
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
File: 6xxYjN08G9CTTu5TXHqhEm0ScoE.mft (raw, json)
Hash identifier: M5wpaCYkFekpGfXbACA/l5jtCtus6OQOoHddd1ZTKME=
Subject key identifier: FD:2E:EC:36:54:D1:83:6D:B3:38:FB:BE:28:05:D6:D4:D7:F5:50:ED
Authority key identifier: EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81
Certificate issuer: /CN=A91E5988/serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
Manifest number: 48
Signing time: Tue 27 Oct 2026 08:41:56 +0000
Manifest this update: Tue 27 Oct 2026 08:41:56 +0000
Manifest next update: Tue 03 Nov 2026 08:41:56 +0000
Files and hashes: 1: 6xxYjN08G9CTTu5TXHqhEm0ScoE.crl (hash: lL13yTEyMW+oreWO207raNYA614+WtYopPEtBnB5lek=)
2: 634DC83C662D11F1A5BC4310A247A888.roa (hash: Ep5nijWyMpK5/K7vEOePnlUlFj8UkDN9w696/7fsWDM=)
3: Gb4F3ARXb4IKRJkWRPs6LX_-v3U.asa (hash: r1nSszHdUFuYZmemznKzUBY3KBsU1gmxiFT/Y+0E1Co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl
rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5988, serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281
Validity
Not Before: Oct 27 08:41:56 2026 GMT
Not After : Nov 3 08:41:56 2026 GMT
Subject: CN=6ae063d4-afde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:96:a4:17:f9:2c:c3:08:ad:5d:4a:5c:df:
0e:a1:5b:5c:ce:f1:69:40:37:bf:80:55:e2:ed:f9:
f7:f8:7d:a8:a8:1d:16:7f:df:80:7a:72:81:6e:cf:
d7:0c:4b:cd:c6:fc:cb:35:af:cc:13:ba:46:ba:a6:
6d:b0:71:20:95:d1:ad:12:e2:da:a0:da:35:ac:7b:
98:90:ae:50:7d:48:d6:af:b3:e3:aa:e2:07:ee:36:
83:73:16:50:1b:d7:e7:e8:66:ec:cf:8b:6d:be:22:
33:ed:fa:c8:7f:40:56:36:4d:d7:8e:01:bc:1d:3e:
82:cf:8e:d3:f5:8d:85:5a:2d:90:c4:c4:b7:2c:e6:
e4:d6:60:5f:62:31:c4:40:9f:e6:91:f1:b4:73:78:
27:7e:88:9e:2d:03:4e:d9:2b:b7:a5:43:bf:f6:c1:
39:80:60:4a:78:35:0f:9f:0e:68:0b:1e:eb:a3:84:
ca:5b:2c:d1:57:af:fd:94:7a:ef:25:53:b1:6f:aa:
cd:05:bf:77:13:1e:eb:9f:f1:b2:e5:e8:de:74:8e:
4e:c3:6c:45:76:70:4a:5a:bc:b8:4f:8d:fe:7c:ac:
30:ba:43:a4:75:45:b7:c0:88:81:0b:98:0a:57:51:
f0:f8:b9:f1:0d:07:b7:28:3c:5a:5c:b0:83:6d:3a:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2E:EC:36:54:D1:83:6D:B3:38:FB:BE:28:05:D6:D4:D7:F5:50:ED
X509v3 Authority Key Identifier:
keyid:EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:b3:82:57:8f:c4:5d:45:3e:8c:44:17:cf:ee:bf:28:f9:
89:f8:80:f2:2d:92:9e:13:66:27:b4:ed:4d:fb:43:0c:bb:f8:
5d:6b:b1:55:48:60:6b:c9:4a:aa:56:90:25:3e:92:96:13:36:
cc:bd:f6:9c:3e:cf:ee:e0:1c:47:d8:b6:20:60:ff:82:cf:84:
cc:41:c8:aa:f0:1c:2d:08:39:25:d5:1a:81:13:e9:89:08:4d:
02:02:9b:24:c4:cf:30:e9:02:5e:62:fc:c9:21:ec:6e:cf:6b:
e5:20:3d:9d:68:96:4c:00:63:21:37:dd:b1:d9:fb:82:91:f5:
70:e8:b5:60:1f:2f:39:d7:e3:80:5c:9d:08:dd:2c:3e:39:9b:
73:4b:ef:b1:6e:0b:02:8f:40:7c:f5:46:b1:d7:88:6c:68:53:
e5:41:87:79:f0:1f:ef:9d:83:36:bc:a2:10:f2:3d:00:cf:9d:
9c:5c:06:cc:cb:58:49:af:c7:2b:95:01:ae:d9:69:54:ef:7e:
26:a4:a4:8f:3b:2e:79:ad:d2:4f:4b:c0:8c:ca:e1:df:59:77:
a2:a5:ff:0d:02:70:c7:78:de:25:b3:1b:0e:64:9e:aa:e1:1d:
ee:2f:3d:8b:71:d7:db:01:09:31:a8:76:d7:ef:59:46:ec:d8:
91:65:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:56:22 2026 by rpki-client