
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json)
Hash identifier: AEaU7UuFdj8/w3813UsMBpRqtlh6DmalMBA4HsvMguk=
Subject key identifier: 1E:2E:8B:99:E7:88:9A:47:86:8B:10:4D:82:86:B2:9A:96:89:1E:3B
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
Manifest number: 3560
Signing time: Thu 16 Jul 2026 14:32:59 +0000
Manifest this update: Thu 16 Jul 2026 14:32:58 +0000
Manifest next update: Thu 23 Jul 2026 14:32:58 +0000
Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: cK82piCGLoluukwDZDjSCOn+jXnqNloLAG2tWp9Lj1M=)
2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Validity
Not Before: Jul 16 14:32:58 2026 GMT
Not After : Jul 23 14:32:58 2026 GMT
Subject: CN=6a58eb9b-7ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:7a:e0:bd:83:61:1a:ae:24:97:ce:28:fd:
a6:1c:fe:3d:bf:45:f2:2b:df:27:2e:e3:aa:a3:25:
29:f7:ee:54:f2:53:cf:52:49:73:55:cb:6c:ed:d2:
2a:aa:c4:71:a1:e3:c4:fd:7b:be:e9:36:9d:a3:6c:
8b:69:25:b8:d0:20:97:06:6a:d2:b4:3a:70:63:27:
85:49:cf:c3:10:c9:9e:87:8b:01:2e:d2:03:5f:e7:
cf:1a:17:f5:72:5a:8d:95:f4:16:45:05:c7:e8:95:
6b:34:3f:25:4a:a3:cf:93:a8:7c:fa:4c:a9:ec:0a:
ae:1a:19:a0:b8:d6:19:04:e2:ec:0c:d1:a3:95:41:
85:8b:6f:6a:70:bf:7a:6c:dd:d9:f1:1d:34:21:f5:
2e:b2:a4:56:65:5d:bd:ab:a2:3b:5c:2a:69:35:16:
54:43:86:97:5a:c0:1c:47:7a:72:08:7b:ef:84:e3:
2e:ec:a7:c4:31:24:a7:a3:6c:c2:02:eb:a1:88:c7:
c7:47:23:c4:4b:2c:75:16:d8:a7:9d:87:de:ca:e8:
93:21:4d:85:cf:18:82:1f:c7:09:df:fd:26:9f:65:
6c:4a:7e:6a:ac:a3:83:43:19:09:32:27:0a:e4:68:
e9:92:6b:66:e3:52:df:40:31:b8:c2:d4:9a:4b:e8:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:8B:99:E7:88:9A:47:86:8B:10:4D:82:86:B2:9A:96:89:1E:3B
X509v3 Authority Key Identifier:
keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:b0:d4:8d:ce:4f:cf:8c:a9:10:9e:24:06:e3:e5:16:9a:9b:
32:f1:7e:a2:6c:2e:04:47:74:b7:2e:61:ba:e3:69:2a:3a:dc:
b8:07:12:54:30:c2:1a:ef:c8:5f:ea:e2:44:88:7b:3a:3d:49:
ec:9b:be:d4:f1:d2:4b:01:15:5e:da:2b:c1:35:9d:a6:c3:f1:
d8:6c:d9:ee:42:18:0c:5b:21:e8:02:03:84:e2:cb:1d:3a:57:
80:9f:c6:65:92:ac:4e:85:07:a8:d2:69:b7:92:f8:ae:2c:15:
f8:d1:e7:7f:0d:2f:f7:a6:bb:64:c0:c5:91:f9:0a:7a:0b:91:
dc:1e:c9:e5:56:c9:4e:a5:7a:9d:12:3e:88:21:d2:fa:6e:2e:
33:b4:01:a3:5e:a9:5d:eb:41:ba:c7:26:2a:2a:5a:b1:d7:bf:
b1:76:4a:9b:9f:b5:02:59:86:51:fa:b5:ac:a7:3f:84:98:66:
e8:03:83:a2:15:a1:8f:ec:50:c6:cf:7e:89:9b:b2:15:e1:67:
02:81:2d:3c:07:e1:5b:f5:cd:c9:cd:47:38:a7:d5:61:7a:20:
55:43:bf:de:94:a7:ad:b7:9a:b2:91:4e:e6:56:97:50:4e:9a:
c7:a2:d4:a6:6d:ce:d9:81:13:af:74:3c:d8:30:e1:f1:05:34:
ac:b5:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 23:51:19 2026 by rpki-client