
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier: z93KaeOsiYZ42NjXCPV59hR0Z+7+q7JltroB68O4oOI=
Subject key identifier: 0D:D6:B4:47:88:3F:55:70:6C:52:51:1E:69:2B:84:E4:E0:8C:0E:3A
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial: 358B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number: 3584
Signing time: Tue 22 Sep 2026 14:48:44 +0000
Manifest this update: Tue 22 Sep 2026 14:48:43 +0000
Manifest next update: Tue 29 Sep 2026 14:48:43 +0000
Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: zlP8bDGH9P3Upa2CVjeFv86g2fays2UJZCXAYEMUhuQ=)
2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13707 (0x358b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Validity
Not Before: Sep 22 14:48:43 2026 GMT
Not After : Sep 29 14:48:43 2026 GMT
Subject: CN=6ab2954c-41c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:3d:d1:2e:f7:2f:a8:6d:4f:e4:7b:3e:46:
ec:35:80:60:b5:da:68:30:38:ac:ae:00:bc:14:3a:
9b:3d:5a:6f:18:2d:02:98:92:1e:b2:dd:a0:63:b4:
8f:fd:3d:91:12:fb:f9:43:d2:74:03:09:60:be:35:
79:46:d0:38:86:14:d9:cc:b1:44:5a:b1:6e:87:b2:
60:02:9a:53:03:6d:3d:f9:28:e7:78:29:df:58:8a:
ec:dd:ca:93:c0:3c:56:62:3a:fb:41:4b:2b:1c:f2:
d5:c9:5a:ec:23:d8:10:9e:f7:04:cf:42:43:f9:c8:
29:d6:26:df:f9:94:b1:65:8e:d4:c2:11:ac:7b:ed:
52:31:81:1a:95:56:5b:d5:67:34:43:bb:4f:29:18:
87:36:d4:85:b2:a9:4c:54:36:e2:c1:cc:a5:aa:59:
e7:7c:d0:4a:92:77:5e:78:4a:ec:89:d5:d1:2e:bd:
00:65:a1:5e:fd:d4:67:91:fb:3c:2d:76:72:2e:1f:
10:64:7a:61:65:a7:4c:72:f2:a0:7e:c1:f5:ca:72:
d0:1a:5d:43:3a:b5:d5:47:00:c4:a4:63:08:2c:e7:
ee:69:7a:04:8d:e7:54:1c:96:a2:40:0c:c3:6b:df:
35:d6:5b:aa:2c:1b:ab:b5:cc:b1:6b:31:a2:f1:4a:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D6:B4:47:88:3F:55:70:6C:52:51:1E:69:2B:84:E4:E0:8C:0E:3A
X509v3 Authority Key Identifier:
keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:7d:70:dd:c1:a0:2a:a1:2b:bd:01:58:ea:15:34:71:c0:
99:15:2a:b1:44:18:61:c9:dd:2b:d4:21:41:f6:65:cd:81:dd:
8f:5d:1d:b0:d2:4c:7c:78:02:9b:be:38:ba:43:0f:45:8a:da:
6e:13:32:e4:21:08:a2:3e:a4:10:f2:40:07:f5:29:cc:49:1e:
c4:0d:7d:5c:45:f3:e5:42:70:4d:79:a3:d0:e8:9e:87:1f:14:
73:da:1d:61:49:11:cb:92:97:a3:ed:ac:13:f0:01:bb:c3:30:
f9:89:6b:fb:37:00:e2:f7:9a:5b:0c:a4:ab:09:aa:47:4b:a5:
b0:8a:91:40:97:7c:76:4b:84:ab:3c:a5:74:e5:1f:5c:07:cd:
0d:cd:69:eb:4a:e0:8f:4f:0d:ab:5a:2d:45:a9:6e:9e:0c:95:
80:fa:58:50:69:71:63:bd:e8:c4:8f:c9:41:e7:fe:4b:fe:9b:
27:01:46:f8:b8:7f:ab:e7:2a:4d:7f:18:cd:89:e0:f6:5c:d9:
ea:4c:5d:62:f5:d2:73:9d:09:61:b8:35:af:66:e5:28:e0:2b:
56:50:ee:f9:ca:12:cf:1f:38:af:de:23:3d:b6:77:54:84:7e:
dc:ab:93:21:88:78:7b:60:41:59:f7:d5:13:aa:f1:0c:85:37:
44:f7:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:01:33 2026 by rpki-client