
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
File: h6VQYbdfHcLFxbuH0omOgzB9hw8.mft (raw, json)
Hash identifier: VvtXaKz1Y5NvXy+CbxyNpvN9OD+yEnMiE1JG5kTSLis=
Subject key identifier: 73:7A:56:B7:F0:EE:A6:6F:2A:EA:8B:19:8C:A1:1B:54:3E:61:E5:37
Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F
Certificate issuer: /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
Certificate serial: 0852
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
Manifest number: 083F
Signing time: Tue 22 Sep 2026 20:52:10 +0000
Manifest this update: Tue 22 Sep 2026 20:52:09 +0000
Manifest next update: Tue 29 Sep 2026 20:52:09 +0000
Files and hashes: 1: h6VQYbdfHcLFxbuH0omOgzB9hw8.crl (hash: 3s94jnJ6BVpEzEnAYV45WbqkZ/GjxuPvPguNZScJFL0=)
2: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (hash: X+PbAB6ZURG0zNwSn5Uz9F3saTJla2qu7ck7HHbuAXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl
rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130 (0x852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
Validity
Not Before: Sep 22 20:52:09 2026 GMT
Not After : Sep 29 20:52:09 2026 GMT
Subject: CN=6ab2ea7a-b5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:af:1d:ab:4e:fc:22:5b:fd:2d:ff:6f:cb:
8c:bd:90:a2:08:d3:6b:49:f5:24:9a:ac:74:20:f9:
a1:f7:3a:30:9a:a1:f8:8a:8a:65:76:48:79:50:6e:
16:45:ec:0c:87:fa:6c:ee:7a:96:8b:14:c1:d7:e0:
47:44:c0:c3:14:61:d8:2e:19:2c:2c:2f:d0:eb:a6:
83:fa:68:0d:5e:97:a9:e7:6d:9f:fe:48:d4:29:8d:
e2:b9:3e:61:19:66:25:88:02:ac:38:bc:4d:14:3d:
8c:4b:6f:a2:bc:76:1e:8b:c5:e8:46:c3:cd:68:cb:
ea:73:b8:7a:d9:00:4a:cc:9b:f0:94:ef:c2:90:c0:
57:d5:e7:da:47:7b:1f:5b:40:dc:0c:ed:e5:c9:2a:
a8:61:ad:f3:64:18:2c:d7:2e:30:e2:a4:a7:3c:97:
7a:2c:84:67:33:50:9d:17:21:fc:b9:75:bc:ee:c4:
7b:ac:a2:a5:23:71:9d:81:29:fc:ef:b5:06:b0:b3:
72:30:0d:04:b8:58:f7:bc:b1:a0:1f:35:cb:8e:30:
86:48:cf:6e:1c:e4:96:d0:2c:d2:1a:bc:ea:cb:2e:
00:b7:98:ba:7a:d9:95:af:7d:28:e2:64:15:6f:0d:
90:75:63:d2:bc:91:94:ff:85:82:6b:79:36:5a:18:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:56:B7:F0:EE:A6:6F:2A:EA:8B:19:8C:A1:1B:54:3E:61:E5:37
X509v3 Authority Key Identifier:
keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5d:cc:1c:fa:d3:af:db:83:3a:ad:a6:17:05:75:e9:5e:a9:
fd:d6:ce:c5:c0:f0:e1:4a:0b:9a:46:bc:eb:b8:07:a5:65:f9:
2c:dc:21:d3:f5:84:e6:6a:29:1d:81:33:64:b5:33:6e:7a:dc:
a6:bc:66:87:55:71:20:29:8d:05:4f:10:a1:8a:b0:c2:9c:0b:
d3:a2:3b:56:18:00:52:08:95:08:e6:d2:ba:58:47:df:dd:ce:
c9:0a:d4:53:e0:41:10:8e:67:05:e1:46:e9:d3:50:7f:7c:83:
1c:1d:f9:02:c2:ce:56:be:4f:e1:9a:23:cb:50:24:02:d7:45:
cc:6f:d5:51:ad:5d:68:d8:e9:4e:bc:07:45:c8:2d:03:ec:71:
9b:eb:26:58:c0:54:3a:03:a9:e0:90:fd:e9:c7:05:7e:9f:a9:
e6:f1:77:ae:fc:f0:bc:60:65:4b:b1:53:44:b0:01:5d:57:18:
a7:ad:d0:49:bb:2c:a3:b7:4b:91:1d:af:f0:e9:ab:8e:c8:d4:
6e:0f:e7:7b:e6:c0:21:bb:c9:be:c4:fb:51:09:dc:63:03:ad:
0d:a3:68:c7:ca:06:0a:8f:68:eb:0d:18:c1:76:34:dc:fa:89:
00:d8:08:c6:69:af:5e:e2:0d:ef:bb:74:a2:4a:0e:85:2e:10:
81:dd:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:32:03 2026 by rpki-client