
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier: FPC2VWMl3HmjVFspvwYko/SJGbOphSoWz8znr67yNXs=
Subject key identifier: 7F:9F:A6:28:69:5B:D0:F9:D6:7A:38:92:87:73:25:7C:AD:E6:33:04
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial: 1D41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number: 1D24
Signing time: Thu 08 Oct 2026 16:10:30 +0000
Manifest this update: Thu 08 Oct 2026 16:10:30 +0000
Manifest next update: Thu 15 Oct 2026 16:10:30 +0000
Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: ksvWfp3urPYnmR5n4v15t4DUFmN/wDN6QRtNWULmj5s=)
2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: yeTkxTdBgNi4XQcUnG+Z1pVZk+XziWDEhTeQDqhiWOs=)
3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: cZ+rsKEwY27r1nNBdSw0EFhAO0NUVYDXLIIfTM0BpuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7489 (0x1d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Validity
Not Before: Oct 8 16:10:30 2026 GMT
Not After : Oct 15 16:10:30 2026 GMT
Subject: CN=6ac7c076-1519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:e0:4c:a9:4b:5a:bd:7f:d7:34:a7:e8:07:
54:89:12:ba:cd:0c:90:01:ec:73:6a:0a:64:7a:12:
9b:9c:12:0c:37:c5:95:9d:c5:62:6f:4a:52:75:ce:
69:65:f4:52:34:da:2c:8b:f4:61:dd:7e:51:8c:94:
f6:90:8d:f6:43:04:05:03:7d:a5:79:9e:3e:b6:ae:
ba:cb:3e:b9:f2:bb:9d:80:f3:be:43:7e:2c:ec:5c:
0d:c4:74:91:01:a5:bf:8a:7d:8f:5e:e2:5e:42:4e:
45:ca:68:90:70:0f:17:a3:e5:e8:17:d1:ad:6d:ba:
50:7e:6c:5c:53:19:94:cc:f2:dc:66:84:88:89:3b:
15:4a:79:ff:cc:21:cb:77:16:52:fb:f2:7b:06:f8:
40:80:db:96:5c:0a:7a:51:a3:38:64:1e:18:f8:35:
65:06:79:5f:06:dd:1b:30:aa:e9:41:dd:41:28:ec:
3c:38:40:32:f1:91:10:1c:8d:0f:55:c2:45:5f:e5:
1d:40:9e:37:af:7f:4c:9e:30:7f:f2:cd:96:06:28:
16:7c:9d:d3:d8:e1:c1:1d:47:0c:61:27:06:77:cb:
99:c3:d8:85:09:43:a0:eb:b5:34:b9:41:42:84:4a:
3e:35:c3:60:8d:ac:35:71:c4:a9:bf:b5:90:0b:9e:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:A6:28:69:5B:D0:F9:D6:7A:38:92:87:73:25:7C:AD:E6:33:04
X509v3 Authority Key Identifier:
keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8f:fe:9c:78:83:80:a3:f4:09:62:36:4a:d3:23:32:b9:7b:
1f:a8:1e:8d:83:a5:75:5a:54:2e:8d:11:dc:c7:14:25:3d:b2:
e1:77:ff:70:3b:2e:18:42:09:79:96:36:7f:9f:be:47:d3:d5:
cf:26:46:84:35:c9:2d:90:cf:28:93:b0:9e:61:e3:ca:26:90:
67:39:cf:83:c7:e9:b1:a3:03:f4:45:e8:51:d7:d4:84:3d:d0:
22:d5:1c:9b:bf:5e:ed:ea:f0:12:33:45:8d:9f:97:79:be:32:
49:8e:41:c8:b7:0e:66:1a:65:75:f9:17:a4:c3:f7:2b:54:4b:
b8:79:35:db:d8:ef:bd:55:14:35:80:10:8d:45:7d:a0:33:69:
a2:c1:ab:00:77:bc:1c:7b:1b:51:a0:fc:7e:df:87:49:d2:35:
1e:65:8b:d9:2f:b5:24:bc:c8:e7:ae:43:bf:82:b9:b6:3d:ba:
90:d1:82:02:a0:0f:22:fc:2d:e7:67:b1:5c:49:ae:e9:e8:80:
3b:8a:a7:b5:fe:ab:6b:73:a6:19:f0:f8:bb:8e:11:c2:38:ee:
e7:c4:0b:54:a8:0c:de:ff:24:6f:b2:0d:75:50:f7:e8:9c:b7:
4a:02:31:03:34:d3:59:f3:9c:33:f7:88:4f:7e:9b:e8:2e:7b:
1a:c6:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:45:00 2026 by rpki-client