
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: wakqGUPHyg3ZmAQW3zAucP4VDg97LrEXdUYa5k05An4=
Subject key identifier: A8:AF:CE:1C:2C:90:E6:9C:E7:91:EB:28:73:54:7F:63:8F:E5:E9:A3
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E1D
Signing time: Wed 20 May 2026 16:04:51 +0000
Manifest this update: Wed 20 May 2026 16:04:50 +0000
Manifest next update: Wed 27 May 2026 16:04:50 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: RfyGKasq/5HekfC7ce4bqbLKZaJLL15boYvlogi+uOM=)
2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc=)
3: B842F0DEDB8A11F09F03163163D3641D.roa (hash: ks313B+YVez30ZvOkXppIDe7jBhr+JL2wzA7+C6C6as=)
4: B7BA9860DB8A11F09F03163163D3641D.roa (hash: O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7731 (0x1e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: May 20 16:04:50 2026 GMT
Not After : May 27 16:04:50 2026 GMT
Subject: CN=6a0ddba3-8a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:19:d4:9d:d3:01:9d:57:f6:0f:79:b3:32:
81:ae:8a:44:f8:a6:05:9d:54:18:c4:a4:8f:f6:43:
70:c2:2b:b5:d3:5c:22:20:51:a4:92:7b:89:6d:fb:
ab:73:e3:24:bf:ac:f6:01:6d:6c:92:8f:64:39:aa:
8e:aa:19:25:06:93:53:60:d8:d3:e8:5a:7f:4d:97:
8c:00:33:42:8a:60:91:95:5a:b6:65:af:82:34:74:
32:f8:5a:d9:57:bf:d6:cd:c6:06:4f:33:10:11:dc:
d3:e3:78:4d:9e:a2:bd:2c:2c:a5:ed:f7:5d:ff:4f:
0c:19:ef:78:f2:eb:52:a9:4f:19:cf:76:99:40:1f:
81:c8:ec:67:ac:49:f3:bd:9c:1a:7e:0e:7d:17:8a:
d0:73:6a:49:38:68:5e:10:5d:ef:5d:34:14:8f:f3:
38:a3:17:d2:8a:58:5a:dd:18:73:09:31:50:79:c3:
01:91:a5:c4:e2:a6:35:f9:e9:c7:b0:29:ac:1a:2d:
7d:96:14:b5:cb:65:0b:9c:a9:c8:e8:d3:3a:ac:c3:
38:e4:a0:e0:0f:22:c0:50:90:fd:a8:d3:1c:b9:a3:
34:d9:7e:a4:24:b6:fd:a9:71:71:64:3d:31:ec:ce:
48:39:eb:42:a1:75:cf:03:4a:57:f8:1c:f4:dd:51:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AF:CE:1C:2C:90:E6:9C:E7:91:EB:28:73:54:7F:63:8F:E5:E9:A3
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:22:f3:68:67:d8:ce:89:7d:be:8e:f9:a4:ff:f5:08:62:b9:
35:15:70:dd:4f:cf:55:05:3a:7c:ac:59:22:48:5a:5a:2a:a4:
5e:69:db:0f:e8:10:a4:92:16:c3:e0:0d:86:58:75:8c:5f:27:
83:70:3a:97:a0:2c:c9:3a:24:da:67:de:0d:30:06:d8:e6:49:
a2:14:c1:4e:6d:2d:78:bf:6e:60:bd:9f:84:d0:58:6f:a4:fd:
51:15:52:32:b8:50:79:c8:93:37:a4:4a:76:6e:ab:e2:cf:90:
bf:d0:aa:f1:e2:43:cd:51:74:a8:4b:a5:a5:20:e2:a3:e1:df:
46:0d:d1:0b:9a:b3:23:38:7a:6b:2a:a5:25:57:2d:8d:fc:f3:
0a:c1:8a:1f:f3:2b:44:3b:0e:f8:11:35:a3:77:97:71:c8:15:
ae:31:ea:6a:4e:01:67:98:6c:a0:8e:30:fa:bf:37:28:70:85:
0e:5d:28:6c:96:ef:b0:d7:c7:54:61:c3:0e:17:7a:45:3b:c1:
8d:df:c8:47:93:d7:ec:69:e4:4d:a6:d8:d3:2b:9f:7f:9d:ec:
a5:ce:06:67:26:9d:92:80:04:d0:69:4d:93:47:c1:51:f2:1b:
02:83:2b:5a:91:ba:6a:5e:88:5e:27:4a:75:52:7c:64:e5:7d:
f6:4c:78:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:03 2026 by rpki-client