63:29:4d:c2:e9:68:4c:38:30:a3:4d:12:f2:25:82:
a5:cf:81:17:20:41:2f:8d:9a:da:c4:97:54:8a:bc:
c0:5d:45:e6:b9:bd:4f:cb:08:40:74:23:0e:c5:ec:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:4E:E0:AF:11:65:B0:C5:96:06:E8:5D:A1:F2:33:4F:F7:2F:00
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2b:56:a1:08:c7:c7:d3:54:02:70:0c:cc:b3:f2:f3:d9:bf:
35:1f:64:30:fd:b8:80:c3:6b:b8:53:d3:9d:01:c4:2f:41:dc:
67:e6:ad:61:58:41:64:9b:9d:ec:71:cd:ee:7f:95:cf:2e:d9:
17:9f:57:5f:09:74:71:b1:80:ff:c2:53:7d:08:a1:50:71:07:
3f:73:ea:9d:4d:dc:a2:ae:3d:ae:ed:31:63:c9:fd:d1:60:23:
11:0c:bd:70:67:95:7b:02:f5:cf:ed:15:ee:89:4e:0b:7c:09:
df:8f:0f:a1:fb:4f:31:33:a0:97:34:36:cd:f7:04:00:6b:c7:
aa:34:8a:a2:df:fa:6b:6d:0e:c7:63:0a:7b:ea:9c:36:6c:08:
70:07:db:aa:98:50:04:61:4f:7b:8e:32:49:09:3f:6f:19:9f:
61:82:6c:30:1d:15:cb:1e:1e:99:53:30:5d:85:1c:81:a6:fc:
25:bd:77:de:67:6e:92:5e:ac:d2:f1:f4:96:c7:97:7c:fc:77:
d7:ad:28:59:92:7f:5f:4b:14:6f:a8:86:6c:12:f2:76:e1:3e:
21:d5:2c:58:0d:40:8f:99:63:49:38:d1:54:93:d5:ce:5f:23:
14:00:84:0f:64:22:6a:25:5e:77:b7:25:87:ae:ba:8d:9c:5f:
44:07:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:31 2026 by rpki-client