
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier: 9oNik0DUzIAAnefXbnP3abTBs4FJRI39oTdBEfoMufk=
Subject key identifier: 36:90:54:D5:75:4C:83:78:8B:A0:D7:28:C6:7E:9D:E2:06:EE:FC:28
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial: 215F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number: 2136
Signing time: Wed 22 Jul 2026 16:00:28 +0000
Manifest this update: Wed 22 Jul 2026 16:00:28 +0000
Manifest next update: Wed 29 Jul 2026 16:00:28 +0000
Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: oD8rSUl5p/VJXfiau/j/acBtZecmZdLFAMoTsVMMY9g=)
2: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
3: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8543 (0x215f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Validity
Not Before: Jul 22 16:00:28 2026 GMT
Not After : Jul 29 16:00:28 2026 GMT
Subject: CN=6a60e91c-0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:03:8d:be:d9:4f:9f:47:fe:cf:63:81:fd:
f6:c0:5a:e8:bd:24:ba:90:da:d6:25:71:4e:d6:06:
dc:57:16:64:17:fa:c9:aa:e5:86:fa:2d:83:67:0d:
2b:62:a6:f5:f6:85:e8:71:d9:8f:6d:32:54:c4:a3:
0b:d4:33:95:07:2a:02:ea:35:28:70:ff:ac:4d:b0:
f3:80:00:22:ee:45:41:2c:1b:59:aa:ea:1a:8b:c8:
32:e3:47:fb:9b:b2:68:66:63:74:70:76:f0:2e:6e:
a7:ba:7c:18:99:48:31:63:e5:b2:a9:cb:46:fd:e9:
a6:e4:48:22:a4:84:a7:a2:b1:76:9c:40:a4:87:59:
5e:58:62:82:9e:20:d8:e2:7f:24:e6:c0:fb:51:7b:
19:e8:79:ef:7e:97:af:c9:b0:38:4f:de:ea:0c:fc:
2d:85:82:df:12:41:5e:a1:e5:11:e3:65:dc:8c:9f:
ef:7c:c1:dd:cd:f5:be:8e:56:02:01:04:a2:78:f0:
4d:d5:c4:66:49:be:f4:c2:54:94:75:62:47:13:c7:
dd:20:ea:0f:18:3b:34:07:24:40:05:30:50:36:c2:
f4:43:ff:80:3d:7c:64:34:af:df:ac:eb:4a:06:60:
e2:6e:82:99:6c:0a:bb:0a:92:f6:10:ce:e4:ed:13:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:90:54:D5:75:4C:83:78:8B:A0:D7:28:C6:7E:9D:E2:06:EE:FC:28
X509v3 Authority Key Identifier:
keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d7:d1:a7:10:1b:4d:f1:fc:d4:de:ca:47:69:df:a5:e0:09:
52:56:28:d5:be:db:ef:7f:a4:e6:9b:8a:ec:97:dc:91:31:a1:
74:cd:6f:f7:c6:c6:8b:e4:0a:6a:60:e4:72:64:81:9c:87:2d:
2b:7c:4c:03:77:22:87:03:9f:60:ee:32:39:a4:71:35:88:c0:
b0:6b:f6:05:c8:8b:e7:da:8e:3b:d6:cf:c0:a4:fd:5f:a7:e0:
10:d1:f3:94:81:b2:31:f7:54:3e:ca:d4:26:4a:ea:ea:56:74:
a5:48:ed:80:a3:fe:e9:03:61:9c:c5:ed:da:03:90:50:90:84:
3d:7d:d1:29:80:e6:90:03:c9:e0:0a:4f:5f:ce:95:b7:73:95:
51:0d:23:73:fb:f9:69:ce:42:52:d4:3b:ac:30:9a:07:e4:10:
30:c7:16:6f:19:15:89:f5:87:43:38:65:c8:25:2b:7d:73:1d:
81:bb:e2:bc:dd:69:77:cf:92:b6:1f:bc:16:ee:63:1b:fb:b6:
15:dd:bc:87:94:6c:87:b4:e6:54:bd:13:4f:78:53:81:5c:73:
92:c1:70:e3:d8:b5:e5:d9:e9:bf:4d:b0:87:b1:e4:b3:d1:e4:
33:7d:ed:8c:04:fa:21:17:97:f1:a6:a7:9b:7d:a2:08:df:75:
16:f8:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:22 2026 by rpki-client