
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier: teyB0aBiide+nSzG1etdcrR7de8AIWFcP3rgC++jujo=
Subject key identifier: 74:FE:4D:5D:B1:52:C2:18:DC:03:AA:8F:61:10:9D:87:6D:8D:C3:D9
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial: 215C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number: 2133
Signing time: Thu 16 Jul 2026 15:58:40 +0000
Manifest this update: Thu 16 Jul 2026 15:58:40 +0000
Manifest next update: Thu 23 Jul 2026 15:58:40 +0000
Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: l0LgfAJLbv53CfpewzgmEg+CXquAObW+DvbWqwjBZlE=)
2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8540 (0x215c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Validity
Not Before: Jul 16 15:58:40 2026 GMT
Not After : Jul 23 15:58:40 2026 GMT
Subject: CN=6a58ffb0-9fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:78:37:e6:61:7b:f5:ab:38:7e:63:3b:a6:
bc:7a:7b:f0:7c:8a:f4:42:d3:c0:f2:6d:f8:ff:e4:
e3:c9:8d:df:7d:87:85:b5:b8:9a:f4:a4:ce:2a:3e:
31:5f:51:ee:01:59:2e:00:42:85:2f:b2:d9:58:24:
42:b3:b5:36:7a:69:a7:ba:a9:cd:45:71:f8:01:62:
d1:63:e4:09:55:6e:46:e2:04:57:f6:85:47:fd:d7:
ea:a4:d9:05:a1:a0:ea:dc:e3:16:7a:4a:d8:23:9a:
6e:e3:bf:f7:0d:92:9d:32:0a:76:7f:95:74:b7:22:
64:71:84:93:c1:d0:c4:f0:08:69:8d:19:38:bb:1c:
f2:95:99:7e:c6:81:d2:fc:fc:22:b3:17:27:a1:b0:
ef:ca:a3:d1:33:e8:81:5a:21:d5:0b:96:b2:17:7f:
19:77:3e:36:26:1b:95:40:9e:43:2e:0e:fc:86:fc:
1a:92:6a:61:a3:a6:75:11:36:58:87:d7:68:c0:f4:
51:3e:0f:a2:43:c8:21:e2:bc:94:c5:74:7e:d8:68:
4c:48:c2:e9:08:51:75:63:27:a3:63:2f:3e:36:8a:
66:e0:8a:95:f4:52:a2:35:06:c4:ed:55:84:0f:c7:
48:cb:0a:24:ff:d2:cf:40:e5:b1:d2:a4:71:d2:d2:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:4D:5D:B1:52:C2:18:DC:03:AA:8F:61:10:9D:87:6D:8D:C3:D9
X509v3 Authority Key Identifier:
keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:69:76:d9:e7:7e:4b:f1:f8:0c:4e:5d:bc:72:13:81:15:e3:
57:c0:e4:5a:13:6d:b1:5f:c3:86:30:d6:3d:2d:ed:74:d1:e6:
59:e4:c0:3c:38:ac:7a:5b:22:34:83:e6:4a:bf:84:a6:4b:f1:
2d:0a:86:f1:37:71:4f:1f:49:9c:c4:0d:ad:39:79:cb:14:73:
cb:9d:3f:4a:de:22:fb:cc:b5:11:20:38:5a:25:12:64:6b:f1:
a2:44:3c:e2:15:9c:38:f6:51:b4:b6:56:20:38:61:ce:29:cb:
74:a4:01:88:72:9a:69:5f:8f:df:6a:cf:f3:c9:a5:ad:44:e7:
7f:cc:18:12:49:55:25:ef:ed:4e:21:14:2b:4a:d8:8b:44:f4:
2e:f1:17:37:40:be:73:ed:d1:49:54:16:3f:ea:61:ab:3e:cd:
1a:b5:a4:d9:55:65:bc:59:71:00:32:b9:41:4e:1c:c0:45:4f:
40:2c:2c:5c:27:13:1c:01:f0:0d:6c:c3:c9:dc:72:4b:5a:7a:
18:a7:37:4c:61:0d:8d:e7:f0:89:a0:37:70:5d:d7:06:c4:b8:
7b:5e:78:e2:9f:6a:61:f8:df:d6:06:a1:f4:00:ab:eb:97:16:
1f:7a:64:ef:f7:28:e6:56:7c:68:ee:db:8f:5b:93:86:f0:85:
f1:9f:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:14:18 2026 by rpki-client