
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier: gmlwPUqMwoEX3VM8JhKPtKu8T3wX0kiJ/ZvYJeJ3FfA=
Subject key identifier: F6:86:32:34:4E:0D:A6:BB:8E:BE:F5:CA:24:EF:C7:E1:48:01:87:C1
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number: 0165
Signing time: Sun 15 Nov 2026 05:23:34 +0000
Manifest this update: Sun 15 Nov 2026 05:23:33 +0000
Manifest next update: Sun 22 Nov 2026 05:23:33 +0000
Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: J3QT03Ptb3hegDcGzSCJfgaLxyR6sQpanyK7cNo0+oI=)
2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: e4ktGAuo5yxFoy1xqQC4gIok83+jqbiUpRIx09FMOG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 05:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Nov 15 05:23:33 2026 GMT
Not After : Nov 22 05:23:33 2026 GMT
Subject: CN=6af941d5-0c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:4d:ad:b9:7d:fa:2d:4f:dd:40:5d:68:cf:
99:4b:dc:ee:66:2c:35:af:e7:20:e7:8a:c8:30:98:
b4:64:92:be:fa:11:65:2e:22:65:81:e4:af:3a:ef:
f6:30:8e:bb:c0:40:83:9b:ee:c6:b0:4a:5d:38:48:
b1:bc:c4:f4:a0:3c:75:00:cd:61:a2:53:2b:63:de:
90:85:78:f7:65:81:24:7a:0b:dc:c5:ff:e8:50:b2:
fb:4e:c7:6d:a0:f1:b0:23:79:66:07:03:22:87:e6:
16:8d:2c:0f:8f:7b:03:57:36:27:c6:c9:9c:4e:d7:
31:7e:34:ef:bb:68:85:d2:87:2d:c5:6c:a4:f6:b6:
4e:83:c9:70:ad:3f:58:41:43:c4:9e:eb:c4:cd:4f:
53:e0:d4:e4:bb:63:09:1e:18:5f:61:e0:f0:e5:70:
c8:25:34:6e:33:5d:52:12:ca:ce:c9:0e:39:d1:1e:
64:a2:7c:bf:68:02:68:7b:28:e9:5a:14:46:73:4b:
68:40:c4:e4:35:62:cf:82:fc:de:b3:92:11:db:81:
d9:16:0e:92:f5:d1:80:f3:dc:66:aa:25:cf:88:71:
2e:da:38:a1:d0:6a:e8:ec:ed:49:11:f0:f8:6b:f0:
3d:9d:dd:59:5b:68:b6:fb:73:86:40:8e:73:10:8b:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:32:34:4E:0D:A6:BB:8E:BE:F5:CA:24:EF:C7:E1:48:01:87:C1
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:c0:97:ea:a5:8b:3d:d6:ce:d7:46:38:65:08:bd:9b:33:
9c:0e:5b:b1:bd:de:f3:6e:c2:2a:a5:61:9b:9a:34:98:80:f9:
95:38:ba:b9:eb:bb:25:2a:d6:6a:15:94:d9:42:8a:51:f1:90:
82:13:61:45:db:43:d2:26:36:88:58:78:ac:78:db:84:e3:51:
17:2f:09:22:68:e6:f8:38:ca:9f:93:13:46:49:4f:86:08:d9:
13:ad:4a:cd:0e:c9:9f:d1:dd:75:d6:cd:80:83:41:8b:20:69:
0a:64:ca:2e:8d:ee:57:75:39:90:30:95:58:f5:d2:96:65:95:
a9:79:bb:88:31:45:f3:0a:e1:40:ec:c2:80:99:37:04:f8:a5:
bf:5d:3f:95:fa:91:9c:fe:79:80:12:19:cd:df:88:46:31:86:
79:70:30:33:4d:f4:4a:cc:0f:1e:4f:d6:a6:7a:55:74:fb:de:
40:ba:d0:4e:5c:46:e1:a9:5c:85:56:c1:bd:cc:91:4a:3f:ae:
6a:66:10:ef:1e:68:5b:62:c1:dd:8c:97:5f:35:0d:0a:df:aa:
2d:1a:eb:04:c9:49:f1:16:00:91:df:43:16:a1:48:7d:67:f4:
44:57:85:03:da:0a:49:5d:59:45:29:6b:dd:35:ff:4d:c4:3e:
96:e4:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:23:30 2026 by rpki-client