
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: /oa/fJXpxxMJfsKYctA3lDAqvHq0cZpY9T/EhA/85D8=
Subject key identifier: A3:1A:04:8F:EE:67:7E:3A:A4:DF:C0:F8:24:42:8D:5E:09:82:B2:41
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E66
Signing time: Tue 06 Oct 2026 16:05:06 +0000
Manifest this update: Tue 06 Oct 2026 16:05:06 +0000
Manifest next update: Tue 13 Oct 2026 16:05:06 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: gbxjIipVE3UqMOFZukumEQZp1r4rllayjDb5WZxYRMI=)
2: B7BA9860DB8A11F09F03163163D3641D.roa (hash: tko+/h36KBIN5Mky2JAjS3z0hpFeYGsUcN3Jcbzdi3U=)
3: B842F0DEDB8A11F09F03163163D3641D.roa (hash: jXyFKKhv3NiyhdxhvyOkChDU44D4bw0UZftZE74S4M8=)
4: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: QTVpa4t8F6ebvlprgzU0m7JUeVHvQbd1I09gZUbnt0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7807 (0x1e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: Oct 6 16:05:06 2026 GMT
Not After : Oct 13 16:05:06 2026 GMT
Subject: CN=6ac51c32-7304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:1f:0c:41:e9:cb:46:dc:ab:42:a3:c2:d4:
f5:e6:ea:50:0a:bc:a0:2e:f7:2f:d9:b1:fc:c6:1e:
b6:e5:a1:0e:65:bf:cb:4a:c3:40:50:65:33:81:e3:
55:4d:58:0b:83:70:94:23:87:36:af:4f:c6:4d:e7:
a9:4c:33:59:c4:8f:85:a1:d1:7c:cd:45:e6:f2:56:
f6:f3:39:8c:b9:fc:ed:b4:01:c7:b2:a5:f6:19:c4:
d6:23:6a:3f:7f:c1:bd:e4:07:71:09:9b:61:c6:82:
93:64:42:03:b9:a3:8a:e1:02:9b:e9:66:9e:81:a5:
66:c3:1d:d3:7c:9b:43:e7:54:d3:5c:af:c6:7b:c1:
e7:74:44:84:37:e3:6d:d1:05:e5:9d:27:92:49:15:
e4:9f:aa:da:a7:cc:70:65:8d:57:90:dd:c1:26:6a:
2f:ce:c3:fc:c3:0e:bd:b9:b1:a8:4d:22:76:4b:ed:
0f:ec:4d:5a:13:0c:b5:1f:4f:9d:d8:27:cf:09:06:
b9:18:b4:bb:d2:ad:6e:c6:8f:3b:f9:1b:34:cb:48:
ea:8c:8f:29:a2:4f:c2:bc:95:69:ef:60:86:38:fb:
af:d6:9c:b1:95:a5:14:6c:7e:13:9e:06:53:bb:fd:
bf:e6:49:49:94:37:fd:85:31:b1:7d:30:be:bf:cb:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1A:04:8F:EE:67:7E:3A:A4:DF:C0:F8:24:42:8D:5E:09:82:B2:41
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a6:42:85:bd:47:92:41:bf:f9:fa:b3:03:52:f6:4d:fd:d6:
7a:02:ab:d7:cd:9e:65:cf:73:51:f3:2f:1d:4c:7e:20:35:c4:
91:67:e8:e2:fd:2f:9a:06:d4:d2:f1:10:28:79:a1:bb:ca:c4:
68:f6:35:b9:24:1a:76:c3:99:4a:91:67:d2:c9:fe:44:17:f4:
02:3b:89:31:09:9a:a3:ed:6e:b1:8c:6c:7f:b3:8a:61:48:7d:
de:97:f0:33:37:fe:a9:2e:02:e0:12:6e:9e:f6:98:d7:00:8c:
8c:fc:fa:78:70:0d:aa:d5:97:fd:ba:3f:55:06:fb:5f:13:9b:
3f:0d:f0:bf:0d:dd:35:4c:52:56:d3:63:41:cd:a1:93:98:90:
f6:1e:bd:d7:c1:f9:7a:18:43:0b:88:22:d3:f7:05:3e:16:eb:
3b:ab:a4:88:06:61:43:84:8f:58:63:08:85:39:37:d6:f2:c8:
17:90:f3:0f:41:f5:45:58:d3:b1:5e:91:2e:af:77:f9:7d:c6:
57:10:74:c0:9c:04:66:d4:90:10:2a:66:cc:03:0a:f0:77:12:
28:73:33:e6:da:f3:d0:82:3f:4b:5c:39:df:e5:62:47:c8:cc:
83:20:ea:29:f3:f2:d4:19:f8:54:ea:fe:14:45:db:cf:6f:02:
70:4f:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:48 2026 by rpki-client