
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json)
Hash identifier: 1iA4pSS4HaUICF3L67qa+BASlOoea97cjNPEpkQJBZ0=
Subject key identifier: 45:4C:F1:D4:51:EE:47:B2:C7:0E:B0:7A:BD:AE:F1:8E:7E:0D:0D:72
Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
Manifest number: 02D9
Signing time: Wed 07 Oct 2026 01:31:57 +0000
Manifest this update: Wed 07 Oct 2026 01:31:56 +0000
Manifest next update: Wed 14 Oct 2026 01:31:56 +0000
Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: 2CdMUTu9c1tfwtC2Wz2Ul95AeRu0ZFZOhQvsfWikDus=)
2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: EhbdEYMmyBbOg+c6cZePofT5T8fPpEuhHFd/+ssLJFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl
rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Validity
Not Before: Oct 7 01:31:56 2026 GMT
Not After : Oct 14 01:31:56 2026 GMT
Subject: CN=6ac5a10c-78d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:b4:0d:7e:9c:1d:d8:ee:0e:85:34:b0:b4:
cf:19:bc:32:17:50:33:d5:b8:36:69:2c:8a:d4:cc:
eb:cd:aa:f0:fc:ab:91:06:94:b0:01:59:0e:8c:d9:
dd:5d:31:bc:42:28:ed:11:0d:8b:0f:29:3c:c0:8e:
dd:e1:fb:3b:50:c1:43:be:64:ab:3f:34:b5:db:a8:
91:89:09:b5:a5:b0:73:03:09:c6:11:62:cc:46:26:
f3:a9:c1:7c:f1:87:31:04:3b:72:f5:9a:43:50:73:
c5:33:d7:8f:df:ea:0e:0f:94:13:4c:0f:04:aa:44:
68:80:37:43:c3:82:1f:9e:0e:2b:54:1e:40:70:1c:
e6:d0:a5:45:40:72:ad:f3:95:f5:59:12:f3:67:68:
f9:cd:14:50:cf:74:47:c6:0c:e5:af:c9:24:80:d1:
58:2b:6a:88:7b:6f:f1:26:1b:c4:a4:35:21:33:65:
1a:7f:0f:a8:51:4d:4c:f0:b0:a0:4a:5d:e0:a9:38:
30:c1:37:16:da:bc:23:01:87:20:02:11:02:8d:13:
df:47:26:75:83:9c:27:4d:15:91:58:21:bf:c6:d6:
f7:c7:d7:79:99:fa:78:6c:6e:1e:29:4c:ad:33:cc:
d5:74:c4:20:a0:9d:b0:3b:11:ea:af:f1:26:9e:fd:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4C:F1:D4:51:EE:47:B2:C7:0E:B0:7A:BD:AE:F1:8E:7E:0D:0D:72
X509v3 Authority Key Identifier:
keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:0a:97:32:1b:dd:82:d5:31:de:e2:83:56:39:fb:62:8c:
ec:ea:de:45:98:2c:d4:f0:0c:5a:18:4c:5b:75:7e:d3:d8:70:
a0:e2:ec:6d:93:98:5e:da:c4:40:a3:74:1a:2d:87:52:1a:5e:
0f:f7:b5:34:b1:cb:d0:67:aa:ce:ba:ec:6f:85:f8:c8:4a:72:
31:f9:22:f3:af:53:38:b6:f6:d7:29:f5:19:a5:c4:3a:1e:bb:
03:f9:09:3b:b9:96:21:16:95:9e:79:80:da:ed:b7:b0:cd:43:
fa:45:b8:69:94:50:cc:02:af:2f:4b:c1:22:07:e7:ac:37:0b:
77:19:75:4d:51:e3:53:21:4d:06:aa:92:67:8a:8e:6a:ae:b9:
ae:49:87:60:29:c0:06:c8:bb:f8:6c:fe:f5:e4:0e:20:47:d2:
1b:4e:82:00:45:1c:9f:7d:ab:be:0c:e2:02:69:71:0f:21:0f:
e3:03:f3:9d:d6:db:d6:51:e1:e1:a4:b2:19:fa:35:f3:d4:cd:
e1:c3:c7:9e:4c:6b:f8:b2:4a:38:2b:cf:ac:51:a9:f4:1e:0d:
17:ce:29:d2:69:0c:12:7c:a2:35:fb:b0:92:fd:ad:bf:ee:b1:
12:67:aa:47:87:67:ca:8b:44:f1:14:d4:1e:02:74:04:9f:85:
f7:78:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:52:03 2026 by rpki-client