
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier: PvXLCrBXXwrIhcb/kQTCaF4btb4rxOHOLApw86RB/Io=
Subject key identifier: 67:C6:57:29:D9:31:DA:82:4E:2E:42:05:EE:C3:9B:08:B4:03:3A:9D
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number: E1
Signing time: Tue 03 Mar 2026 06:14:59 +0000
Manifest this update: Tue 03 Mar 2026 06:14:59 +0000
Manifest next update: Tue 10 Mar 2026 06:14:59 +0000
Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: US6JwEj7MDqLIg4YtV2WXAngIMulL5C31wfi8yFpFxk=)
2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: B0zzX5iDXgPapsRrYTYWSQgEs4jb8ZthX/Rm+C+DCPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Mar 3 06:14:59 2026 GMT
Not After : Mar 10 06:14:59 2026 GMT
Subject: CN=69a67c63-f329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:94:63:32:16:46:ff:ed:b4:25:99:12:ae:
c7:d3:52:8b:b9:65:20:95:d5:35:6f:84:24:be:5e:
8a:77:f1:74:63:75:00:2c:2b:46:fb:23:cf:7c:1c:
10:56:c8:e7:31:cc:c3:ab:8b:81:83:d5:4b:95:14:
b0:9f:44:bd:55:70:af:57:2d:68:25:19:fe:a9:1d:
0c:5d:9e:21:df:fa:ff:d9:88:1d:48:b9:9e:52:18:
76:af:fa:59:2c:3d:b5:96:44:1c:6a:00:42:a8:f7:
8d:3d:01:d7:07:1a:2d:35:4b:a3:e5:3e:b0:f1:58:
96:e6:80:a9:ca:4f:e4:a1:69:11:11:3b:84:3e:01:
13:64:f2:ac:84:92:18:c7:bf:3e:62:88:9e:10:c5:
48:7c:f8:de:e7:d0:21:ca:f9:05:ae:c8:11:d1:66:
ad:37:02:ee:fe:7c:77:ce:90:ce:28:a3:93:09:3d:
75:d1:7c:ed:21:35:5e:09:58:d2:aa:d4:16:e4:0b:
36:d7:3e:8b:44:b8:fa:a8:b7:dd:62:ee:e3:f4:e1:
02:04:0b:b1:29:ee:ec:81:63:b7:bf:0f:44:57:dd:
56:c4:bb:9b:e6:9e:e1:8b:94:78:58:3c:38:31:0d:
f9:ef:f3:81:71:4a:60:a2:7a:20:16:b9:d8:5d:93:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:57:29:D9:31:DA:82:4E:2E:42:05:EE:C3:9B:08:B4:03:3A:9D
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:00:6d:e5:d7:4f:c4:aa:69:e3:96:58:8a:a7:58:3b:bf:
f1:f3:4c:0b:b4:86:45:6f:09:fd:2e:1a:1e:91:a7:77:4b:d9:
53:d6:a3:61:86:9c:1c:7f:12:1c:75:f9:a6:8d:ca:5e:a5:2e:
93:18:63:29:01:bb:94:fb:62:a0:2b:72:98:84:d0:97:01:9e:
1f:d6:4a:24:43:a7:3c:81:a1:c6:5a:40:4b:8a:a2:39:55:7b:
f7:56:a6:96:cd:c1:84:05:f2:ce:5d:7d:31:94:a1:2b:22:aa:
aa:75:45:7e:d2:b6:e7:29:4e:0b:c1:35:06:97:15:93:20:5c:
65:8d:f5:85:63:9b:06:33:d3:be:28:ee:ba:a0:1f:67:cb:fc:
21:40:fc:dd:d6:65:e4:3f:2e:2f:6b:c6:49:62:7b:d6:e3:ff:
5c:01:0e:b1:6b:20:59:1c:55:bc:ee:d3:d2:46:a9:e9:25:c2:
d3:9f:74:21:41:94:d3:6f:66:8a:66:ea:ac:26:92:77:37:ae:
8a:b0:9b:4d:df:ec:8b:b5:6b:a8:46:de:a5:b1:7c:c0:59:2d:
88:58:7a:b9:81:ff:b7:45:d8:20:f6:b4:ca:df:b4:21:96:ff:
de:dd:1b:b6:6b:fb:76:1e:44:26:ca:9e:ab:74:b6:94:2e:5c:
51:b3:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 05:54:20 2026 by rpki-client