
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier: cyHtslWPBIcH8BV0uatpBzd5CP3jXIONrWVT4w5j3mA=
Subject key identifier: CC:B3:CC:B3:1B:4D:46:0A:0D:D8:63:AE:B0:7E:2D:FA:E2:16:5F:14
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number: 01E6
Signing time: Mon 05 Oct 2026 04:13:50 +0000
Manifest this update: Mon 05 Oct 2026 04:13:49 +0000
Manifest next update: Mon 12 Oct 2026 04:13:49 +0000
Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: rEqL+WpjdnVrIHhaVJGp1XkJd7QLV8Hp5N8DXSMjNW4=)
2: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=)
3: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=)
4: E8AC04B286F311F1B8F66003A7EE528E.roa (hash: gdGgY10s0aC8Do46TFQ8bG2KR+XSS6EIIPnk5BDXjnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Validity
Not Before: Oct 5 04:13:49 2026 GMT
Not After : Oct 12 04:13:49 2026 GMT
Subject: CN=6ac323fd-3598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:f9:2e:88:25:5d:54:47:60:35:64:a5:58:
cf:c7:43:71:50:b3:42:be:a1:4f:fd:a6:51:61:42:
9e:41:18:11:90:cf:ae:f3:ae:0e:98:e7:91:00:5b:
87:c1:14:b8:0d:3b:b2:37:08:30:58:87:2e:86:50:
04:d5:1e:cf:61:41:71:08:73:6b:d8:f8:dd:29:97:
f5:c2:3c:4b:27:a1:30:d7:e1:41:66:66:a2:30:78:
e1:6b:61:53:fd:96:de:88:1e:a3:18:be:d1:6b:b8:
f0:39:d1:4a:cd:e4:d9:27:83:4c:2a:04:22:3d:0d:
ea:b9:cd:31:96:6b:5f:2b:51:0c:e8:0f:3f:15:01:
51:21:eb:26:af:a7:23:0e:14:a5:ad:e5:1c:f3:f5:
0f:7c:86:b1:dc:b7:d0:1c:55:de:85:0c:b3:7b:2b:
cb:e7:b2:37:9b:7a:df:53:b1:fa:41:30:31:38:33:
b8:3b:4f:1f:ab:7e:bb:05:fd:4a:83:32:e5:13:6e:
95:67:c0:f8:4b:dd:68:38:c4:fa:16:44:40:04:b4:
e3:2f:f7:b7:64:b7:0a:02:19:eb:f9:59:e7:1e:04:
e8:69:5b:56:c2:91:84:48:6e:0f:5b:ed:7e:b2:13:
8c:41:7e:84:7c:19:1e:5d:53:8a:70:2c:f1:f2:a7:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:CC:B3:1B:4D:46:0A:0D:D8:63:AE:B0:7E:2D:FA:E2:16:5F:14
X509v3 Authority Key Identifier:
keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a4:6e:d5:1e:22:53:e9:0b:5f:13:db:3e:b8:f2:32:60:a1:
7e:d5:5c:64:59:87:bb:fa:c0:e0:39:c0:6f:d2:d1:a8:94:d9:
6e:e7:0e:6f:50:57:24:cc:33:09:cd:bb:8a:5c:b4:5e:ff:3e:
5d:e4:60:af:17:eb:08:fd:21:58:f7:7e:fd:52:5f:7a:45:0a:
a0:e8:34:2f:3f:1a:6f:35:b5:88:26:59:37:c5:39:17:ca:76:
8e:7b:63:da:b5:7b:7f:75:d5:69:98:8a:a2:14:4f:2e:1f:a5:
05:7c:10:e1:b2:79:f7:e2:3b:de:0f:1a:cb:e5:3e:69:bf:99:
46:b4:80:e7:52:49:82:95:ac:95:1d:43:a9:1c:ac:2e:22:23:
86:ad:b6:32:c5:7c:da:24:40:ed:1c:eb:e2:0d:f5:47:56:32:
8a:69:0f:18:23:c4:31:3b:24:bb:1e:76:2b:ba:bf:86:e7:c6:
c4:5c:78:43:74:a9:79:bb:16:d3:12:ca:3b:90:e9:62:c5:7b:
9e:bc:70:cf:87:e4:68:f9:d2:3d:ca:c9:96:e0:ef:2c:28:fd:
87:4f:be:96:3b:d1:a1:1a:eb:c3:e4:2d:dd:34:4a:b1:5c:54:
1c:af:90:70:33:81:b3:41:37:b8:ad:00:8f:c8:d1:b3:47:66:
58:ee:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:18:17 2026 by rpki-client