
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json)
Hash identifier: hZx+VcD+mGXAE0qHnPmz4arPnb0btVShiwS9+nHJzIQ=
Subject key identifier: 52:B3:B0:DB:93:2E:14:C4:C5:8A:1B:39:0E:CD:1D:2A:7B:DA:02:75
Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
Manifest number: E2
Signing time: Thu 23 Jul 2026 08:17:09 +0000
Manifest this update: Thu 23 Jul 2026 08:17:08 +0000
Manifest next update: Thu 30 Jul 2026 08:17:08 +0000
Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: ESfkFHXnYHJFoc1yDpuE+T1H+g+OSpPLhj4neyAy5Ho=)
2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: WvMUKRJ/MQUY3SrJVfsFmoPrpWN0YytCs2JWNp9BnBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Validity
Not Before: Jul 23 08:17:08 2026 GMT
Not After : Jul 30 08:17:08 2026 GMT
Subject: CN=6a61ce05-c4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:7b:97:03:5f:14:5d:dc:13:f7:eb:de:24:
10:7c:07:e4:2a:c6:bd:74:03:74:99:04:07:1b:68:
c4:33:95:33:ec:cc:1d:11:99:ae:c5:3d:b0:11:20:
06:ac:f6:83:ff:e4:5f:34:da:96:72:16:d7:d2:f1:
60:5e:a8:98:61:4f:dc:0a:91:26:0e:cf:91:0e:34:
21:67:9e:3c:b2:42:6e:a2:6a:1c:b8:b9:71:4b:cf:
5f:7a:76:7e:0e:2b:ba:7e:c6:7c:13:03:6f:aa:89:
bb:4b:09:ec:29:d9:6e:b9:c5:43:16:e4:f3:99:4b:
79:ad:09:49:bb:a2:80:eb:db:3e:87:05:43:8c:72:
3d:0b:f1:e7:c9:87:fc:cd:84:61:8d:06:e7:3f:de:
fa:eb:e7:f0:4d:38:82:25:01:bb:d3:d9:ed:43:68:
7f:db:9f:b9:6e:ff:82:78:35:37:52:5e:d7:dc:b4:
24:c4:c0:18:07:8a:d4:ca:71:9f:0e:9e:12:c7:30:
3b:97:40:c5:1e:44:8a:1b:a4:e8:83:f1:5d:bc:3c:
b8:6c:73:60:f1:69:d6:b5:68:1e:52:7b:cc:7e:ef:
43:c4:77:7a:a1:a3:3b:a9:ea:03:d5:f5:cb:37:10:
94:77:d6:16:f7:f7:d3:a1:1b:e5:b1:b5:c4:73:38:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:B0:DB:93:2E:14:C4:C5:8A:1B:39:0E:CD:1D:2A:7B:DA:02:75
X509v3 Authority Key Identifier:
keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fc:50:51:d5:7e:35:5d:67:27:2a:a3:33:4e:ea:85:84:db:
57:11:09:c1:c3:cd:05:ad:df:6d:83:7f:2b:e9:19:c6:e3:08:
81:09:6c:9c:c1:0a:e5:ed:d6:f4:56:88:b0:6b:fc:bb:8e:45:
ee:47:9a:50:fc:b9:4f:fe:90:5c:c6:e7:ae:d2:e2:64:83:b8:
02:4a:d1:d7:5e:05:31:35:c4:cb:95:a9:b3:84:13:c7:f9:64:
3b:87:6b:91:b2:b7:8e:ad:e4:33:e2:da:66:58:b0:85:1c:c7:
0e:29:8a:2e:c1:4b:25:c7:65:f7:6c:3c:89:d4:1b:5b:2b:84:
a1:b8:c6:73:e5:0a:a9:b0:cf:49:fc:42:cc:e7:ca:ac:d1:55:
e8:7b:f4:57:a7:64:13:0a:2b:77:5f:a3:bb:03:be:e9:f6:c8:
2d:c9:17:6f:b8:2e:a6:d3:e0:8e:92:4f:6c:ad:20:4c:8d:65:
bb:70:74:5c:7b:63:fa:4d:d3:64:cb:02:ac:c9:c3:ee:ca:d9:
0c:9e:f9:34:e0:cb:b2:b6:5c:46:c5:3b:a4:2f:af:e7:3b:ec:
8d:1e:97:e4:23:65:6b:73:ea:b2:47:84:c7:9f:d1:d5:16:a0:
2d:49:6a:4d:5c:5f:00:d8:6d:f7:d3:1a:a8:fc:e0:cf:24:6a:
1a:0c:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:12:06 2026 by rpki-client