
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json)
Hash identifier: 00ZUyt0PYxE9b7WD8R8NBVOdAHpBiUIbV9NyZrGCo8Y=
Subject key identifier: D2:71:EF:3D:CE:B5:6A:D6:7D:73:20:CB:DC:8D:3C:9E:94:7B:DF:C1
Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
Manifest number: 013D
Signing time: Mon 01 Jun 2026 06:11:20 +0000
Manifest this update: Mon 01 Jun 2026 06:11:19 +0000
Manifest next update: Mon 08 Jun 2026 06:11:19 +0000
Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: zot/EYvlUKU5DIHr9kpxV/hFLHLLFoo8SVwbizkeBGc=)
2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: YCyt4eq0YTJbjtnPvyQjHsHsHz1MnNzHboaf/xb9tXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Validity
Not Before: Jun 1 06:11:19 2026 GMT
Not After : Jun 8 06:11:19 2026 GMT
Subject: CN=6a1d2288-2cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:96:79:fb:a4:bf:33:ab:64:02:db:09:50:
63:dc:9c:b1:62:bc:cc:cb:78:30:02:0c:f0:be:8e:
a3:c2:d7:16:da:b5:cf:c8:41:2f:d0:f7:0c:49:73:
fb:f1:d4:8e:a4:a6:49:aa:e0:c4:9e:75:c4:56:62:
b0:9a:c9:5d:46:70:5a:6a:7d:31:69:5b:8f:67:19:
01:11:02:81:c8:0e:3d:ec:a3:b7:90:25:0c:90:29:
09:65:24:34:7a:45:f0:ce:70:3b:9b:40:da:da:6e:
02:c8:3b:75:b9:34:b9:44:f5:ab:fa:cc:4e:0b:90:
6b:39:e2:f0:0a:51:10:13:de:e3:bb:4b:5a:5c:ff:
ba:7a:e5:0e:2c:c6:7a:a2:18:5e:03:8f:e8:d0:4e:
46:45:38:50:80:1c:dd:c5:a5:e1:31:b8:a0:77:f8:
ff:ae:f1:25:d6:db:60:0a:39:fe:34:73:4f:55:a7:
b5:7d:ce:74:40:27:9a:4a:78:fd:18:82:ff:0e:12:
e4:7f:7e:3c:d8:91:5d:c9:ee:7d:8e:71:40:42:ee:
77:50:e1:bc:5a:b0:93:80:90:ad:d4:ad:42:af:b0:
81:f3:d0:d1:c0:be:50:ae:25:cd:18:7b:27:4d:1c:
2c:86:67:42:75:82:bd:9c:37:b4:56:db:78:57:bb:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:71:EF:3D:CE:B5:6A:D6:7D:73:20:CB:DC:8D:3C:9E:94:7B:DF:C1
X509v3 Authority Key Identifier:
keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6a:14:1e:bb:38:76:c6:d2:19:57:e1:88:04:1c:f0:c9:b0:
52:ac:4c:da:7e:21:a1:b1:fa:5e:67:a0:b3:3b:f2:cb:18:cb:
aa:68:13:ce:ff:53:4f:b0:51:59:54:18:40:90:24:ad:ea:d3:
88:0c:b0:94:a8:a2:ed:49:ae:57:ff:d5:36:51:f5:db:40:06:
98:ce:4f:14:31:85:f1:7f:5b:2d:09:74:ea:9d:ad:45:f2:34:
d0:3f:d6:b4:b9:31:f2:71:c3:b9:5c:cf:7e:ab:d2:0d:78:ef:
fa:a0:fd:ac:50:37:44:4a:9b:71:e5:6d:66:0a:92:73:ce:91:
70:ca:94:6d:43:36:41:9c:ff:25:79:a6:f4:7d:8f:cf:94:bc:
be:22:c6:d2:0c:a8:2a:9b:af:aa:c4:9f:fc:77:f7:55:56:6d:
7b:cd:5b:57:fc:f6:c6:9e:dd:d8:de:6a:69:bf:b8:51:44:6c:
06:7f:53:68:ff:e9:51:a7:10:b9:65:e5:20:86:53:0e:60:c8:
8c:bf:c0:db:87:57:0d:2e:48:59:0b:ae:48:7f:29:30:9a:36:
08:3a:52:33:12:d9:84:72:68:de:4d:46:7c:dc:d6:27:15:58:
31:3f:bb:5a:bc:3b:41:85:63:f9:9e:6a:7c:4c:92:f2:24:3f:
1d:5f:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:34 2026 by rpki-client