
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json)
Hash identifier: ufA4Q8aGRNvtNWlawO2J2RtoZIHrOidaXS5H91MZis0=
Subject key identifier: 54:A1:79:AB:9C:E1:E4:4B:4C:A6:67:BB:8E:09:B0:B6:D4:F0:90:B4
Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
Manifest number: 0500
Signing time: Sat 14 Nov 2026 23:25:45 +0000
Manifest this update: Sat 14 Nov 2026 23:25:45 +0000
Manifest next update: Sat 21 Nov 2026 23:25:45 +0000
Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: a7s+31aZVdsI+WxfeCTXfyiGjosLwPiD5Sr/FnBOeLg=)
2: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: TGbZZQRtOxkLwoI+sDoyzXNZ3IGSlLxUsDOYQ4o4eXY=)
3: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: gUiW2vAjoVWGmxrK7l/5cBeg47nEU1anGQrH3sCs9Nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Validity
Not Before: Nov 14 23:25:45 2026 GMT
Not After : Nov 21 23:25:45 2026 GMT
Subject: CN=6af8edf9-7480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:1a:6d:16:3b:75:ed:9b:c4:b2:cc:08:27:
1e:c3:0f:82:6c:78:ae:09:b2:e7:29:5e:c4:58:1d:
6b:a4:9a:77:be:8d:db:f7:36:25:6a:81:7c:d5:33:
98:8d:e6:d0:78:7c:fc:bf:02:43:c3:46:a7:a5:cc:
47:04:5e:80:ee:bd:eb:e2:f0:25:82:d0:1c:db:f5:
a3:a5:8c:4b:f4:99:6d:72:47:ca:d0:8e:1b:e1:9d:
56:63:67:cd:6b:1a:97:6c:0e:cd:79:eb:6d:ff:c1:
4e:cf:9a:2e:62:d5:c2:e4:07:f3:23:0f:c7:b9:da:
9f:60:55:c5:2d:06:ff:88:2f:67:6c:a0:d7:f6:3a:
4a:a5:ab:28:4b:b8:99:4e:aa:b0:02:32:cf:ae:53:
7c:ac:6e:52:9b:16:f3:2b:6d:7f:52:5e:86:d4:e4:
ef:cb:84:22:a4:7c:36:48:71:2a:64:08:dd:9f:90:
ef:9d:9c:90:b6:a6:5c:00:75:17:ad:ac:a1:7b:b4:
f1:89:90:23:ca:aa:01:ae:38:39:3b:33:55:45:d3:
21:9c:96:90:d6:e1:16:0f:b4:19:84:9d:91:3f:98:
7a:3f:5c:23:19:39:ab:b5:75:16:e5:ab:70:92:ee:
a3:db:b7:2d:05:5e:37:18:71:48:ac:49:5c:fc:df:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:79:AB:9C:E1:E4:4B:4C:A6:67:BB:8E:09:B0:B6:D4:F0:90:B4
X509v3 Authority Key Identifier:
keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2f:e3:ef:b2:3c:44:4b:75:c3:01:32:39:07:5e:fb:4b:d1:
e8:fe:93:e7:0c:aa:20:89:82:96:6e:10:e9:7e:fa:34:27:d8:
5d:b3:f1:d0:a1:2b:33:8e:dc:e5:b2:10:c1:02:80:61:81:60:
7f:7f:36:23:1b:30:d3:36:78:18:06:f7:3d:eb:58:1c:d2:e0:
b8:0d:ee:7e:cf:0a:aa:ef:01:62:e1:06:2a:53:48:e2:01:50:
c5:ad:94:b2:ba:72:91:a4:13:b2:a4:9b:c8:3c:ee:55:79:0e:
73:ce:c9:3e:a8:76:4d:32:e0:59:42:5c:1c:d2:d1:67:64:75:
64:ea:95:f1:7f:29:96:aa:bb:5c:bd:3d:68:53:82:37:e1:61:
0d:49:2e:9f:07:ef:6e:9f:3f:4c:f5:50:f2:cb:13:1a:05:8c:
92:b9:ef:04:a4:e3:6a:44:49:a2:9c:aa:13:d5:c4:88:fb:42:
f9:d1:c7:fb:da:e6:a1:2e:22:8f:63:b6:74:3a:74:87:12:fe:
f1:cf:06:3e:9f:05:eb:e2:9b:89:60:71:11:a8:a7:e5:d6:76:
e1:64:15:3b:81:8d:93:01:c7:26:95:25:a8:a7:ca:72:58:63:
27:12:84:dc:36:37:12:f1:ca:6f:32:1e:c9:86:7a:a8:39:10:
aa:a8:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:40:31 2026 by rpki-client