
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
File: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft (raw, json)
Hash identifier: Q1Zp/6kdlndgP4lPw3AUGFJ6hbLTGSD7KWeye8hhMxQ=
Subject key identifier: 12:22:69:BF:D6:8C:0D:C1:2C:0D:79:B4:E3:A8:E5:03:C8:A1:58:02
Authority key identifier: E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09
Certificate issuer: /CN=A91BF2DB/serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
Manifest number: A2
Signing time: Fri 25 Sep 2026 07:19:47 +0000
Manifest this update: Fri 25 Sep 2026 07:19:46 +0000
Manifest next update: Fri 02 Oct 2026 07:19:46 +0000
Files and hashes: 1: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl (hash: XFTeolx6dixW/Y50R/XAupkYO1NIkmMchv1jNB7O5B0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl
rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2DB, serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509
Validity
Not Before: Sep 25 07:19:46 2026 GMT
Not After : Oct 2 07:19:46 2026 GMT
Subject: CN=6ab62093-fb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:4b:cd:eb:e9:f3:ac:8f:e7:73:6f:99:99:
bd:3b:17:05:d8:ee:89:29:79:89:7b:12:fd:09:04:
70:f9:03:c0:9f:10:b5:2c:dd:f4:b8:e7:29:ee:51:
cc:f7:c7:ac:c7:e0:20:27:78:59:47:ec:e1:97:7b:
45:ad:46:f4:c3:aa:77:39:3b:de:7d:e1:2d:59:1d:
ad:bc:4d:a9:51:62:bc:de:a4:03:59:80:b2:2b:b5:
42:1c:8f:c0:42:d7:27:e2:17:19:d1:4e:9a:e0:a4:
6a:45:5e:05:d1:21:81:f0:e8:45:6b:41:4b:fa:62:
58:26:75:f0:74:0b:df:92:39:87:18:b2:70:cf:49:
53:c8:e1:9a:af:b0:07:e8:8a:72:0a:a4:e3:03:63:
16:ca:9b:c0:b9:d9:04:8e:d7:64:b4:a9:b7:4d:76:
3c:8d:f8:4c:fc:8f:bb:a1:0c:ad:62:f6:3d:a5:63:
e6:02:ac:8a:05:aa:e3:57:05:ea:51:27:cd:77:f6:
a6:96:f8:d6:c9:f1:70:69:90:b8:fc:2a:fc:8c:a1:
9b:72:07:2d:f3:f1:ff:49:88:7b:1c:f3:d1:0b:94:
ba:5b:66:1b:eb:e5:1f:a3:38:01:01:6f:13:8d:f3:
f9:85:22:01:8e:f1:3b:25:73:32:24:db:87:d4:40:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:69:BF:D6:8C:0D:C1:2C:0D:79:B4:E3:A8:E5:03:C8:A1:58:02
X509v3 Authority Key Identifier:
keyid:E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:df:35:b3:31:96:65:07:31:b5:a0:62:53:2e:e8:dd:32:6f:
ae:5c:4b:72:dd:2c:1e:43:c6:4f:04:89:c4:48:da:d0:98:91:
c1:db:e7:fa:3d:ac:3e:ec:13:c4:c8:5b:8c:c2:75:06:28:56:
32:64:4e:99:b9:b8:52:29:d4:37:5d:fe:1a:9d:c4:1f:69:36:
cf:2b:08:10:56:fd:a6:e6:49:e9:5f:08:d2:f2:d6:5e:9f:5b:
ac:57:9b:e9:e4:e4:1f:d4:89:70:62:39:80:19:e2:38:29:7f:
83:f7:3f:46:d0:3c:47:d6:5a:23:0f:bc:da:2c:d8:c4:f2:d3:
1f:00:78:09:a6:01:5c:fb:2e:5e:03:4a:6b:f5:de:85:3d:fb:
ac:20:0c:17:f2:52:10:aa:37:fa:88:73:83:a2:52:75:57:67:
eb:3f:54:d3:5c:78:0f:92:96:26:9a:10:fc:22:2b:06:8b:08:
40:84:d1:61:d1:0f:68:3f:e8:76:65:9b:bf:53:03:14:52:a8:
a0:a7:f4:78:29:74:98:35:90:34:4a:e8:ab:71:7f:5e:63:d1:
de:60:b3:4c:a9:17:dd:23:40:d5:fc:a4:18:70:3d:e6:44:30:
a0:fd:4e:9c:37:c7:bc:f2:9a:66:01:96:fe:4a:dc:7b:82:fc:
19:a7:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:43 2026 by rpki-client