
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier: 8BdZ/iyE1WZj/ljevS45f4Ptvf6DXVM2H5Xsd2rpE44=
Subject key identifier: 03:45:D8:48:AA:91:F0:C2:39:51:A4:D5:36:98:71:C3:0C:35:5B:68
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial: 35A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number: 35A1
Signing time: Sat 14 Nov 2026 14:48:11 +0000
Manifest this update: Sat 14 Nov 2026 14:48:11 +0000
Manifest next update: Sat 21 Nov 2026 14:48:11 +0000
Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: vrwsHMqdqbht90qtEgwCYs3RS8aMBtIs/3xWmuccRBI=)
2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: VeOeEnA/PNFEnLPe0WdWcYFkcbsnjuaxOOluPdKyUv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13737 (0x35a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Validity
Not Before: Nov 14 14:48:11 2026 GMT
Not After : Nov 21 14:48:11 2026 GMT
Subject: CN=6af874ab-3303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:ec:79:75:85:b5:45:99:41:c2:f5:e1:0a:
e4:6a:12:c8:a1:ce:de:cc:0c:44:c2:1e:0d:4c:a1:
66:9a:05:9d:ca:01:33:9e:c9:4f:7a:b3:a6:5c:37:
df:45:6b:b7:31:32:ba:cb:2e:0b:2c:b8:fe:75:21:
55:cd:c4:19:4f:03:ae:ab:a1:75:e0:1a:0f:87:d5:
71:23:85:2b:a7:4b:bb:54:90:85:8e:1d:17:1a:c0:
83:e4:70:35:6c:1f:bc:c6:ab:d4:b9:00:d6:6b:19:
2e:78:2d:e2:ae:c6:a6:f6:f9:80:cf:33:14:82:ed:
eb:ad:3d:53:91:20:09:10:85:ed:06:b2:31:2a:56:
a3:77:82:e4:3c:4c:ed:71:a5:b6:14:68:74:e3:3d:
aa:82:99:a8:58:3e:84:79:50:61:a5:df:68:70:bd:
a6:d5:7f:d5:56:19:4f:a7:67:88:71:c5:81:83:f2:
66:53:b9:4d:4e:9e:9e:41:3b:cb:48:78:af:10:35:
56:0e:e2:fe:a9:77:46:d1:c2:1c:87:17:ff:d4:90:
17:13:68:b5:f8:a4:8c:54:f1:74:74:c3:9b:7f:ce:
d8:3b:fa:5e:17:c1:ae:dd:a3:94:cf:be:d1:87:98:
1c:81:c6:84:0d:a2:ab:38:b9:b0:99:96:64:a9:88:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:D8:48:AA:91:F0:C2:39:51:A4:D5:36:98:71:C3:0C:35:5B:68
X509v3 Authority Key Identifier:
keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:da:f2:ea:1a:58:79:fb:95:51:3c:e2:93:9d:c6:ba:a0:b4:
63:39:37:31:e8:5a:5a:5b:4c:c3:4e:6e:76:55:14:b2:31:a8:
e1:61:35:09:9a:0f:5e:58:7d:7b:1e:4f:29:27:31:15:64:7d:
e1:f3:39:f2:e1:05:d4:d3:c0:01:c2:43:b2:0d:c3:09:3f:3a:
91:26:a2:23:f9:31:17:03:3d:49:2e:a9:04:e1:bd:5d:1b:00:
5d:49:d7:d7:63:48:61:8b:6d:a7:3f:26:a2:26:ac:d8:9f:40:
14:a7:6d:91:55:1b:07:fe:e3:f3:6e:70:47:68:98:a8:07:f0:
cf:0c:c2:f8:51:d0:d7:22:7f:90:39:03:54:fd:54:53:97:19:
46:e9:40:a4:ae:e5:19:65:65:43:1c:6c:c0:16:ce:72:eb:43:
da:f6:c3:0b:13:13:9c:de:16:9b:3e:83:b2:44:6a:e6:10:6f:
27:3f:4c:d8:92:09:b9:c8:15:6e:5b:84:a5:4b:8e:36:3b:d4:
3f:01:89:0a:82:b7:42:4c:ac:95:4b:dd:6f:17:51:45:97:50:
98:d2:f2:72:ef:57:8c:67:b0:c2:db:77:71:bd:36:96:a1:e7:
8c:89:02:c7:34:a8:e5:89:90:31:fb:87:57:92:27:d8:af:61:
0a:11:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:33:24 2026 by rpki-client