
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json)
Hash identifier: JrsFmavU2MP8XV6z++R3xGDIulOAkRoSMMhjBOTQZpc=
Subject key identifier: F6:79:DA:F2:EC:AA:95:FB:CC:D9:AE:28:B2:B3:A4:86:B2:43:04:5D
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial: 0CA1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
Manifest number: 0C93
Signing time: Thu 10 Sep 2026 18:35:25 +0000
Manifest this update: Thu 10 Sep 2026 18:35:25 +0000
Manifest next update: Thu 17 Sep 2026 18:35:25 +0000
Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: wLlh5Z9GO5OiEz9wiAer3OJ+RjruSL12uPZNvaWVWFg=)
2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: 0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Validity
Not Before: Sep 10 18:35:25 2026 GMT
Not After : Sep 17 18:35:25 2026 GMT
Subject: CN=6aa2f86d-1c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:54:4b:03:94:80:ba:12:82:a2:64:13:8c:92:
21:56:6a:b7:00:d2:68:b0:01:db:27:57:64:19:56:
17:67:33:41:1b:50:9f:94:ca:84:ad:e3:bd:fe:70:
0f:df:8e:bd:53:13:f9:a3:48:41:e6:70:b5:34:28:
37:4b:2c:15:2d:b3:39:6b:b1:27:15:f4:d4:54:0e:
b7:e9:a9:fd:ac:38:ac:0b:da:ae:d1:dc:e9:9b:8f:
0e:b4:05:2b:a1:ca:f0:90:97:e0:ec:4b:49:96:39:
a9:f9:1c:e6:ec:cd:4b:80:97:f5:3d:3b:fa:88:c3:
28:67:88:e9:84:4f:73:a8:8d:ea:bd:5c:3b:bc:b3:
33:e2:38:13:05:e5:dd:3d:0f:e4:e8:74:53:54:5b:
f0:66:be:12:04:2b:15:ee:4b:42:d6:25:2d:72:ea:
3f:67:e2:82:ae:b3:e9:21:da:22:4a:79:f3:be:ae:
0f:b6:f9:25:2d:f7:ff:31:05:b1:3e:90:c8:59:91:
fa:81:5d:db:a3:80:22:7a:a1:b2:0e:74:70:05:6d:
dd:24:a7:1f:8d:c6:1c:c5:33:57:48:e3:b0:f8:45:
c1:00:df:ad:2d:a2:4b:e4:30:b3:8d:a8:5f:4e:25:
71:ee:a0:5b:e7:e6:35:6c:58:a3:f1:b2:1c:55:6c:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:79:DA:F2:EC:AA:95:FB:CC:D9:AE:28:B2:B3:A4:86:B2:43:04:5D
X509v3 Authority Key Identifier:
keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:60:f3:0c:bc:bf:7e:62:83:7c:50:40:2f:e9:be:7b:5c:3a:
97:b2:28:e4:0c:1d:75:fa:bc:d2:de:ba:1e:af:d3:6a:28:1a:
62:5f:18:3c:81:3f:20:48:61:c3:ad:a6:65:42:a5:4f:e3:57:
85:52:ae:74:b5:87:88:49:51:3c:a3:b5:01:61:69:98:eb:1d:
43:7f:17:50:8a:13:f2:90:1b:11:40:87:6d:86:fc:98:65:2c:
bf:c2:af:78:48:a0:81:0e:11:3f:35:4f:79:df:2c:95:ee:b3:
00:56:5b:19:10:fb:c7:2f:4e:b7:c6:30:3e:c8:36:63:dc:92:
ea:a4:30:75:27:de:8b:01:18:e8:3f:76:2c:30:aa:82:b0:27:
b4:38:f5:bf:55:2f:28:9e:8a:09:c3:4e:1a:f0:76:79:05:22:
94:72:c7:5f:4a:9c:af:82:27:8b:6b:5a:d0:eb:74:06:95:ac:
76:9b:6a:e1:20:82:96:d0:c9:26:d7:db:54:38:e3:bb:bd:20:
2a:49:20:8d:b9:2c:e5:f3:b9:55:51:48:61:94:57:39:05:04:
af:86:ab:4b:67:c6:04:cc:eb:f3:92:9b:20:c4:15:e9:9a:fc:
f5:4a:77:57:7b:cb:6e:4a:b3:a6:ff:f7:0b:f0:3e:44:00:2f:
79:3a:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:28:48 2026 by rpki-client