
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
File: l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json)
Hash identifier: NIgCPMsG5lMjPjI6HiAC5gG+fOnZK8wK9tseL9bHsxo=
Subject key identifier: 1C:6A:2E:1E:82:12:39:DE:F2:2C:7C:FA:1C:28:C0:19:20:11:F4:39
Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Certificate serial: 06D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
Manifest number: 06C6
Signing time: Tue 06 Oct 2026 22:28:59 +0000
Manifest this update: Tue 06 Oct 2026 22:28:59 +0000
Manifest next update: Tue 13 Oct 2026 22:28:59 +0000
Files and hashes: 1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: IfAdl7dF8QaLsWqpoiIT7NnleOqurYVZgU/EQ4cGEDo=)
2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: 3hykLcorYgLEfCJWHrkkPwMpO+Se/Lm85HODusfioqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Validity
Not Before: Oct 6 22:28:59 2026 GMT
Not After : Oct 13 22:28:59 2026 GMT
Subject: CN=6ac5762b-1268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:f0:49:bc:ba:61:91:f9:66:f2:bd:99:7d:
be:8c:4b:af:14:4f:c3:97:5d:0b:4d:09:56:b4:ac:
f8:87:33:1a:17:91:26:73:cc:e1:dc:99:f8:b4:0f:
e3:ba:75:6a:00:e6:59:6e:68:4b:8d:bf:80:2d:c7:
cb:9c:ca:db:69:10:e4:b3:fa:c1:29:1d:99:96:68:
00:b4:25:53:bf:42:52:ab:c9:d2:c2:ec:a2:d4:7e:
56:64:d4:e7:e6:77:74:a4:7e:2b:f1:24:b9:74:d8:
58:5a:78:d7:1a:cb:48:3b:3c:52:49:e8:9f:84:10:
96:d9:96:06:5f:86:64:b9:ed:d7:7a:4e:83:e6:46:
f4:a4:42:91:88:6f:ac:14:00:01:c6:fe:b4:e7:31:
fe:8d:70:39:4d:5a:3c:f7:86:1b:63:cc:49:9c:ab:
af:58:ee:9d:bd:fc:ba:56:4c:ec:a5:bc:2d:9d:0f:
fc:07:93:cc:22:ca:6e:99:fc:9c:f7:db:f3:c9:c2:
0c:2c:1c:c5:0c:04:ab:1b:05:8a:42:23:8b:db:b1:
19:5d:99:5f:c6:a3:60:14:48:9b:71:75:0e:ff:49:
c0:55:27:4c:8e:4a:83:07:d1:e7:55:36:9f:c4:f8:
2f:2f:77:fb:a0:a6:6f:d5:56:c0:f4:a1:fd:23:e6:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6A:2E:1E:82:12:39:DE:F2:2C:7C:FA:1C:28:C0:19:20:11:F4:39
X509v3 Authority Key Identifier:
keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:24:88:c2:34:94:54:e7:40:8d:0d:00:c0:0b:f0:93:29:7a:
21:0e:21:78:f0:4f:0f:ae:09:ac:24:26:3c:21:49:68:5c:e9:
f6:af:ed:c5:2c:6f:a4:05:79:d0:58:b2:7f:f4:82:ed:2f:9a:
53:02:7e:71:ee:91:a0:18:38:b9:30:ba:d9:39:5f:d1:f9:50:
73:66:d3:06:04:ac:03:7a:70:55:97:1e:a3:34:f6:9a:79:b3:
dc:58:06:f0:47:de:d4:f5:db:08:e4:f9:3b:ea:46:05:d8:0e:
79:b6:b0:b0:3b:a2:7a:1b:8a:bf:d1:2d:91:1a:5c:0a:06:15:
6f:1c:5f:80:dd:ba:b1:ac:85:55:21:9f:0d:b3:0a:9c:c3:6c:
15:18:57:ad:df:19:be:56:2c:75:c3:92:c8:be:88:59:a2:8c:
09:3a:10:1b:d4:e6:6a:3f:4a:e5:74:f1:68:aa:34:f1:7c:b4:
c2:a4:5e:6f:8a:f5:26:f6:79:e7:1a:2b:7f:28:86:94:58:82:
b1:e0:be:f5:22:b4:d0:14:c8:11:f6:ac:96:53:fa:f8:5b:66:
d9:78:0d:60:35:8e:8c:0f:9a:48:f0:fd:6e:17:42:80:fa:40:
54:22:c3:37:a8:18:80:ef:86:8e:b4:17:5f:df:fe:81:a6:37:
d9:cd:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:17:04 2026 by rpki-client