
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier: 3C2s7k38II4HJoZI/yCuyd+ECmt+GNX9yH/Vi2wiXNQ=
Subject key identifier: 66:F6:48:73:92:C2:38:83:DC:F6:C2:3A:66:6D:37:53:BF:63:68:E4
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number: 0141
Signing time: Sat 19 Sep 2026 05:36:05 +0000
Manifest this update: Sat 19 Sep 2026 05:36:05 +0000
Manifest next update: Sat 26 Sep 2026 05:36:05 +0000
Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: w7Tl4JKxGFnr5dsjDWUJUmLngdRbcoyVuwFJe+hI63o=)
2: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=)
3: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Validity
Not Before: Sep 19 05:36:05 2026 GMT
Not After : Sep 26 05:36:05 2026 GMT
Subject: CN=6aae1f45-6e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:5b:11:ff:e8:53:7e:40:10:03:8f:77:67:
05:61:8f:e8:36:99:4a:97:0c:49:31:71:93:4a:cf:
42:2c:ad:67:3a:9a:55:b0:4c:44:3d:06:14:a6:41:
2b:06:c9:0b:2c:9a:2b:ba:3b:ed:67:cf:ec:32:df:
15:f5:de:41:2d:70:73:3f:f3:41:d9:80:87:7b:28:
cf:bd:2e:49:20:a5:65:59:d9:46:61:40:22:4b:05:
2d:c5:5e:d4:2a:ef:ce:bf:97:8e:10:a8:5a:28:1c:
43:ec:f7:08:8e:f1:bc:a9:0b:6e:5e:1b:50:5e:13:
61:dd:9f:7d:8a:6d:fc:bb:55:30:74:6c:a8:68:a1:
ec:4c:ca:97:6c:a6:f9:66:b6:f2:2c:ad:e8:8e:e0:
af:e8:6e:86:5e:24:aa:b9:53:f0:92:1b:61:01:2f:
6d:52:d9:80:16:c9:f4:7c:39:22:75:40:97:cf:85:
4c:7d:fb:25:57:6e:ef:34:60:86:40:3d:84:35:ed:
50:1c:70:d8:b6:a5:8c:3c:1e:f8:f0:d1:67:a0:84:
93:49:ee:df:d5:15:bc:cc:51:fd:7e:14:e2:b6:42:
03:c3:8a:fd:ce:12:1d:6d:f6:98:05:4b:e3:07:74:
ba:09:07:83:77:44:e7:b5:a1:45:09:b3:b1:86:4c:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:48:73:92:C2:38:83:DC:F6:C2:3A:66:6D:37:53:BF:63:68:E4
X509v3 Authority Key Identifier:
keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:34:95:b0:e0:19:cd:2d:e7:ed:0b:d9:b4:83:a7:6b:ce:f0:
cc:e8:a3:d9:6b:25:8e:2b:c8:96:69:2d:16:a8:18:20:1c:ac:
8b:83:15:43:e6:c6:09:6b:87:4f:57:5a:28:5e:ff:b5:a4:be:
5e:27:a0:b9:1c:2d:77:4a:6b:27:a8:97:65:4d:51:82:51:77:
a9:e3:6b:39:01:35:e8:23:a3:ad:b5:bb:37:1b:e0:89:8c:d2:
d0:78:88:30:b5:63:2c:e3:2e:85:33:4e:e7:aa:8a:ab:48:09:
41:95:b9:1a:9e:ca:5e:0e:54:92:b2:f7:95:cd:04:19:95:38:
da:eb:c4:83:91:2b:8f:1c:85:a1:03:a4:49:24:23:3f:2e:ef:
e5:7f:eb:c4:76:fc:8b:c8:e1:f5:2b:66:ea:6e:dc:b9:b0:03:
a8:af:38:1d:99:74:5a:cf:60:62:96:59:fe:7d:8d:08:04:82:
37:06:42:84:d3:5e:33:d3:93:a9:4d:5c:eb:1e:de:4b:0a:63:
4c:66:a3:c4:d5:85:f9:89:62:c9:3e:4f:13:ca:e5:41:74:97:
ce:80:4a:3f:d3:5a:cc:92:53:53:53:f3:69:63:78:58:f6:26:
06:64:6b:c4:ad:bf:be:bd:b0:6e:24:ef:dd:9b:3a:8c:3a:d6:
3a:27:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:06:28 2026 by rpki-client