
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier: TgsUg5UXlLYFqu4qKW3CCEsfnFSfHs/Sg+BFkrN8v/k=
Subject key identifier: 37:4B:3A:5F:FB:DC:AB:2C:C7:BE:73:BF:DE:13:48:86:23:F5:81:CE
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number: 0200
Signing time: Fri 25 Sep 2026 03:19:52 +0000
Manifest this update: Fri 25 Sep 2026 03:19:51 +0000
Manifest next update: Fri 02 Oct 2026 03:19:51 +0000
Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: lMpP066ZUup9//lwN4TlQ2Lr+YYrfmg/TJtN+RcphfM=)
2: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: ENHhkrk8BCTpwWr4aooyXoOdIvkQ+fMj1H+Xu4jYjcE=)
3: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: GFImaBIJDxKMIRAiFX2CXsx2x2WQvz0QE3N7btck8OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Validity
Not Before: Sep 25 03:19:51 2026 GMT
Not After : Oct 2 03:19:51 2026 GMT
Subject: CN=6ab5e858-fb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:3e:e4:0e:d8:e9:a2:cf:cd:03:6a:f4:3d:
43:7c:f8:a7:d9:ed:45:39:d6:2e:d1:05:d7:e4:58:
5b:e6:f6:9f:7e:d2:95:0d:55:71:e2:de:e5:b6:4c:
25:1c:e2:0b:95:d0:05:ee:69:9a:4c:ce:e2:25:95:
a9:1a:30:f4:e6:46:1f:26:b0:ae:39:12:59:b5:8b:
95:a1:01:e5:c9:cd:4b:1f:b9:21:5c:c6:14:ce:97:
e4:4d:36:05:fa:03:c2:bd:f9:ff:ad:58:64:d0:a3:
34:86:17:57:5d:59:7f:9c:30:08:c3:8d:23:20:43:
bd:1b:70:83:77:23:92:87:0c:56:0f:29:be:a3:1f:
c4:8f:53:a8:c3:9f:93:ec:96:5a:12:fc:af:8a:87:
67:e1:01:bf:1c:8f:e7:20:ff:40:fe:6b:b5:67:92:
29:b2:7d:e1:1a:49:0b:ba:72:1d:8a:a6:f2:2c:a2:
99:ce:63:2a:57:24:48:f4:cf:02:f2:ce:bd:0f:5f:
bb:80:56:a6:90:70:2b:3d:bc:0c:1e:fd:3c:5f:34:
44:d7:36:d3:34:14:1a:53:f5:63:01:04:80:9e:73:
4e:d1:6e:08:e7:88:75:c9:d6:a1:67:25:3e:11:7b:
6b:95:22:8e:d1:9f:45:5e:3d:84:fb:c9:3e:4c:1f:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:3A:5F:FB:DC:AB:2C:C7:BE:73:BF:DE:13:48:86:23:F5:81:CE
X509v3 Authority Key Identifier:
keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:44:6d:a6:4e:26:fe:69:66:e1:37:cd:fc:29:e3:cd:c6:a7:
43:72:9f:49:bc:48:31:53:dd:7f:a1:86:23:c2:2d:33:4a:26:
7d:9b:bd:6a:13:f1:5f:f5:bb:48:ca:de:95:68:b3:5f:1b:f7:
a1:bd:be:7b:54:90:62:80:08:0f:2a:3f:ef:28:87:b5:3c:07:
77:54:37:29:9e:c7:eb:b2:f3:0e:72:89:88:4a:f3:65:dc:78:
c0:d8:2b:3c:43:2e:b6:ca:13:32:0e:05:b6:19:9f:f3:e4:ea:
6f:f7:0e:96:6f:6a:14:e1:de:d4:77:55:41:c2:6a:b9:df:53:
2c:ac:35:62:f4:de:1e:fa:3d:67:48:99:0c:fd:ec:b5:4a:80:
f9:97:71:e6:42:81:24:68:11:50:c5:37:df:44:03:aa:d0:70:
58:d2:30:4b:05:58:05:59:da:1a:38:dd:e8:d4:de:4e:6d:2b:
02:60:71:a1:61:20:92:a4:46:39:29:5a:95:06:63:8e:87:07:
79:8a:8c:7f:ef:c4:28:9e:00:02:37:e6:5a:cb:df:59:94:75:
98:10:18:e2:a0:0b:82:d4:d9:25:a2:d6:54:a5:bc:13:3a:38:
94:cf:e7:71:ee:6e:99:0c:32:1c:11:38:4a:83:bd:59:68:dd:
42:e1:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:58:28 2026 by rpki-client