
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier: 5Z/uxq7tDO2ctXH3TlyoKLv2NGi3/ch3JhIrd5kDGro=
Subject key identifier: D7:AD:A5:E8:9A:30:2C:7B:BB:C4:56:1B:A7:35:63:CB:7F:DE:44:E8
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial: 0437
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number: 0429
Signing time: Fri 17 Apr 2026 00:15:49 +0000
Manifest this update: Fri 17 Apr 2026 00:15:48 +0000
Manifest next update: Fri 24 Apr 2026 00:15:48 +0000
Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: aS4JjE65TnVwSpnpX39TgNkr+S0lbJtncZbSy2G4yCQ=)
2: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: iuWH4XsJsz0loBqcOc0cY5MFt/NYR3pQCRGo6mfAtWM=)
3: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: azSQvrLGixSL3oYOq7/u81UYo4j8paDDRGJYii7YcF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Validity
Not Before: Apr 17 00:15:48 2026 GMT
Not After : Apr 24 00:15:48 2026 GMT
Subject: CN=69e17bb4-e67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:b6:c6:9c:fe:68:79:97:2e:c4:39:c2:9a:
7f:41:5c:97:e0:83:85:8c:c0:73:db:bc:00:25:91:
68:cd:a6:b4:33:ab:6b:c6:88:32:27:88:d0:ff:91:
8c:e6:7c:ec:63:3d:cd:bb:c6:5c:6e:4e:8b:00:59:
09:d7:60:14:a4:ce:19:3a:0e:28:f7:0e:20:ee:b6:
70:8e:cd:da:38:c5:69:d7:52:a4:df:39:53:1d:68:
61:80:4a:1e:41:04:c6:d7:34:d4:20:74:b9:26:fc:
d3:02:e5:d4:ae:b4:dc:9c:58:1c:d0:1a:79:77:2d:
00:81:86:13:bd:8b:03:29:1e:36:c5:7f:ec:88:b3:
dd:16:e5:39:31:de:ef:34:e5:77:57:b8:3f:32:ca:
b1:75:c1:60:d6:48:78:e4:f5:99:ad:1d:10:5a:17:
94:a2:e3:f2:7e:23:e1:86:55:83:c0:34:c8:ca:71:
11:42:96:23:09:2d:52:8f:9e:e1:e2:92:75:f4:85:
5d:b2:61:7f:e3:b4:b9:49:2c:60:23:03:cc:43:55:
5e:cf:a9:ca:77:73:1d:80:8f:9a:7d:9d:b0:1e:3f:
fa:95:9d:0c:13:91:99:d7:d3:d3:2e:19:38:40:c5:
41:05:0d:09:7d:dd:77:25:6b:d6:d6:ae:da:ac:ae:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AD:A5:E8:9A:30:2C:7B:BB:C4:56:1B:A7:35:63:CB:7F:DE:44:E8
X509v3 Authority Key Identifier:
keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:22:68:a9:4d:2d:60:82:3f:e1:84:57:b4:64:01:3f:8c:e4:
9b:f7:98:17:a8:f4:ee:9b:d1:8e:b7:bd:53:e3:69:25:a7:31:
cc:75:01:f9:ff:f6:50:27:35:83:41:13:47:36:96:d5:8a:a4:
4e:74:5a:34:a5:c1:25:2f:f7:ae:69:3f:82:e8:6b:c0:a6:a4:
87:dd:c2:77:6e:c6:4b:46:42:7c:cb:bc:6a:c1:92:92:be:8d:
21:ce:7b:1e:d8:f1:98:b5:8a:75:84:0d:e6:d6:b0:f3:fe:77:
91:f1:45:73:47:47:d2:59:a9:fb:dc:0a:a5:47:fd:bd:b0:31:
d7:f9:74:bd:58:5e:dc:03:b1:29:71:4c:5f:05:cd:30:32:1e:
81:37:42:80:59:35:5a:24:ff:73:7d:f5:aa:57:44:d8:5c:d9:
9b:92:3f:80:6f:c7:e2:52:e5:e7:ac:71:7a:02:d5:09:bc:29:
35:1e:f9:a8:20:2e:8d:bf:9c:96:e6:8f:d2:1e:49:a9:eb:c6:
1a:83:6b:71:40:6a:e1:ec:93:c5:f7:b4:03:d0:00:50:02:38:
81:15:49:87:e9:ef:de:1b:10:34:c4:19:df:06:ee:9d:7a:17:
5d:fd:b6:61:df:a5:df:4b:66:c2:ef:8a:01:e8:fe:92:bd:e4:
b3:8e:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:41 2026 by rpki-client