
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
File: 61jsRBV7-r2bmCUAY65H3MrqvuE.mft (raw, json)
Hash identifier: 2k+XbxB+o+uBTq2LqftpqBr6qCUUeyDcycycDFRlLw0=
Subject key identifier: 56:04:2C:DA:4B:61:EE:58:C4:76:F8:9B:F2:07:BB:D2:1E:F9:F5:99
Authority key identifier: EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1
Certificate issuer: /CN=A91F6697/serialNumber=EB58EC44157BFABD9B98250063AE47DCCAEABEE1
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
Manifest number: 13
Signing time: Wed 07 Oct 2026 09:42:35 +0000
Manifest this update: Wed 07 Oct 2026 09:42:35 +0000
Manifest next update: Wed 14 Oct 2026 09:42:35 +0000
Files and hashes: 1: 61jsRBV7-r2bmCUAY65H3MrqvuE.crl (hash: 3FbEttaQQ8PQrq13NBEkiWUroVjn/M/Ub3uVz2Dd46c=)
2: C6CD1F88A7F111F1B64CD5216211F970.roa (hash: UaimprQYq0eQREUYcfKRisgfFqpSVoX92BDSH1JKOvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.crl
rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6697, serialNumber=EB58EC44157BFABD9B98250063AE47DCCAEABEE1
Validity
Not Before: Oct 7 09:42:35 2026 GMT
Not After : Oct 14 09:42:35 2026 GMT
Subject: CN=6ac6140b-e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b6:b6:8a:3c:1d:12:94:c9:28:9a:c6:6c:1d:
07:74:d7:3d:d5:b4:a4:e6:28:3a:19:e2:82:2d:9f:
1c:15:8b:1a:43:d5:44:88:48:6b:c6:b6:f4:bf:eb:
06:9e:ab:53:6d:a9:b1:fd:7c:5b:93:53:18:77:0c:
95:a3:9e:5b:0d:07:b8:e5:42:db:06:02:c3:72:3b:
fd:52:a1:78:d4:a3:95:96:8e:ff:42:14:8c:38:4b:
da:2b:93:53:05:b9:93:5a:57:9b:93:ac:cd:0e:99:
ca:7a:44:96:0a:87:ff:68:7c:44:f2:82:0b:31:4e:
fe:de:1c:0a:ac:60:45:42:c8:0d:ea:79:e3:f6:63:
87:44:d1:39:fa:46:c9:24:81:8e:8b:29:62:9c:d2:
e3:2d:17:97:9c:e5:9d:1d:4c:f9:12:2d:89:57:05:
2d:75:bc:a2:14:94:5d:b4:24:79:c1:b4:63:39:32:
e7:14:a1:8c:34:f4:58:91:8a:26:89:f8:ba:56:81:
41:9e:75:93:35:55:fe:92:a4:bc:25:42:ce:02:e4:
d1:bb:a3:85:a6:b3:60:14:0d:59:6c:d2:c7:06:44:
a5:e3:62:30:d6:29:37:cf:34:b1:64:71:e9:bb:20:
8f:01:0f:a4:2e:f4:09:af:b8:50:b4:d3:d8:ba:13:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:2C:DA:4B:61:EE:58:C4:76:F8:9B:F2:07:BB:D2:1E:F9:F5:99
X509v3 Authority Key Identifier:
keyid:EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:28:70:39:09:12:61:45:f6:b9:2c:42:4d:80:d5:a8:38:15:
ad:58:2b:79:2e:c6:e4:63:73:50:bd:44:a6:e3:58:c1:9d:af:
1f:db:37:27:7b:d2:7f:bb:bd:b0:71:bc:87:94:53:4e:fb:a3:
2a:aa:53:bf:df:a7:df:4b:ba:85:50:63:ee:0d:4b:eb:0d:87:
ff:ba:4d:97:5d:c4:d0:70:52:14:05:ba:23:67:da:27:e5:e1:
c1:b2:90:44:88:12:41:17:bf:4d:3d:72:d2:98:c5:12:ae:fa:
1b:7a:2d:20:5a:88:db:08:dc:67:05:6e:29:27:b9:14:60:cb:
de:0c:39:07:4a:36:4c:cd:7f:24:da:8b:0f:01:60:88:c6:e1:
0a:02:07:9a:5f:61:5b:9b:6e:2f:09:e5:f9:df:88:f0:0a:34:
55:ce:2b:fe:18:11:0b:d9:28:97:5a:a2:7f:7d:a4:6a:3a:e7:
7f:4a:0f:df:82:aa:d3:dc:0e:a5:b6:b3:07:9a:cf:7c:91:4e:
54:6a:15:60:a8:2e:94:bc:89:6f:9b:2e:31:df:c0:b8:89:45:
99:47:ce:5a:18:86:a6:bc:95:4a:c5:5a:f9:88:b8:75:3a:16:
6c:30:34:ad:fb:02:69:71:59:0c:15:7c:30:a7:eb:be:18:46:
9b:7d:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:20 2026 by rpki-client