
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json)
Hash identifier: 0J1SYq9fBQpkee0rJEIwd9yRXISorOnhn5vzdbiKTXw=
Subject key identifier: C8:1C:94:C1:0A:55:20:DE:33:45:4C:9A:D8:0F:37:B6:8D:1C:2C:66
Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
Manifest number: DE
Signing time: Wed 23 Sep 2026 06:26:51 +0000
Manifest this update: Wed 23 Sep 2026 06:26:51 +0000
Manifest next update: Wed 30 Sep 2026 06:26:51 +0000
Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: GbOSevm2/q+R9ZomtfbdWCUXdoAMSsaZx8XvkXKgc9Y=)
2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: Enrr3cuFwRAqoDocsM8n82Zm7sQ1w4sn1Dd/0z7i8QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Validity
Not Before: Sep 23 06:26:51 2026 GMT
Not After : Sep 30 06:26:51 2026 GMT
Subject: CN=6ab3712b-0b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:6a:7e:c5:54:2d:e3:11:b5:4d:13:f8:2f:
20:c0:61:6e:9f:57:28:85:76:4c:11:c3:47:69:0c:
a4:20:3f:ef:5d:b7:eb:82:ca:af:2b:18:6a:46:53:
f1:c9:d4:98:56:27:f2:12:d7:95:06:b9:7a:56:af:
86:ce:2b:4f:0e:94:be:ce:c4:b8:e1:3d:91:38:6c:
73:33:16:4a:32:6d:5f:1e:da:fd:d2:63:50:ae:8a:
92:e8:1c:4f:3e:8b:9e:9f:35:60:3d:a8:8c:0f:04:
8b:e9:a6:b9:b8:55:ce:20:af:d9:79:e1:67:82:0e:
69:e0:8e:59:78:48:d5:67:db:c5:40:65:73:96:69:
43:44:7b:20:ac:d9:6b:7d:22:79:5f:5f:bb:3d:9a:
7f:a2:36:45:e4:da:90:9d:2b:f5:34:a1:dc:75:9c:
fe:bf:1b:9e:f2:97:21:e5:5c:98:e3:9a:9f:99:2d:
cd:af:3c:7d:93:43:a5:56:64:1e:e4:b7:cc:2b:65:
35:c8:54:e4:f0:09:35:49:b4:b4:ec:31:0f:13:ca:
b6:9c:7d:d8:21:63:a5:e3:3e:d7:a8:96:8d:2a:e9:
7a:59:20:b3:33:e9:2c:dd:31:cd:45:f3:24:c3:62:
93:02:f9:5f:9f:64:88:99:68:c9:e0:c0:9b:1d:c5:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:94:C1:0A:55:20:DE:33:45:4C:9A:D8:0F:37:B6:8D:1C:2C:66
X509v3 Authority Key Identifier:
keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8e:67:88:fd:bd:2d:e5:a7:31:cd:50:81:4a:98:35:a9:af:
ed:68:15:4d:ed:db:e2:1e:c8:34:78:81:73:57:fe:52:95:a0:
a2:27:e3:de:79:0f:a4:74:d6:2d:6e:be:ea:76:d7:08:8d:59:
f0:f4:58:1b:9e:1b:76:53:0b:cf:ef:fd:ab:80:8c:b2:57:c5:
99:a7:44:dd:72:d7:74:bf:a9:ee:90:74:33:8a:5a:2d:14:c5:
a3:8c:51:28:0e:1f:b9:06:59:e8:9c:1d:ec:b0:1e:55:b1:89:
b2:0d:09:6b:12:7c:3c:27:c3:78:ec:17:41:ec:4d:ec:18:e9:
f0:ac:c4:0d:f6:78:b2:52:05:42:17:ba:5d:40:97:9e:69:81:
09:9e:c7:50:43:72:ba:ae:f8:a0:15:48:e6:c8:f5:fb:d4:91:
81:18:d7:6c:dd:1c:26:7b:e2:f9:72:eb:0b:e6:d8:e5:5f:02:
e3:51:a8:41:30:00:fa:14:ab:b9:da:dd:37:86:45:2a:6a:6a:
cc:4b:4b:ed:4d:bb:1a:20:20:45:48:4c:b8:e0:9c:c3:c4:2c:
43:54:51:64:32:5e:14:f6:fa:d5:d4:d1:23:14:48:f9:6b:93:
78:de:25:17:1b:ab:7f:11:f7:1b:e2:9e:37:85:cd:56:db:09:
45:61:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:41:37 2026 by rpki-client