
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
File: eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft (raw, json)
Hash identifier: PyjN8bZ3rvWAy7mzVk41PRYyobP6BzIpRGQ3cww3UR0=
Subject key identifier: 87:F6:4C:F4:24:F6:88:33:C7:D0:49:94:22:20:59:E5:CB:22:F9:67
Authority key identifier: 78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38
Certificate issuer: /CN=A91BCB09/serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
Manifest number: 9C
Signing time: Sun 15 Nov 2026 07:34:12 +0000
Manifest this update: Sun 15 Nov 2026 07:34:11 +0000
Manifest next update: Sun 22 Nov 2026 07:34:11 +0000
Files and hashes: 1: eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl (hash: KHoz4HD6jTtnU0x6MFsGHBhx40IJEyIzKb089oDdLeQ=)
2: 5BC28CFEF50011F09A5618CE516F56BC.roa (hash: tFyYjAt8LxXxOLUQN63OQgyZ+oQbtNLtHD7NVqig9oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl
rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 07:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB09, serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
Validity
Not Before: Nov 15 07:34:11 2026 GMT
Not After : Nov 22 07:34:11 2026 GMT
Subject: CN=6af96073-1862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:f7:8f:54:29:de:ff:40:ad:73:75:47:50:
0f:6b:b0:65:dd:d9:02:d9:de:95:5f:3d:fb:de:20:
b2:f9:58:c7:50:44:73:14:83:48:a6:95:31:df:2c:
fd:d1:16:2f:30:99:d9:bf:3c:79:0f:ff:aa:26:6e:
ea:de:41:d7:d4:ec:31:7a:d2:d7:52:e5:fe:65:ae:
8e:1e:60:b8:bb:2f:8c:d4:76:f5:29:8b:67:e2:79:
a7:77:c8:22:84:e6:99:78:5f:04:07:7c:2a:39:cc:
64:e4:e8:aa:b3:ef:cf:93:bd:20:5e:05:a5:ec:50:
5d:07:ac:a5:2c:f0:9e:b1:6a:82:9d:c0:4b:7a:a2:
b3:5c:9e:27:5a:8c:f0:bc:e7:af:85:67:f0:46:80:
11:87:08:b3:63:b8:7f:85:f4:91:bd:3e:07:5f:34:
ad:45:69:82:f9:86:a6:9d:8e:ef:dd:49:65:c9:45:
4d:cc:29:57:be:16:96:61:81:df:40:50:62:a8:9d:
92:04:81:23:c3:61:c4:f3:10:77:24:e4:62:e9:79:
87:be:a9:48:5d:8e:0f:46:7c:bb:f5:8f:bb:05:a0:
f8:b5:20:4b:48:47:3f:42:6e:35:c1:b6:5b:de:eb:
a0:6b:34:5a:c8:3b:8f:d2:3c:cb:f4:7f:a6:f1:e4:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:4C:F4:24:F6:88:33:C7:D0:49:94:22:20:59:E5:CB:22:F9:67
X509v3 Authority Key Identifier:
keyid:78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:a8:69:14:b5:da:e1:f2:a9:ca:37:c7:ad:ab:3d:47:32:
4a:dc:cc:1e:49:45:9f:64:b6:b0:b7:27:91:c8:6c:7b:87:ef:
dd:7b:b9:e3:c9:b9:7c:a0:8e:e0:d7:4e:a5:36:5f:60:d9:a0:
ec:e3:81:29:ef:35:05:c4:f7:42:46:5a:6b:5c:ba:ec:6c:34:
15:91:5e:4f:5b:05:6c:ce:e5:d0:b6:1b:5a:81:c5:cb:2e:16:
41:df:ce:d8:c5:d1:55:79:c1:e0:fe:1f:8e:53:db:65:18:20:
b6:19:b2:f1:5a:cb:cf:51:52:12:fb:fe:0f:8c:20:07:a0:a6:
a5:46:31:84:44:d2:68:c3:bf:31:04:0e:5d:95:9e:b0:60:df:
b1:13:12:c4:b7:0f:46:b4:98:08:36:45:f2:e2:c7:31:88:5b:
28:e7:2a:1a:ef:29:a2:75:e9:70:e0:83:d7:06:a6:79:0e:9f:
22:0b:14:7a:98:c4:c0:21:d4:ed:bc:87:1d:71:2a:34:7b:c8:
28:db:5f:4c:a2:4e:fd:82:1c:31:45:bd:2a:d9:b8:9a:18:81:
3b:b8:20:e4:8f:48:7f:ea:b8:e3:02:bf:12:35:60:8c:a5:d3:
ee:a9:ae:fa:c9:b9:6a:f3:03:b2:30:b4:25:f7:81:79:19:a6:
01:36:a0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:13:16 2026 by rpki-client