
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
File: 6xxYjN08G9CTTu5TXHqhEm0ScoE.mft (raw, json)
Hash identifier: SvprsWeD5Lnw4jyrASLhq8CvLJP38Vk03rLG8pgos8k=
Subject key identifier: 0A:FA:D1:54:11:6A:49:34:9F:56:7E:4E:D3:86:D5:BD:C0:41:B4:ED
Authority key identifier: EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81
Certificate issuer: /CN=A91E5988/serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
Manifest number: 08
Signing time: Tue 23 Jun 2026 09:27:17 +0000
Manifest this update: Tue 23 Jun 2026 09:27:16 +0000
Manifest next update: Tue 30 Jun 2026 09:27:16 +0000
Files and hashes: 1: 6xxYjN08G9CTTu5TXHqhEm0ScoE.crl (hash: +4K+3TSYR68QzvKYjNwRwaZxFDDnvpvsQx75Mw+dRKo=)
2: 634DC83C662D11F1A5BC4310A247A888.roa (hash: Ep5nijWyMpK5/K7vEOePnlUlFj8UkDN9w696/7fsWDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl
rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5988, serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281
Validity
Not Before: Jun 23 09:27:16 2026 GMT
Not After : Jun 30 09:27:16 2026 GMT
Subject: CN=6a3a5175-f085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:d8:88:b8:1d:18:9f:af:56:59:51:5d:25:
6a:a3:83:e8:06:6e:49:1f:dc:bd:2f:df:de:2f:d1:
09:4a:4f:2e:95:b3:ca:4e:97:d8:67:8b:b8:2d:48:
5f:9f:ab:67:5f:ee:06:0f:62:34:1a:89:a2:27:5e:
66:e1:4e:ce:d2:88:56:bc:44:bb:9c:3b:4e:a3:af:
10:ed:36:f1:4f:8b:c3:3f:77:ea:c4:a9:50:6c:18:
7c:a5:56:83:43:dd:ba:c4:1a:b4:3a:ed:a7:2a:0c:
42:b1:aa:07:21:5f:3e:42:86:8b:2e:0e:ec:06:33:
19:d9:f0:a2:a6:b4:9f:55:a7:36:96:ff:01:1d:f8:
f6:f5:4a:86:33:c7:9b:ce:df:47:af:30:a1:a7:6f:
93:4c:12:d3:3c:81:70:1f:6e:f8:e2:fc:d4:7c:30:
f9:8b:8b:dd:90:37:aa:1e:0b:8c:1d:e7:ac:9c:57:
9e:7a:6b:f8:fe:8f:35:e9:0e:f4:ce:aa:2f:78:0e:
76:d1:e8:46:ec:d2:aa:f7:9b:e3:ee:be:8f:d8:2a:
f9:d9:a5:66:3e:36:7a:7b:1a:12:af:90:37:0c:96:
c8:e6:73:69:b9:28:25:46:5a:91:3d:aa:17:71:03:
99:d0:63:c3:b3:a9:50:4a:f4:7d:e3:c1:0d:bd:43:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FA:D1:54:11:6A:49:34:9F:56:7E:4E:D3:86:D5:BD:C0:41:B4:ED
X509v3 Authority Key Identifier:
keyid:EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:15:9f:08:04:06:46:67:38:ff:95:22:cf:87:78:da:d3:
7c:50:7a:df:e5:06:9f:0d:73:af:51:53:ca:08:4c:21:a4:45:
4b:5c:b7:d9:96:5c:c9:8c:a5:39:a7:bd:fe:d7:d7:f0:65:f2:
37:a7:00:58:62:59:d7:5f:99:7e:c1:97:63:56:16:22:29:88:
8a:9c:e5:06:f1:a8:ec:33:cf:5c:fa:cd:f1:63:8e:1c:c9:83:
87:64:d4:da:ca:f8:ae:9c:ee:ed:ed:7c:f2:99:d7:37:c5:c2:
df:2f:06:ef:4b:34:27:0f:26:00:71:3c:f5:8e:84:b7:12:a4:
1a:7b:f2:90:03:49:c4:b7:6c:65:1e:a7:08:35:2a:eb:0d:45:
b6:b7:2a:89:19:80:8c:04:e9:32:ab:6e:04:30:4d:f2:ee:64:
67:99:11:4b:4d:90:ef:56:7f:7c:2f:4b:0b:a8:94:88:7e:a9:
12:32:48:74:8d:ff:12:97:79:8f:e4:84:93:3a:a1:62:52:34:
6f:88:65:9e:1e:52:55:75:b1:73:2f:01:60:fa:cd:81:37:fa:
3d:db:42:e3:74:b9:c8:29:88:f2:1d:10:0e:cc:74:69:dd:75:
8d:ab:89:5d:ec:76:16:8c:5c:fc:6e:78:b7:79:cd:cc:16:aa:
14:86:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:51 2026 by rpki-client