
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier: G7gKwzonLmZ+64HkN3CvWsLT/zCb8VSpJBte7cazCvU=
Subject key identifier: 2E:90:93:EB:D6:3D:53:5B:09:2F:05:1C:71:59:33:15:90:D5:1E:4D
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0980
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number: 090B
Signing time: Tue 12 May 2026 20:34:36 +0000
Manifest this update: Tue 12 May 2026 20:34:35 +0000
Manifest next update: Tue 19 May 2026 20:34:35 +0000
Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: ruGGEOhSlLiiub/o7yEu2L/IbhwaipdD/btSxS3MGKo=)
2: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: fcYY8JCJfGpn6U42SxS4kdU4DDiWQRVoqOsbnKMAPqQ=)
3: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: LH5rCnW4AlRTA7oXpdl4war9anlv1eQFsMx7zEz8aDs=)
4: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: ldTfVlgZx0sqAfRFwUDVu08wZit17CSgV0jvtS+encM=)
5: 61C915302DA611F1B2990DECA2833773.roa (hash: KaomdsVrAqV74tigFGzbofL46Dx0oPl1SoGoDWsWCag=)
6: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: VbE9wtNoONHpVqfDihjQrObKeQw1ADJiCzljyCKB/mQ=)
7: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: y6W9Xq4d8zRGRJelWYQQv1r/i5L4bEaH/ibWNQgVyoU=)
8: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: HAMfTfZzKgQr1S5Al/mmH4wqYSjJ80ubOBRue4CFJYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2432 (0x980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: May 12 20:34:35 2026 GMT
Not After : May 19 20:34:35 2026 GMT
Subject: CN=6a038edb-6534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:79:43:c5:97:33:a3:89:71:8a:e3:a7:e6:
19:62:fe:62:11:e8:6b:7f:b1:d9:42:53:98:c4:bb:
a7:93:9b:f5:26:c9:b2:f9:46:05:bd:2d:9d:e8:2b:
fb:39:4c:79:bd:48:8c:5f:9d:11:70:91:ca:4e:44:
29:fe:fb:14:96:cf:03:33:46:b7:f5:3c:a2:c5:26:
b7:f6:dd:90:f3:1a:c6:1d:8c:68:41:44:f8:70:3f:
db:49:ac:96:06:5e:04:68:2c:7e:82:64:f1:97:69:
bb:5f:ff:80:cd:13:18:7e:80:bc:05:8a:18:4a:43:
4f:39:1c:44:b6:4a:4a:e5:71:8c:08:59:a6:b2:c1:
9f:53:e7:d4:be:16:8e:84:23:f8:fb:9c:43:8f:bb:
10:6c:19:de:c4:36:6d:ae:a2:41:14:68:57:57:72:
a5:1f:9a:7e:84:86:e4:79:95:31:9c:21:98:16:d0:
73:81:df:76:ac:30:6f:b5:8d:7a:f5:bf:56:01:46:
fe:9b:ef:43:04:8c:d3:e7:bb:ce:a3:73:f1:5f:15:
18:aa:ae:ff:8a:bd:39:ef:63:85:95:06:4a:f1:de:
b7:dd:9b:f6:27:00:e1:ef:a3:45:a7:83:46:35:2e:
66:bb:43:08:3c:e2:af:2d:03:e9:0d:15:01:d7:3d:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:93:EB:D6:3D:53:5B:09:2F:05:1C:71:59:33:15:90:D5:1E:4D
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e5:48:69:23:e9:f9:56:ee:fe:0a:6d:95:aa:4e:54:0a:d5:
dc:27:c3:6f:40:e6:15:1c:f9:9c:bf:db:5d:5f:30:1d:c1:e0:
fc:9b:5c:97:50:88:24:c7:d8:b1:60:50:74:bb:c6:d8:79:90:
ce:89:d4:27:98:3f:a4:b1:76:e9:11:10:ff:35:48:7c:5d:f4:
94:ea:62:fc:d0:f9:f6:7e:5c:ae:ff:ec:7e:4e:8f:fa:b6:ef:
6d:53:28:f7:88:1f:1f:e6:ce:9f:08:f5:83:a6:91:84:5c:ad:
c8:36:d0:19:fe:56:6f:9f:1a:87:97:a6:2b:87:65:ad:56:a0:
79:6f:d5:d4:39:03:b9:a1:c7:7f:a3:e2:dc:85:24:b6:ed:a6:
d7:90:c3:4e:78:2b:f0:1a:25:2d:11:20:df:6c:08:d6:b9:1a:
27:cb:e2:c3:ff:45:bc:a1:5c:22:08:3a:7c:fb:c9:3d:ca:29:
0c:43:cc:72:f8:dc:53:4c:b5:95:21:5a:af:ff:76:c5:25:77:
08:ec:88:e9:a1:ff:d6:79:62:73:53:0c:95:48:f0:4b:cc:df:
a6:9a:0c:67:58:8c:69:bb:6f:0d:0b:b3:4e:2c:0c:d1:12:ac:
d8:fa:c8:a7:b9:98:cc:9f:19:0f:f9:f6:ea:29:44:23:7a:67:
be:cf:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:02 2026 by rpki-client