
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier: 3Xr70f81zG3gdXRk3qT2OvWUtCLoBOTT/jvwpEGpE4Q=
Subject key identifier: 14:C6:E0:DC:1C:ED:39:33:3D:50:9D:E1:2F:AC:4D:53:40:D3:79:F8
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial: 2B3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number: 2B0E
Signing time: Sat 26 Sep 2026 15:35:22 +0000
Manifest this update: Sat 26 Sep 2026 15:35:21 +0000
Manifest next update: Sat 03 Oct 2026 15:35:21 +0000
Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: 5QlRf4oHV1UgmS93VUW+xwQA2Rs2BY2ylmOiAUcsyBc=)
2: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: EzjCQSqiPhSaFvXF1H6L31ZEuTh+F8SaBy2h9H/JZOI=)
3: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 0j5aE5hiEdJstFRcjjMbmu5rVLRxiGYSHh/mpTlglk4=)
4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dSCz7IvNO2r+X8zYzOrzx4jBPpWQHgUEzjmsQAJr19U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11069 (0x2b3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Validity
Not Before: Sep 26 15:35:21 2026 GMT
Not After : Oct 3 15:35:21 2026 GMT
Subject: CN=6ab7e639-1e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:f0:48:b2:aa:a7:95:e1:93:db:41:63:52:
58:5a:d5:20:b8:a9:3d:51:44:e4:32:55:63:3e:65:
b9:bd:6f:3d:bb:f6:2b:91:67:27:7a:e4:08:67:0b:
e8:ab:50:01:4a:8e:ca:aa:95:6c:78:31:23:1b:79:
86:e7:44:1e:e9:11:a7:d2:fe:64:32:22:97:14:0f:
2f:b6:3c:1a:a6:08:01:b5:3e:2f:a5:a8:86:c5:93:
5d:79:1b:86:80:63:13:4a:a4:90:8b:d0:6e:41:87:
29:6d:82:bd:4b:b7:ab:2d:a8:15:82:ff:55:4f:7e:
8c:48:7a:81:c1:cc:98:67:b6:e5:60:6c:1f:55:94:
b0:d3:ca:f6:e4:8e:ca:88:c9:9d:f1:3c:f0:aa:0d:
0b:1a:9d:e8:f5:3a:2f:9c:ac:d3:ec:1b:82:ea:c2:
ca:d0:e9:7b:a4:b1:89:e5:d6:d2:ef:3c:84:bd:e9:
3a:2f:8c:86:33:fa:64:22:c3:e0:19:23:35:6f:56:
ce:39:14:4c:33:74:cb:13:9f:11:28:39:10:f8:48:
19:0e:aa:71:54:87:64:9e:c4:5a:1d:cd:8b:71:a6:
45:64:dc:d4:4d:08:3a:f8:59:cf:16:33:b2:30:a4:
ba:3d:47:33:8c:5f:08:14:c0:b2:24:d7:99:1b:36:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C6:E0:DC:1C:ED:39:33:3D:50:9D:E1:2F:AC:4D:53:40:D3:79:F8
X509v3 Authority Key Identifier:
keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4a:8c:2b:c2:07:25:cb:a4:6b:0e:2f:a5:ba:46:c4:c0:8a:
44:19:90:81:22:09:df:25:c5:ea:e1:e5:ae:5c:6a:4f:48:32:
da:4d:4a:c7:39:f0:ed:e6:4b:10:79:b3:70:8a:7a:f1:4e:f3:
54:c5:22:20:1b:cb:80:b7:9e:b3:6c:c8:37:0a:a0:f0:f0:83:
03:5b:f0:77:e4:30:ca:8b:9d:60:05:e8:31:04:ee:2e:48:ef:
37:c0:c3:3e:1f:f9:87:79:8b:8b:85:cc:a9:27:fb:22:48:3f:
b6:30:65:db:6a:52:81:29:62:59:23:99:50:4e:f7:c2:f0:ad:
6b:cf:2d:a8:6c:64:e4:a9:0a:29:8e:5d:78:f8:72:37:cb:4a:
81:ff:66:73:d5:e9:7d:a8:ff:58:13:04:b1:14:03:db:73:5d:
4a:df:29:4d:a3:22:4c:97:c0:fa:6b:0d:21:7d:fd:d5:32:c5:
b6:c1:03:24:bb:64:0a:9d:a1:58:48:a3:49:71:ed:d3:c1:a4:
ec:ad:91:d4:36:cf:4e:3d:14:05:c1:39:75:02:38:97:75:0e:
f8:f6:7d:82:2b:00:a5:be:f5:86:0c:4d:f6:1a:cd:69:5b:b2:
c6:5b:f1:d0:0e:d7:46:60:2e:4e:d0:af:73:5d:26:60:e3:b0:
5f:ef:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:30:29 2026 by rpki-client