
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier: 4Tm/hvipsOpPzHKimgsz6AunhXo2PZf0t1sS9fOvzYg=
Subject key identifier: B3:B7:EE:54:25:99:94:49:E3:68:02:75:21:7C:CA:82:82:99:B1:A8
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number: 014A
Signing time: Wed 23 Sep 2026 05:16:53 +0000
Manifest this update: Wed 23 Sep 2026 05:16:52 +0000
Manifest next update: Wed 30 Sep 2026 05:16:52 +0000
Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: lFkfliouPGguYuSkrEDnejXtrSducO8bjDdurspi2JE=)
2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: e4ktGAuo5yxFoy1xqQC4gIok83+jqbiUpRIx09FMOG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Sep 23 05:16:52 2026 GMT
Not After : Sep 30 05:16:52 2026 GMT
Subject: CN=6ab360c5-9ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:9f:c3:44:3d:c8:ec:f7:9e:7e:65:b4:c6:
d4:cd:6a:b8:2e:2a:0d:e7:9c:ce:94:81:56:9c:26:
55:fd:e6:b2:22:9f:36:b2:47:e5:38:c2:6b:f1:d4:
e0:2c:3a:4f:8a:25:b4:17:8f:35:2a:9d:db:02:9d:
50:0b:85:e7:dc:ad:04:ff:9f:ef:c0:7c:e6:e6:09:
a7:36:e5:13:54:52:05:5b:bc:bf:c5:b1:ec:c4:86:
8d:ed:18:fc:33:28:87:86:25:21:20:66:aa:58:b7:
77:81:09:4f:aa:d2:b5:21:8a:0e:51:98:a9:88:99:
24:9c:1e:44:a8:c0:bc:93:7b:c2:b9:60:67:62:20:
b3:ab:c0:48:27:0a:ad:39:a0:31:a8:d3:5c:a1:d0:
fe:67:20:37:f8:7b:27:80:9f:f6:a9:a4:b1:ea:2c:
f7:db:e7:c5:06:c9:26:ae:4d:89:24:4a:d3:db:0c:
04:79:02:06:c2:fb:c3:0d:84:82:bf:c4:d6:eb:3e:
90:2c:9d:6a:d4:5e:b3:5c:a5:7b:7d:47:04:0f:1c:
3e:65:9a:de:ab:04:db:28:46:c4:3e:77:a0:76:dc:
e0:90:2e:d5:7e:b4:e3:98:fb:41:89:bf:db:90:dc:
55:48:4b:b4:34:ee:2f:5f:10:96:74:ad:c9:5e:93:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:EE:54:25:99:94:49:E3:68:02:75:21:7C:CA:82:82:99:B1:A8
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2b:b9:6f:e2:bf:5b:5a:7d:76:37:69:96:2f:96:3e:c8:e0:
38:72:d5:12:f3:2e:a3:f8:f9:ac:8d:bf:4e:c1:dd:e0:89:30:
79:ce:3f:a8:5b:6f:52:b0:85:cb:c4:cd:15:bc:88:4a:3d:a5:
21:c8:9a:40:79:2c:d7:59:5e:8b:45:ec:c6:ab:ca:b6:d2:05:
d8:d6:c2:15:42:ef:8f:9b:fe:47:63:bb:ea:f3:b4:7e:a0:71:
b7:16:b8:7a:17:7b:0f:b6:ea:61:85:1a:0f:d6:a9:66:fd:5d:
77:a3:ba:fc:62:a6:9e:3e:78:5b:c4:ad:8b:66:66:26:4e:d1:
52:39:cc:1b:30:53:41:e4:71:5c:b6:5f:66:c9:66:98:7c:0f:
4a:fa:3d:15:a5:b5:32:06:6e:1a:89:94:a2:c4:56:e9:43:ba:
36:67:4d:f4:94:db:9e:f9:8c:af:dd:96:26:b2:23:9c:d1:2c:
ec:93:61:43:d2:da:dd:ae:5d:89:ff:bb:92:6e:47:6f:8d:91:
46:3a:8a:f4:2f:93:a1:2f:48:0b:e0:b1:45:ad:bb:16:49:49:
35:b9:25:73:a0:aa:52:c8:cc:ba:7d:7b:17:41:e6:c7:59:c2:
56:d7:6f:0f:02:ed:47:b3:fc:38:2d:14:03:b8:76:ca:08:64:
68:ba:8a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:43:57 2026 by rpki-client