
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier: YDlRNlZNn2uERb5cpd7kj58TDhgMRtxGpO3Bo2rkAek=
Subject key identifier: B9:70:D6:2E:4F:8A:55:8E:24:E2:56:2B:C8:A2:87:AF:4A:DC:3C:99
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number: 8D
Signing time: Wed 19 Aug 2026 08:09:46 +0000
Manifest this update: Wed 19 Aug 2026 08:09:45 +0000
Manifest next update: Wed 26 Aug 2026 08:09:45 +0000
Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: 5N+8KpqRj/rLjTOJch3JhZzXvowoW0kI+XBFMzhhTUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Validity
Not Before: Aug 19 08:09:45 2026 GMT
Not After : Aug 26 08:09:45 2026 GMT
Subject: CN=6a8564ca-3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:e0:73:35:d9:ab:87:7a:e1:85:84:c9:54:
c3:e4:33:b1:ca:fd:a8:a8:e2:93:0a:55:4c:5b:10:
f0:fc:fc:00:23:cc:e6:82:98:82:13:76:cb:3f:2e:
49:a9:18:ba:9f:a4:8c:ca:d5:0d:f9:3c:c6:c3:ee:
b9:ea:b9:75:cf:fb:76:eb:bb:4d:93:2e:a4:be:ce:
e6:3e:dc:8a:50:48:ee:01:a6:39:17:6f:ad:55:79:
31:af:c4:80:f3:8f:1a:ac:57:ce:04:5c:ae:66:58:
e4:b9:53:6b:af:11:c7:95:3c:45:59:a2:01:e9:cb:
da:ef:ec:10:28:a5:0b:15:7f:6f:a3:40:9e:19:7c:
b0:0c:e9:5d:1c:17:f9:2e:8f:dc:35:22:0c:68:5a:
c1:d7:a9:c1:15:72:e6:61:33:d6:a0:43:4f:c7:0c:
0c:38:c9:a2:c7:89:0a:b7:bc:16:c9:c4:f5:d2:b1:
a2:51:24:88:63:2b:fc:92:12:62:b1:71:c1:1d:23:
b5:33:34:f0:11:4e:db:75:13:53:5a:fb:a5:8f:74:
4e:89:63:c7:78:42:70:e0:8b:35:b7:cf:f1:fd:17:
5d:fa:dc:f1:d6:1c:28:9f:7d:95:c5:ed:f6:74:a0:
b6:78:c5:b6:84:10:f4:41:9d:3f:36:d5:bc:7c:b7:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:D6:2E:4F:8A:55:8E:24:E2:56:2B:C8:A2:87:AF:4A:DC:3C:99
X509v3 Authority Key Identifier:
keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:8f:e7:b8:a5:b4:d2:db:c9:2d:42:d4:6d:e6:8a:99:ff:43:
83:2f:98:15:78:0c:08:c4:51:52:39:da:a1:cf:04:fa:f3:cb:
07:bc:9f:52:db:bb:b8:5d:a4:66:21:bf:0f:10:78:17:9a:fd:
0a:0c:e9:a3:72:91:dd:54:bb:4f:53:a5:d6:f7:c3:74:d0:4b:
61:72:4d:a1:48:57:1f:7f:1e:41:a9:e8:6d:99:30:c7:13:7d:
c5:03:5a:49:e5:5d:70:45:81:ed:66:2d:a9:3e:d8:aa:a8:82:
68:02:f7:28:59:5d:c3:1f:7a:a3:80:88:29:fd:8d:8e:3e:62:
90:4a:7a:6d:4a:52:53:37:ef:e6:94:f4:5f:c6:26:ba:7a:bc:
a9:4e:ff:19:7f:b3:7d:72:c9:bc:ec:68:27:24:83:f1:f8:34:
41:3a:6e:b8:3d:5f:93:29:25:00:74:2c:75:03:c6:5e:96:68:
3c:ee:69:3a:91:b4:de:69:c5:ff:62:47:2e:f7:40:e6:98:e0:
25:54:94:7a:86:9f:ad:eb:05:1c:2c:ab:11:90:90:0d:33:f5:
86:c4:d4:30:22:04:42:bc:1b:c8:56:1a:d9:52:7d:c8:ac:9d:
1c:ca:88:18:a5:36:5c:84:fe:c8:0b:57:28:53:f7:1f:42:7a:
32:69:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:42 2026 by rpki-client