
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier: iRYTGKln3TZKPg6gnVcEBTTwCAlZ5XHxv7ZnYlQ1Qjo=
Subject key identifier: 35:F2:62:43:A9:38:6C:A6:C2:C4:4A:C0:DB:67:B6:7D:9A:C6:BD:51
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 09CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number: 0951
Signing time: Tue 22 Sep 2026 20:09:27 +0000
Manifest this update: Tue 22 Sep 2026 20:09:27 +0000
Manifest next update: Tue 29 Sep 2026 20:09:27 +0000
Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: 5wZBI/1Xhlaz2A+xIaZ9ipcgN25Az4mlQiHc/9bXa5I=)
2: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: svUZ22ov0LGhdkOirUjZHVX1C9R02IiJPB5f5iRM5Vo=)
3: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: IU7XJLBx/7Cq7nKB96mKlalgw6vu67yQpRJppd671eI=)
4: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: 9p+OFQ+d4WBrwtx90ETa5XmtgfKZaPpWZlEmPYxaevc=)
5: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: cedlDftPuKaqtkiO4WJKQnBMmmp4geGQax1GihSXKGY=)
6: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: P/qPAA9R1aPA+pNVh5gikt8ff+R4F9Lpwffic5w1IyU=)
7: 61C915302DA611F1B2990DECA2833773.roa (hash: D7galkrtpav8bTT4oJns/u/iJdiuCZM83sUfpFRjOP8=)
8: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: lsug8v+7JlFguXEnomAVvNqimdYbC75zokeMlGf/cSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2509 (0x9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Sep 22 20:09:27 2026 GMT
Not After : Sep 29 20:09:27 2026 GMT
Subject: CN=6ab2e077-8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:a0:b7:0e:8f:d8:de:ae:62:cc:50:8b:2d:
88:3f:ee:15:de:5a:97:0e:76:62:d5:6c:29:8c:40:
5a:67:13:30:15:1d:a6:da:a9:e5:1c:0a:e9:ac:a1:
de:d3:fb:df:04:fa:0d:41:71:44:06:c4:00:48:57:
45:4c:b1:2a:94:71:40:96:0a:8f:28:f1:10:43:3d:
12:d9:1f:c6:e4:f0:6c:13:4b:a0:24:b4:50:63:14:
7b:e7:a7:fd:97:c5:51:64:ef:de:8e:b2:9c:20:38:
15:bc:7b:e0:d3:86:c0:12:ba:4b:dc:e5:b9:d6:0a:
c6:90:e4:b5:0f:95:72:17:19:cd:6d:2e:d1:f4:6d:
9b:4e:0b:6c:d3:63:20:b5:da:07:90:2f:b3:e9:9b:
48:ac:0c:8c:bc:af:f5:fb:67:91:ac:6f:8d:79:62:
2e:06:ff:19:d7:d4:f4:96:f7:21:5c:81:3a:82:14:
ed:d0:aa:e9:21:2e:73:d5:62:4e:59:84:10:85:d9:
cf:d7:66:70:88:28:4f:ed:04:a6:0c:68:87:a0:7b:
67:22:e1:e9:1d:e9:cb:64:61:bd:7b:f3:da:9b:77:
95:8e:44:ac:a8:d7:43:db:48:28:3b:70:92:17:a9:
77:bd:80:a7:4a:09:92:48:2d:eb:b3:fb:2f:59:73:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F2:62:43:A9:38:6C:A6:C2:C4:4A:C0:DB:67:B6:7D:9A:C6:BD:51
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:19:5d:93:ea:93:be:6e:58:73:e9:e4:66:13:77:3f:09:3d:
e0:01:8f:b6:7e:f8:ae:e6:d4:8e:c6:0c:5a:f9:66:67:53:34:
9a:d7:54:dc:b0:38:a1:f1:42:05:61:dd:c5:fc:4e:1c:a2:a7:
45:bf:3f:0f:60:7c:80:c6:f4:fe:ab:05:8b:5a:5e:12:d9:1d:
60:3c:6f:d8:95:2c:0e:9b:17:3e:8c:98:8b:ec:fe:e1:44:ec:
b4:6d:a1:fa:ee:e2:a3:89:12:6a:32:df:4d:6e:74:8a:06:9d:
e2:d8:6a:0a:22:4b:2d:b7:a3:ae:91:d3:c1:cc:33:b3:64:c0:
60:42:1a:7e:37:fa:af:8a:79:03:2e:4f:70:83:f2:d6:c9:15:
b9:3e:f0:9c:fd:00:92:7c:a1:ac:11:c3:e4:4d:94:3c:93:09:
d7:23:cd:c0:45:95:e4:d3:06:aa:77:10:f1:47:60:89:40:21:
ae:e9:96:50:08:d3:9d:89:c3:dd:0c:6a:f1:42:0e:2c:8d:45:
02:92:55:09:ff:a3:50:d4:c4:54:a3:58:85:56:7b:01:c8:a8:
3b:67:64:b2:35:5f:1e:9f:2f:65:b1:74:8b:66:c1:4b:4c:86:
e1:cf:f8:b1:86:aa:7e:f4:e8:ee:1c:4a:df:bc:0f:5c:74:16:
d9:c1:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:10:50 2026 by rpki-client