
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier: 3qs0KiYufWDGp3HHRKMmmwFueS8u5c1RjanPlxuT8sQ=
Subject key identifier: BB:F0:60:29:B7:BB:D2:11:E5:B3:36:3B:EE:77:D0:71:2E:39:00:00
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number: 040F
Signing time: Sun 01 Mar 2026 01:15:20 +0000
Manifest this update: Sun 01 Mar 2026 01:15:20 +0000
Manifest next update: Sun 08 Mar 2026 01:15:20 +0000
Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: EGCtKiUUh9bWR7JRG3sgH/SepGU6SJOWxtHQkgbNpds=)
2: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: AFgH6rBWprP5TXP7VnSd6WVIQBawbyHn9rZtCd/WfjM=)
3: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: JJotf7VpmSYaDPVQqH2CXAbFgfSH9/zhk44G7WVeO/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Validity
Not Before: Mar 1 01:15:20 2026 GMT
Not After : Mar 8 01:15:20 2026 GMT
Subject: CN=69a39328-bea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:b6:f1:19:e7:be:1a:e7:b4:dc:31:fb:59:
95:d4:ad:de:46:7c:a7:4e:96:87:8b:81:20:20:2a:
db:66:a5:95:1c:5a:b7:6b:f4:e3:20:d6:7d:ae:f4:
f4:4f:4e:20:2f:2e:f2:e5:76:01:ea:df:29:fd:0a:
4b:79:9d:fc:61:fd:74:f8:e8:56:a8:86:8c:ff:df:
1e:6b:6b:dd:e2:4f:d2:70:cf:89:70:2c:6f:09:df:
b4:be:1c:1e:6a:ae:ec:09:a3:a0:ee:d0:9d:4b:54:
e6:de:72:3b:a4:85:c4:fa:90:35:09:be:a1:fa:d4:
49:8f:54:8b:2f:1c:7b:37:a1:fa:c3:e7:7b:a1:74:
61:a9:4c:87:03:dc:27:ef:43:97:12:52:55:be:e3:
f8:76:5f:93:a3:00:8a:ae:6b:4c:dc:5c:8a:5b:b1:
0e:db:96:d9:13:5f:fc:64:3b:11:0c:21:d5:21:bc:
d2:82:06:ae:77:30:ea:09:49:0c:cf:4e:7c:06:fc:
b1:a5:62:ed:cd:d3:88:a1:31:89:93:8b:82:74:74:
df:fa:1e:9c:c2:b0:a9:16:ae:24:2f:ed:b5:e3:fb:
a4:dc:fe:bb:85:6f:23:83:d3:86:f1:86:71:f7:07:
c7:b2:cd:ad:1e:84:ef:c9:dc:c7:b5:ab:96:76:22:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:60:29:B7:BB:D2:11:E5:B3:36:3B:EE:77:D0:71:2E:39:00:00
X509v3 Authority Key Identifier:
keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fc:a3:aa:99:ff:e0:da:15:2a:50:ce:12:da:8a:99:2a:dd:
2f:78:57:03:db:43:e9:35:3d:69:92:39:a7:14:b8:fe:7b:e9:
4c:cf:75:ad:dd:ed:d5:19:97:a7:b5:f1:a9:64:01:15:bf:cd:
c1:b6:59:0c:66:51:4f:98:70:bf:20:ba:4b:ba:e1:6e:02:eb:
9d:7a:fe:ca:c7:e2:1f:88:8a:12:29:74:df:92:b7:28:74:ce:
58:a0:5b:cd:1e:d0:aa:4a:16:65:eb:f7:e2:15:8f:34:0e:48:
69:17:a5:0d:78:42:c3:b4:9b:df:47:8c:fe:d2:55:f0:0f:06:
97:45:ec:78:fa:f4:4e:af:b0:a4:46:97:a7:9f:b8:8c:8b:eb:
31:da:fb:0c:a0:7d:3b:e4:91:3d:2e:15:dc:4e:53:38:21:c4:
f2:da:99:a4:8f:23:9f:fc:7e:ec:9c:ec:c5:82:39:18:11:34:
a1:94:af:b7:b2:a6:44:fc:3e:dd:51:a6:cb:08:2a:f4:a3:70:
66:48:49:99:02:74:ea:85:f1:53:88:ee:b8:27:c0:f1:86:f2:
ec:eb:ed:20:a3:fe:4c:c8:7e:6e:1a:6d:73:91:88:31:f2:26:
2b:12:a3:8c:2b:72:a3:38:83:6a:e3:1a:8f:41:1c:52:da:a2:
cf:c4:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:52 2026 by rpki-client