
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
File: 6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json)
Hash identifier: X+RxSta6F4UGQpOVL8+sOMRXv+xCKs7sRXE4QUHYutQ=
Subject key identifier: 5B:5B:94:0C:54:80:4C:BB:65:FA:F2:E8:03:6E:CF:2F:EE:25:88:EE
Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
Manifest number: 0210
Signing time: Wed 23 Sep 2026 02:54:22 +0000
Manifest this update: Wed 23 Sep 2026 02:54:22 +0000
Manifest next update: Wed 30 Sep 2026 02:54:22 +0000
Files and hashes: 1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: 93qtkUFkbC4ZpMbeZZC8ZxJsOd+4RXvcOGCiE4Ibey8=)
2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: oir1KO7itYRLncdx+k4nMQfCDJqoJ0sGUL8dcRF7ZpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Validity
Not Before: Sep 23 02:54:22 2026 GMT
Not After : Sep 30 02:54:22 2026 GMT
Subject: CN=6ab33f5e-7b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:04:82:a6:00:05:3e:9b:15:7b:da:e8:3f:
c4:a3:d4:ec:2c:9e:6f:df:25:7a:90:cf:1d:43:99:
64:1f:13:a7:36:62:95:c8:ef:50:f2:88:a4:6b:d3:
31:5c:a9:39:20:6d:72:71:3f:5f:d7:b9:ae:ce:f1:
8e:14:f0:04:2c:a5:fc:14:c6:aa:f4:6e:47:f1:8e:
16:28:c7:b4:e4:e3:98:ee:d3:d7:6b:54:8e:42:55:
b1:db:f2:9f:6f:f3:1f:21:4e:d6:d5:23:e7:63:07:
d5:b5:e3:0f:92:88:21:22:0c:2e:29:9d:43:c2:eb:
ef:9b:f1:8d:b1:91:e9:e6:3d:30:14:67:c7:f1:7c:
10:22:47:ab:63:dc:75:f9:40:60:bb:c2:f3:89:b1:
c2:22:38:be:00:8f:84:18:ee:8d:1d:22:22:53:35:
87:f1:b6:fb:a8:c2:9e:9e:75:19:d9:47:a2:32:bb:
cd:36:25:28:d7:05:79:10:af:7d:9f:9b:68:ce:51:
af:29:82:a6:39:f1:d5:bd:d5:19:b8:30:f0:59:71:
04:e3:fd:5e:ee:77:9d:69:88:b0:6c:ba:75:43:a0:
53:b0:d5:b8:1d:29:3e:38:e0:32:92:ec:84:f8:cf:
ce:3a:47:7c:6f:44:8f:2e:d8:0b:6c:fb:f9:d2:3b:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:94:0C:54:80:4C:BB:65:FA:F2:E8:03:6E:CF:2F:EE:25:88:EE
X509v3 Authority Key Identifier:
keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:57:de:f9:fb:3a:3c:7b:bd:f2:d0:9c:51:a6:9d:30:67:26:
73:a7:ae:88:90:d3:46:1e:e0:dd:49:ac:a9:f3:4a:77:98:ac:
39:db:4c:0e:63:86:e4:2c:37:91:b1:eb:95:dc:bb:05:6a:4c:
bb:77:38:53:ea:7b:a5:c9:22:b3:e8:f9:ab:fe:19:01:da:85:
95:24:00:47:a8:e6:07:8d:d6:cb:a5:df:c5:34:b9:37:0e:4d:
b3:4d:7b:91:7a:f6:16:6c:e8:51:4a:63:54:3c:50:2a:3b:43:
d1:d1:cf:e9:f0:9d:41:4f:60:94:2d:74:56:11:26:9d:e1:e1:
9b:c4:1a:3b:57:82:a8:94:b2:9b:b9:35:81:b6:bf:04:37:16:
f2:48:1f:94:b3:00:b4:84:29:a2:b5:92:9e:c1:31:46:87:0f:
e0:c2:93:3a:a0:c8:78:61:40:8a:9e:d5:ac:9a:bb:c4:8c:b0:
46:56:6a:4d:35:35:ed:3a:d3:4a:40:bd:26:8e:5c:b8:a0:a5:
a9:09:c2:2f:51:6a:91:d6:cf:45:e8:16:9f:09:8b:e2:3b:db:
1b:2e:b7:de:62:c8:fc:18:91:cd:a3:40:8b:21:b3:a8:33:14:
54:1f:b2:e8:87:2e:3f:57:23:e7:54:6d:14:6c:05:cd:e5:f4:
fa:47:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:04:44 2026 by rpki-client