
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
File: --6lC0fY6xxw_ToK6VrRt2nYQ0o.mft (raw, json)
Hash identifier: Ifd71sXwi12zf9ILf9PwElblAaBd3hcq8WRx3ZVuljk=
Subject key identifier: D0:AF:2B:57:98:0C:A2:D9:DD:21:A8:D1:EA:27:71:C9:BB:4F:6A:10
Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
Certificate issuer: /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
Manifest number: 12
Signing time: Fri 17 Apr 2026 08:44:46 +0000
Manifest this update: Fri 17 Apr 2026 08:44:45 +0000
Manifest next update: Fri 24 Apr 2026 08:44:45 +0000
Files and hashes: 1: --6lC0fY6xxw_ToK6VrRt2nYQ0o.crl (hash: 1+aBkhwEWRDuLqRzHmmekOEa4HbsDEB6S0/yayT78WA=)
2: D6075FAE22A911F1B999B242B5833773.roa (hash: hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Validity
Not Before: Apr 17 08:44:45 2026 GMT
Not After : Apr 24 08:44:45 2026 GMT
Subject: CN=69e1f2fe-2e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:c0:0e:2a:e8:ff:ff:bb:e2:4d:a9:36:7e:
d9:ab:00:34:9d:d0:bd:57:03:b5:5c:24:ff:53:80:
6d:f1:63:3f:65:5d:b0:e1:d3:78:b0:31:05:1f:37:
31:e2:7c:e2:82:fc:01:f6:86:47:ad:bb:51:2c:7b:
47:bb:a0:ce:78:2f:43:b3:20:00:66:f4:1b:ff:6f:
34:8f:ef:fb:45:1e:c3:05:41:70:24:0b:36:20:97:
99:9e:bf:43:ca:5d:5e:6c:93:83:f3:24:f8:f5:99:
4f:02:a1:f4:1b:b9:02:90:fa:60:9a:fa:96:a9:5c:
ed:d5:d2:d4:df:b1:f7:2d:c3:ff:79:8d:30:19:1f:
2c:f1:10:2b:bb:aa:a0:a8:b8:56:51:5f:c2:49:cb:
c5:4d:89:af:14:63:eb:b0:a5:00:ee:ea:7b:72:77:
13:0c:29:0c:2d:27:af:b1:5e:36:a2:86:83:c5:64:
a4:d7:87:35:40:07:d0:0b:4e:69:4d:cd:9a:a0:77:
e4:20:38:ff:c0:13:30:26:36:70:95:0d:61:fa:81:
cf:89:b1:12:b3:20:d4:f8:aa:39:32:84:5c:2a:c5:
f3:9e:1b:c7:05:25:0d:db:9b:c0:7d:84:6a:61:85:
75:0f:55:09:43:42:31:eb:78:53:d8:82:80:16:47:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AF:2B:57:98:0C:A2:D9:DD:21:A8:D1:EA:27:71:C9:BB:4F:6A:10
X509v3 Authority Key Identifier:
keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e9:ac:72:1e:a6:eb:1b:cc:a9:4d:0b:73:19:be:38:31:f0:
a1:3e:55:40:6f:1e:f3:30:bd:74:1c:dd:43:5e:92:9f:a6:b7:
29:8d:83:cf:79:3f:08:cf:b4:e2:03:6c:48:9d:7f:2d:05:1c:
b8:7a:30:43:26:35:cf:b5:2b:04:61:25:78:ce:0b:a8:9b:88:
ab:bb:95:db:74:19:14:cc:16:47:63:a0:63:b5:4e:e0:9e:9f:
cf:66:b0:90:ca:4b:d7:ff:5f:24:93:d5:a8:60:c1:e1:5f:f9:
60:82:4e:3a:3c:12:c5:39:4e:cb:0e:e5:89:44:17:63:34:3b:
c9:69:6b:53:c3:37:38:d9:ca:bd:64:e4:f3:57:77:5c:b3:19:
31:d4:bb:01:94:9f:e5:12:5a:2b:31:8d:b1:84:95:61:8a:11:
7d:f8:c7:84:ac:68:78:49:05:be:7a:c1:4f:c6:8e:6f:10:e8:
f6:20:d0:bd:83:7f:d0:74:25:93:6d:79:e5:93:00:f4:32:ad:
d1:be:7b:90:cf:0f:c3:c8:79:cd:e4:09:97:ab:68:a3:ba:f4:
e1:b6:cc:ec:90:a4:6b:b2:90:25:32:00:18:33:82:8e:4a:d3:
67:09:2c:5f:61:f8:91:1e:d1:1d:00:d1:e8:b9:e4:35:83:c3:
2c:87:42:e2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MUQ2NTExMC8GA1UEBRMoRkJFRUE1MEI0N0Q4RUIxQzcwRkQzQTBBRTk1QUQxQjc2
OUQ4NDM0QTAeFw0yNjA0MTcwODQ0NDVaFw0yNjA0MjQwODQ0NDVaMBgxFjAUBgNV
BAMTDTY5ZTFmMmZlLTJlMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwWcAOKuj//7viTak2ftmrADSd0L1XA7VcJP9TgG3xYz9lXbDh03iwMQUfNzHi
fOKC/AH2hketu1Ese0e7oM54L0OzIABm9Bv/bzSP7/tFHsMFQXAkCzYgl5mev0PK
XV5sk4PzJPj1mU8CofQbuQKQ+mCa+papXO3V0tTfsfctw/95jTAZHyzxECu7qqCo
uFZRX8JJy8VNia8UY+uwpQDu6ntydxMMKQwtJ6+xXjaihoPFZKTXhzVAB9ALTmlN
zZqgd+QgOP/AEzAmNnCVDWH6gc+JsRKzINT4qjkyhFwqxfOeG8cFJQ3bm8B9hGph
hXUPVQlDQjHreFPYgoAWRxbZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0K8rV5gM
otndIajR6idxybtPahAwHwYDVR0jBBgwFoAU++6lC0fY6xxw/ToK6VrRt2nYQ0ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDY1L0NGQjlFNzc2MjJB
ODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4d19Ub0s2VnJSdDJuWVEw
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLS02bEMwZlk2eHh3X1RvSzZWclJ0Mm5ZUTBvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx
RDY1L0NGQjlFNzc2MjJBODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4
d19Ub0s2VnJSdDJuWVEwby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAt6axyHqbrG8ypTQtzGb44MfChPlVAbx7zML10HN1DXpKfprcpjYPPeT8Iz7Ti
A2xInX8tBRy4ejBDJjXPtSsEYSV4zguom4iru5XbdBkUzBZHY6BjtU7gnp/PZrCQ
ykvX/18kk9WoYMHhX/lggk46PBLFOU7LDuWJRBdjNDvJaWtTwzc42cq9ZOTzV3dc
sxkx1LsBlJ/lElorMY2xhJVhihF9+MeErGh4SQW+esFPxo5vEOj2INC9g3/QdCWT
bXnlkwD0Mq3RvnuQzw/DyHnN5AmXq2ijuvThtszskKRrspAlMgAYM4KOStNnCSxf
YfiRHtEdANHoueQ1g8Msh0Li
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:39 2026 by rpki-client