
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
File: 6T3f_jtOr4gfKaEnoibdo7SaD_I.mft (raw, json)
Hash identifier: xgWU0J574I/9uVB+5S29A7TmQ4trYn+C+EhdHuXXses=
Subject key identifier: 5C:74:36:6F:47:70:CB:7B:EC:7E:BB:F1:BF:21:D3:C2:98:4A:E4:A4
Authority key identifier: E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2
Certificate issuer: /CN=A91AA7E7/serialNumber=E93DDFFE3B4EAF881F29A127A226DDA3B49A0FF2
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
Manifest number: 0A
Signing time: Sun 15 Nov 2026 09:21:27 +0000
Manifest this update: Sun 15 Nov 2026 09:21:26 +0000
Manifest next update: Sun 22 Nov 2026 09:21:26 +0000
Files and hashes: 1: 6T3f_jtOr4gfKaEnoibdo7SaD_I.crl (hash: 4slKvdJqTH3/QRTy6qEEsXJwhm8XP+crKM2irUSNY7E=)
2: 8FEB939CD76111F1900D31393166CEF9.roa (hash: dCcqcaTLpoVF9ZCJZvO5RfhUEAACTujN99lmGRgy+kk=)
3: E107B344D73B11F18A9FEF2B2566CEF9.roa (hash: SvYY40ibLa4xe+vH4bQ7EtmgCWY9a5elJyAchvvmGtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.crl
rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 09:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA7E7, serialNumber=E93DDFFE3B4EAF881F29A127A226DDA3B49A0FF2
Validity
Not Before: Nov 15 09:21:26 2026 GMT
Not After : Nov 22 09:21:26 2026 GMT
Subject: CN=6af97997-cf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:60:d4:e6:c3:ce:5e:c9:96:c4:3d:4e:e8:
75:94:49:88:83:a9:f2:42:52:bc:5c:53:f1:83:d7:
ed:3f:48:5a:73:f2:97:67:64:cd:00:12:15:58:ae:
53:0f:b7:ea:c9:19:d1:fe:4a:a0:e4:e6:fc:b3:0b:
1a:f5:66:b3:df:5d:21:72:9e:be:ef:92:46:fe:b3:
2e:93:0f:04:a6:bb:12:c2:17:c0:98:da:af:b9:04:
b6:47:a7:55:10:a1:45:3f:99:88:bb:f8:b6:99:18:
bb:71:63:a8:61:fe:e2:59:8e:9b:c4:73:25:21:0f:
15:71:bb:b5:9b:92:1a:69:09:4c:ba:19:e0:d0:30:
0f:dd:6c:d0:41:d8:76:37:86:fe:80:99:55:de:41:
82:fb:20:f5:b4:4a:c6:78:c9:ea:97:e5:d9:1d:74:
8d:c5:ec:10:21:c2:88:2a:3b:94:65:c0:10:41:67:
ae:58:00:f6:bc:34:9d:ea:c5:c3:5b:9c:6d:33:fb:
a4:79:4b:53:97:41:eb:29:28:29:0f:9f:96:4e:a4:
50:c8:a7:da:6b:26:ca:6e:cd:9e:39:a7:b7:1e:69:
b7:66:ec:83:fb:11:32:79:71:bd:0a:a6:47:86:e3:
ef:7c:f2:73:2a:b2:09:c9:df:ea:e1:da:56:2c:da:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:36:6F:47:70:CB:7B:EC:7E:BB:F1:BF:21:D3:C2:98:4A:E4:A4
X509v3 Authority Key Identifier:
keyid:E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:11:4b:da:ce:06:46:c2:50:87:0d:54:51:bd:13:18:bb:cd:
a8:50:06:84:9c:90:34:3c:7f:dd:02:ec:e7:9b:7b:2e:ae:27:
4c:92:5f:a2:54:45:06:07:c0:1a:fd:f6:57:90:c4:39:95:64:
c2:8b:b3:6e:39:da:ec:e0:82:d4:8f:0d:8b:8a:5a:08:c5:29:
54:88:24:5a:df:7e:b5:5b:a4:e0:32:4e:cc:2b:f9:93:f4:08:
21:07:be:fc:66:5a:a7:ed:a6:0f:7a:65:8d:7c:8c:e0:9d:4d:
0c:f4:34:d6:4f:9a:3c:72:b4:a9:72:80:f3:0b:2f:77:80:4a:
e3:8f:ad:ca:50:23:bc:b4:31:e3:47:56:04:37:56:6c:1c:f8:
48:e2:bb:cc:90:39:8d:bf:c7:cc:a6:9c:01:85:05:e0:a5:83:
4e:4e:53:00:7d:4c:d9:a0:bc:be:53:d0:e2:92:21:a9:c4:b4:
12:0e:bb:e2:97:2f:a3:0a:5e:ef:76:17:55:6f:6d:44:2b:17:
a6:fd:e0:f4:05:1d:db:f0:58:35:1e:37:ba:2f:dd:d8:68:d5:
7b:91:63:de:1f:4d:e4:c2:42:2e:f3:d6:3d:1b:9d:f8:71:cc:
9c:72:bc:60:10:67:4e:80:3a:ca:15:0f:61:87:3c:4f:9a:25:
6d:18:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:28 2026 by rpki-client