
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier: nLSCzYrFUlTt/GQI3HX6Ih7ykMM0iLkXktoBla27z3I=
Subject key identifier: 26:FA:D6:16:61:79:7E:90:A6:28:F6:03:52:78:63:0F:34:33:73:F8
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number: 9F
Signing time: Wed 23 Sep 2026 07:00:41 +0000
Manifest this update: Wed 23 Sep 2026 07:00:40 +0000
Manifest next update: Wed 30 Sep 2026 07:00:40 +0000
Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: EaLEX9XeD3AM8FB8YzAfkF6yKEg0gW9GxmB1QlGdy7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Validity
Not Before: Sep 23 07:00:40 2026 GMT
Not After : Sep 30 07:00:40 2026 GMT
Subject: CN=6ab37918-97f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:3e:49:38:bd:57:ae:80:f2:f0:91:c9:14:
1d:70:fc:89:4a:9b:c2:7e:86:9f:d6:2e:ea:b5:d9:
1c:18:24:8b:82:ba:a4:86:1e:a6:3d:47:bd:09:07:
8a:71:5a:9d:64:d0:32:a3:a5:e5:8f:7f:9e:05:96:
a0:37:1e:2d:4a:1f:b1:8c:59:be:33:dd:dc:09:04:
08:a0:25:81:ac:50:c2:93:bb:0a:59:b2:8a:a4:91:
41:c4:a2:82:a7:4f:5c:94:df:2b:93:c0:21:c6:82:
e7:7f:a1:6b:4a:f9:e6:26:74:ec:6c:95:5b:b9:8d:
37:70:e6:68:19:68:8f:ff:b4:c8:b1:fc:7d:54:83:
92:f3:86:f5:86:6c:fa:68:47:d8:e2:56:ca:14:ef:
5a:6c:08:33:22:f4:74:15:ad:bd:38:dc:7e:d4:d7:
33:bc:30:b2:a2:0f:5f:73:a4:8e:ef:ec:0c:c4:88:
02:98:11:ee:db:03:b7:7b:b5:3e:2f:21:f0:30:3c:
b1:25:1e:6e:ac:5a:15:0f:a9:87:e4:33:7e:86:7d:
d7:9d:50:4a:99:ca:cb:9e:af:86:46:88:97:fc:9a:
bc:c1:57:34:9e:d7:ef:fb:25:43:13:97:93:53:cd:
20:ed:13:8d:58:9b:91:36:0a:be:2e:fc:68:b2:f2:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:D6:16:61:79:7E:90:A6:28:F6:03:52:78:63:0F:34:33:73:F8
X509v3 Authority Key Identifier:
keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:83:ee:2a:3b:4c:88:18:98:b3:58:7d:c6:15:de:5e:0c:56:
f4:fb:b0:8f:05:74:76:04:73:fa:61:00:8b:ef:af:b9:ce:a8:
d9:f9:b9:e9:b4:aa:98:67:c6:32:d7:a7:38:80:de:5f:71:5e:
62:c0:d8:a3:ca:6e:ab:8f:2d:ec:39:c1:6f:fe:28:49:62:6b:
6b:93:12:ba:68:82:5d:36:4a:44:51:f5:21:36:57:ac:16:6a:
b4:97:55:cc:bb:bf:7b:8e:73:82:22:8c:83:bb:ef:77:b0:d9:
ab:06:6a:d8:86:d4:12:b6:6b:ca:d1:0f:38:dc:07:b7:28:23:
a4:dc:78:5e:6e:83:34:2a:01:82:ad:5b:dc:4f:d7:72:42:e5:
b1:ce:13:11:7b:a3:68:f8:8a:d9:9c:da:23:f3:63:b3:be:69:
d1:43:e5:4d:61:6e:9d:0a:22:92:f9:87:6b:f4:75:27:a5:cd:
75:2f:25:ec:6c:7a:b6:9b:0d:6b:f0:c9:86:2f:5d:7f:62:52:
a5:a1:50:ef:31:e9:38:02:86:63:4d:3a:5e:74:f7:01:e8:c6:
80:8e:33:b7:31:a7:4e:e4:d0:26:15:b7:55:af:1d:bd:6c:f7:
13:a1:1f:ae:ca:a3:04:4d:68:fa:a2:1b:4f:da:b5:21:f9:56:
a9:2d:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:54:28 2026 by rpki-client