
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier: a0pcrpVVUalWObBNWEE7xvylp+VOvdoMpsmQN6PLwE0=
Subject key identifier: 41:AF:C2:9B:11:90:7E:1B:6B:35:CF:E5:F5:44:8D:89:94:D7:32:A2
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number: 018C
Signing time: Mon 29 Jun 2026 05:01:07 +0000
Manifest this update: Mon 29 Jun 2026 05:01:06 +0000
Manifest next update: Mon 06 Jul 2026 05:01:06 +0000
Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: h21AVKUTIwUF7yUk+X4Yk4uIUFqrlbC6UvEqS3WzIpE=)
2: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: luJDZXUCsErEO6dlGQ0NaKVijOt5Fv1/7lPhVmE4g3Q=)
3: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: P9IZK1ovU783CyWJnT8g69cd8sfR6u3xdDmab8jhoBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Validity
Not Before: Jun 29 05:01:06 2026 GMT
Not After : Jul 6 05:01:06 2026 GMT
Subject: CN=6a41fc13-7880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:c2:ef:fe:87:79:91:3d:8b:a0:81:02:78:
c4:35:f0:6c:fc:ca:36:5c:99:6c:68:37:7e:d0:f5:
3d:a5:91:98:e0:00:3a:64:27:7e:7f:bf:48:25:9d:
97:25:e9:66:6f:b3:f8:28:e7:c6:36:ba:6b:a5:d2:
d5:ac:bc:a6:63:10:70:bd:86:7a:cf:d0:72:77:2a:
21:82:5c:f7:e1:0b:0a:3d:1e:bf:32:ed:b8:a0:b6:
e6:cd:db:53:d9:a9:e5:b2:f9:cc:fa:a3:03:f0:d7:
42:25:90:d2:2a:da:96:50:8b:56:2d:af:53:f3:e8:
ca:97:d4:4b:14:80:29:c1:f4:40:36:ad:32:da:e5:
99:a5:12:dc:8c:22:07:22:9f:41:62:dc:c8:c9:4c:
4f:05:87:1a:39:f6:ca:ec:b6:2e:72:d0:5e:b2:7a:
d9:6b:83:58:4a:7b:f6:48:35:4d:01:0d:20:72:f1:
21:77:1d:70:f5:73:fb:76:9b:a5:a0:6a:60:93:33:
0a:ec:28:68:80:30:89:3c:a1:89:73:52:fa:54:1b:
82:75:b3:2c:8d:78:39:c2:f3:17:d9:3c:c0:09:f1:
29:69:5e:da:60:80:a8:03:5d:94:27:43:1c:3d:0f:
89:79:9d:2a:52:f9:9d:2e:11:e6:94:41:00:13:84:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:C2:9B:11:90:7E:1B:6B:35:CF:E5:F5:44:8D:89:94:D7:32:A2
X509v3 Authority Key Identifier:
keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:36:2e:b7:c3:88:a6:bf:4b:5e:16:33:aa:fe:2f:6c:be:f6:
cb:dd:77:bf:f7:4e:12:cf:40:d8:e1:f3:0e:86:12:bb:f5:1a:
d0:23:b5:d5:d0:56:aa:9e:9c:a2:e7:82:16:70:13:c0:1d:0b:
00:bc:ca:f7:f1:83:94:b6:da:fd:12:c7:d4:c0:e7:a6:62:c6:
46:c7:20:db:a2:d9:61:d1:e2:b3:dd:48:0c:49:04:0a:cb:6f:
94:55:99:e4:7b:8e:1e:ea:38:d3:ca:a2:59:2b:77:63:00:5d:
d7:b7:65:43:65:b6:54:2c:cb:ea:b6:0a:86:b9:82:f7:1a:f9:
65:85:34:7d:0d:1f:c1:b5:81:2b:ae:29:76:c0:f0:2a:a1:23:
f1:f0:e7:3c:9b:25:00:b3:18:ac:d3:a8:5b:2b:19:38:e9:d3:
08:3d:16:cf:54:6d:d8:ca:6d:25:cc:e6:23:7a:12:d9:9e:28:
86:6e:03:0e:6f:3c:c9:ce:96:99:28:25:de:13:07:cf:96:17:
9a:c2:85:96:0a:9e:60:ed:cc:8c:be:ef:c8:a9:ab:19:41:39:
24:1c:a8:22:3c:0e:dc:0b:c2:9a:77:b0:54:9b:ee:50:f7:4d:
8c:87:89:84:42:f0:cc:1d:0d:ce:d2:65:26:bc:b8:86:a9:d8:
84:23:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:50 2026 by rpki-client