
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier: me49+tYOgbGOktu/k4iqSOHQ1JKi6EMTAfrKRIiQOn4=
Subject key identifier: 27:3B:FC:F3:A5:20:CE:74:FC:9E:92:7D:B3:7F:90:E5:C7:91:0E:DD
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial: 02C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number: 02B4
Signing time: Sun 13 Sep 2026 01:28:09 +0000
Manifest this update: Sun 13 Sep 2026 01:28:08 +0000
Manifest next update: Sun 20 Sep 2026 01:28:08 +0000
Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: 1JtiuZFKql14zLhoVJIfvSpe/nvfLaBytUyRMOb51UA=)
2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 01:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Validity
Not Before: Sep 13 01:28:08 2026 GMT
Not After : Sep 20 01:28:08 2026 GMT
Subject: CN=6aa5fc29-a5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:ec:83:a5:14:b4:3c:44:ed:d2:92:76:eb:
cb:5a:cc:5d:6e:2a:79:17:e8:42:76:57:54:ed:b1:
2e:fc:48:04:a3:80:ef:58:0a:6d:d5:aa:7a:39:6c:
16:66:77:93:d1:f2:d4:a8:46:23:85:00:22:c8:6b:
83:9d:be:e1:09:ff:a4:64:eb:0a:b7:30:b0:37:09:
bd:39:05:9a:0c:a1:7b:4c:28:d7:bf:b9:c0:84:5a:
f1:6c:bf:ae:7e:33:64:88:a4:3d:d7:69:52:a5:b7:
7d:cd:80:00:03:de:d9:4d:68:b0:1e:e2:79:5e:5d:
09:71:56:37:7c:ae:84:44:04:de:fb:ce:17:f7:78:
cb:dd:03:54:20:c2:48:8f:49:6a:1b:e1:5c:56:44:
e3:f8:bf:5d:16:34:fe:78:aa:71:6c:74:e0:31:81:
b7:60:22:08:ff:90:4d:4b:61:50:93:54:e5:a7:19:
fe:0a:6a:83:48:8c:3b:d3:46:bf:3e:5c:4f:5c:fb:
c9:7c:87:cc:01:c4:88:11:c7:6f:69:05:15:79:ea:
af:4a:ad:11:3f:6d:c2:5c:e9:33:14:9d:19:47:e9:
70:73:22:32:f1:41:86:66:79:15:5f:d7:5d:f6:47:
ed:bc:92:02:e4:79:88:84:fd:fd:c9:a1:d9:5f:19:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:FC:F3:A5:20:CE:74:FC:9E:92:7D:B3:7F:90:E5:C7:91:0E:DD
X509v3 Authority Key Identifier:
keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:9f:8a:f8:9e:5a:c6:6e:5e:bc:6e:78:1e:b7:86:be:e7:c5:
fd:73:dc:e6:7e:40:54:a5:25:8b:6d:a5:0d:93:b2:d6:47:b1:
5a:3f:96:37:c9:eb:f0:b4:24:96:15:53:0f:78:75:6f:c4:5f:
55:7e:fd:95:cd:35:ad:83:26:ea:f5:fc:1e:ec:ff:60:5c:ce:
be:f6:e5:5b:c9:d3:3e:5e:41:3a:e6:cc:1e:24:be:9f:4a:9c:
c5:35:4f:f9:6a:6d:7b:05:7d:54:1c:89:f7:e5:bd:02:7e:67:
92:95:95:c9:c4:60:9e:d9:a3:48:cb:55:19:0f:fb:6b:4c:ad:
4d:0a:de:6a:b9:87:74:3f:21:f8:da:6e:ad:60:46:ac:dd:ff:
63:7a:47:f7:76:11:a7:3c:36:c4:9e:3e:d3:cc:98:5f:4a:c9:
cd:69:6c:87:27:80:26:3d:a4:53:84:0f:2d:42:d2:8e:86:2a:
75:f2:ad:3c:df:b5:c8:d8:be:c7:27:f8:e5:62:84:4e:34:28:
2c:df:c8:4e:d5:70:90:f8:51:16:1d:71:16:d4:9d:ac:32:22:
99:3a:de:4a:03:22:cd:e1:6c:c0:5a:a7:16:12:74:1a:d2:3c:
57:9e:69:4c:d9:ee:5b:65:e3:74:14:de:62:44:06:0f:c2:99:
e3:ac:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 04:12:26 2026 by rpki-client