
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier: sjhoQqmkTDV/40P44LH2W8ux2AqN3HQ9q7fzqO3/m7E=
Subject key identifier: 3C:10:DD:5B:45:8B:AF:9F:BC:72:A3:26:52:9A:40:E0:9D:63:88:70
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number: 75
Signing time: Fri 03 Jul 2026 08:37:29 +0000
Manifest this update: Fri 03 Jul 2026 08:37:28 +0000
Manifest next update: Fri 10 Jul 2026 08:37:28 +0000
Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: AcA/SXcqHJwAPuoi2djFuFLiKFrR9dhngzuvknLh7/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 08:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Validity
Not Before: Jul 3 08:37:28 2026 GMT
Not After : Jul 10 08:37:28 2026 GMT
Subject: CN=6a4774c9-485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:c2:10:48:77:37:53:35:f0:de:70:79:3d:
98:39:d0:a7:7b:89:3f:4b:11:7b:d1:98:09:03:46:
73:a6:c0:eb:58:df:51:5e:92:f0:f0:90:f4:63:5a:
c3:ec:aa:b5:a2:71:79:38:de:37:3f:01:e0:12:4a:
a3:6a:05:6a:6a:b7:fd:8d:24:13:a8:f6:86:36:7b:
90:50:1a:8d:53:c3:21:f3:10:d7:e8:90:93:a1:ad:
b7:07:fa:05:86:85:8c:30:da:9b:97:39:4d:fc:e4:
7b:56:b8:be:bb:9c:2d:da:d2:24:83:10:ad:db:d8:
74:47:8a:41:71:4e:83:0e:13:02:e1:5f:b5:be:6f:
b2:ea:ec:d3:d1:83:c1:f9:25:ba:d2:ee:ec:c1:2e:
a0:43:54:57:8b:5a:4e:f6:df:77:ad:20:23:9f:f9:
00:1c:16:e6:96:17:57:57:c9:09:86:ea:8e:57:fb:
c3:1c:e0:76:20:e2:b0:53:81:89:15:2c:7f:d7:ef:
4a:7b:7b:82:5f:23:75:b1:ac:18:25:a2:a9:99:f5:
74:74:f5:85:77:d4:88:e6:0c:ad:26:57:38:5f:1f:
b3:3a:3c:81:be:fc:38:88:ff:36:1f:d5:8b:be:8b:
ca:32:af:11:9b:02:ad:4d:f1:65:df:ac:63:05:ce:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:DD:5B:45:8B:AF:9F:BC:72:A3:26:52:9A:40:E0:9D:63:88:70
X509v3 Authority Key Identifier:
keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:13:7c:5e:8c:5e:01:2b:b3:3e:01:66:d9:bc:92:f4:3c:da:
da:f8:13:c1:77:ba:33:a4:45:1c:58:70:fb:37:83:84:5d:84:
8a:09:f5:31:5b:e6:e7:95:aa:f8:48:2e:cf:fb:27:14:27:18:
90:23:29:f2:17:e3:ab:fb:be:41:44:c8:8e:1d:99:cf:f1:75:
ab:5e:00:4b:4f:06:08:dd:7b:7c:8e:38:d6:c7:a9:56:ad:e7:
8e:20:fb:01:d7:e1:b9:a1:a8:f4:9e:9e:d1:97:d4:f3:e8:05:
61:60:7d:5d:32:d6:16:4a:4e:04:96:3c:4c:dc:98:b8:36:08:
b7:8f:25:f0:57:0d:f5:0c:f8:85:6f:d7:1f:b9:67:5f:af:85:
19:9f:df:c2:ca:5c:ba:e0:70:b2:09:26:24:34:aa:cc:da:f9:
11:17:c8:b8:6f:c9:39:2e:fd:2a:e9:2c:82:d0:95:21:31:31:
3b:fd:24:6e:25:dc:73:1d:4a:1b:3b:23:49:e3:0e:4b:05:d0:
af:ae:86:5d:11:e5:60:e7:8f:11:d4:a1:05:3c:81:d4:9f:a9:
05:9a:12:9f:97:f1:b9:9c:c6:40:2c:09:13:66:ee:bc:6e:42:
60:fd:e5:9a:56:2c:08:4b:13:61:0f:42:71:dc:94:93:0a:79:
eb:e9:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:38 2026 by rpki-client