
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier: n1etLlXZfGrjlVxFUW7iUmUe9SZktyW9OCdP6yO4hiQ=
Subject key identifier: 5F:67:23:BE:2A:22:75:E1:65:38:ED:E5:12:6D:F1:60:E4:EF:52:59
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial: 0DAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number: 0D7A
Signing time: Sat 14 Nov 2026 17:57:15 +0000
Manifest this update: Sat 14 Nov 2026 17:57:14 +0000
Manifest next update: Sat 21 Nov 2026 17:57:14 +0000
Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: hkyz9Ejg+fqAygMvO201qqImJJUI4rQN9Q1HMQYbKsg=)
2: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: iXoFDC1/xn8eo80BBt5o4qBvONSL8fiFR0NnU+Rlsm4=)
3: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: FnVWhChRr11R5lpk40SJBFENshJaIF0/rxDkqiwSIcM=)
4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: sEAKBH3vdiwKhzr+pz82LbbFlkeuV8FcYTwEffKRwCI=)
5: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: KS8c0Xi48inxYzZwmpUb5TLhVOZX441xko0cDwnChQQ=)
6: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: RY/qHTj/TZMLF7or7YczACasBD51dw5I3A60sFNv3Ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 17:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3499 (0xdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Validity
Not Before: Nov 14 17:57:14 2026 GMT
Not After : Nov 21 17:57:14 2026 GMT
Subject: CN=6af8a0fb-a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:22:a9:75:5f:32:cc:d2:85:e8:36:c4:1c:
23:dc:56:04:49:f1:d5:dc:e5:59:93:c3:66:77:35:
15:f1:f4:30:5a:c2:bc:b4:12:f7:01:3e:e5:a6:af:
5d:27:53:90:16:b3:9b:26:e0:77:e7:b2:8b:15:c7:
4b:30:98:5d:da:2f:ce:9f:df:1c:1d:50:d6:70:74:
55:e8:08:82:a6:ae:a6:d1:1a:98:3d:c7:a9:2b:1c:
1e:ee:4d:16:85:44:46:22:e9:36:06:17:f7:63:1b:
ed:ff:14:34:31:b8:5e:a3:fe:ab:ab:89:66:cd:31:
11:87:ea:74:27:25:9d:9f:75:34:1e:f5:fe:41:2b:
a5:25:4f:46:21:d2:f0:f8:c9:70:d1:7a:86:24:2b:
df:74:f7:8a:cc:8b:2f:6a:70:b3:df:1b:73:2c:05:
0f:b3:66:a4:b0:5d:17:9d:8b:23:f9:cb:ce:ee:00:
8c:09:f8:94:48:63:88:f0:ea:d5:6c:42:8a:6e:22:
fb:7c:53:40:0d:1a:61:ef:89:de:0e:82:73:2b:6c:
81:bf:13:8d:12:a1:a5:da:da:57:ac:71:d4:b1:fc:
b7:48:ee:52:fa:1b:86:0c:3f:71:55:1d:52:3d:5b:
cf:f3:bb:14:a7:8a:89:2a:f2:06:b7:d1:b2:7a:06:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:23:BE:2A:22:75:E1:65:38:ED:E5:12:6D:F1:60:E4:EF:52:59
X509v3 Authority Key Identifier:
keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:24:20:b7:fb:b4:6d:c9:3c:51:46:85:fe:62:c2:da:da:d9:
98:e0:2d:95:de:5a:05:c0:3f:43:b9:b0:bf:fe:d0:52:72:5f:
50:a3:78:44:c2:55:47:05:b2:64:c3:72:b2:a1:7d:2d:50:44:
fe:f3:89:ca:9f:fe:51:8c:2e:46:5b:9d:5d:6f:e4:14:86:ae:
50:c4:73:9e:c9:fa:cd:f7:91:e8:99:4c:88:94:d5:f8:1c:c7:
e8:1e:36:3c:96:9f:9e:98:e8:a7:40:1c:d4:ca:66:67:d9:ad:
1c:cd:59:30:b0:fa:b4:cb:f6:51:48:04:3f:e1:c6:81:e2:c6:
68:c3:04:64:6d:8e:e2:9d:d5:e8:c7:44:cf:fb:90:a4:19:1e:
c9:dd:17:84:da:9e:4b:9b:b7:75:8c:82:52:4f:95:d5:26:19:
0e:59:e6:d2:c7:ce:c7:1f:1c:65:d2:8e:93:6c:0c:3c:a8:b6:
8c:b4:72:66:c1:51:17:30:42:c0:14:c5:b3:78:79:12:5a:fe:
12:e9:db:62:d4:53:4f:16:6a:00:48:85:1c:fa:71:e0:92:cd:
74:a4:e1:df:a2:88:54:7d:c0:94:a0:17:95:06:07:68:ab:45:
86:e6:ba:c6:61:bc:54:66:e3:8b:40:45:99:86:60:22:1e:f6:
54:84:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:03:52 2026 by rpki-client