
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
File: g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft (raw, json)
Hash identifier: Lt2714CCzr+/8w7qKY4V4Lp+ljH73ogTGuFdmcpxWqQ=
Subject key identifier: 25:01:9C:3A:F5:4C:3E:88:5A:D5:75:D4:19:82:8A:F2:CB:99:BD:6F
Authority key identifier: 83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
Certificate issuer: /CN=A91AC6B1/serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
Manifest number: 89
Signing time: Tue 27 Oct 2026 07:58:00 +0000
Manifest this update: Tue 27 Oct 2026 07:57:59 +0000
Manifest next update: Tue 03 Nov 2026 07:57:59 +0000
Files and hashes: 1: g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl (hash: dhLDfsHpHKw3ccz6RCs919a+OSPusdkApsZHPs0vni8=)
2: C05CEE863EE111F19719A8BCB6833773.roa (hash: OLfPReHDiOpxBPvPtdR4jqtQG++wb9xUMUx9+0q63xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl
rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC6B1, serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
Validity
Not Before: Oct 27 07:57:59 2026 GMT
Not After : Nov 3 07:57:59 2026 GMT
Subject: CN=6ae05988-2a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:21:e8:e8:c1:22:82:70:23:4c:bd:53:2e:
1c:3a:d1:e1:ab:81:ed:3f:90:28:bc:9f:f4:9b:79:
2e:59:13:15:13:c0:6a:fc:36:4c:5e:96:01:76:e5:
89:04:cc:3a:e7:f5:c9:3f:c6:82:49:e1:6b:96:52:
b5:bc:7b:60:68:27:f8:42:24:65:5f:2f:e3:0e:f9:
fc:81:a0:ba:81:9a:30:40:d4:3d:cd:f2:ea:c3:1f:
a4:2c:be:ea:99:07:aa:61:10:0d:31:74:42:57:25:
3c:05:24:a0:b9:a8:ed:c1:20:58:a4:ba:88:f9:ee:
50:8e:38:2a:e1:35:a7:b5:5c:81:d4:59:05:ea:c0:
58:cd:e4:60:ca:d3:bc:f5:92:f7:c7:85:e8:75:bb:
71:4c:2b:19:35:30:96:ff:33:07:f2:32:df:c8:ac:
fe:33:5d:2f:4d:c0:10:b9:84:88:d0:77:2b:9a:99:
1d:2a:93:aa:57:45:17:b1:78:32:2f:3e:f8:ca:45:
6f:d1:d7:fe:dd:b5:3d:a9:2e:38:2f:e3:8f:5f:b7:
29:f9:79:ab:4f:49:e5:92:10:4f:96:b7:07:35:a4:
fd:39:74:0a:b6:b5:59:8a:cf:3b:cd:3f:af:b1:60:
e4:49:5e:ca:c8:4f:d2:28:cf:1b:6e:7c:94:3f:a5:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:9C:3A:F5:4C:3E:88:5A:D5:75:D4:19:82:8A:F2:CB:99:BD:6F
X509v3 Authority Key Identifier:
keyid:83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:18:1a:69:a0:28:da:e7:a7:05:9b:43:0b:39:85:8f:92:45:
a3:e6:d5:71:b7:b1:ba:72:79:3c:62:cb:5a:6e:54:f6:c8:e3:
3c:8b:d8:22:3a:16:2a:ac:fc:23:ae:b9:36:2a:c6:46:59:bd:
37:27:99:7f:b1:77:9d:7f:62:c5:0b:3c:73:de:18:af:bb:8d:
df:41:f1:c2:25:79:d7:12:27:c8:9a:51:cd:dc:05:b2:51:ac:
d2:6d:39:86:df:1c:68:07:19:e1:b7:e2:35:01:33:e0:5a:e3:
d7:79:e2:06:d3:f0:cb:da:ac:b6:35:05:c6:f9:c6:e8:6f:4d:
be:44:bf:af:34:2a:59:c3:bb:86:85:10:67:99:7e:ce:51:ca:
ac:e1:5d:7a:14:db:75:5b:c0:10:4d:22:a2:e3:50:15:13:4e:
0f:d0:b0:ee:1c:3f:8c:2d:8b:0d:28:af:ac:c0:97:fa:2c:c5:
0d:4b:1d:8e:21:68:54:97:cf:38:bb:65:f1:83:ce:d1:68:c9:
7f:c4:c0:a1:52:f9:d3:eb:85:07:ca:d6:82:c1:af:d2:65:ab:
16:de:a2:64:f9:ca:b1:6d:0a:80:3f:ef:95:fa:5d:67:a9:1d:
dc:27:af:a5:bc:89:3c:6c:b5:16:61:68:30:ae:ce:c3:7c:06:
cc:0c:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:01:29 2026 by rpki-client