
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier: wVQcqi4UVRu5gkrpjcYB0hdJEAzNzqxdomzD4YJA/Kg=
Subject key identifier: 0F:1A:EF:26:1A:0D:21:5F:E9:3C:E1:24:30:0D:6B:63:57:2F:FF:D6
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number: 0273
Signing time: Sun 01 Mar 2026 23:29:02 +0000
Manifest this update: Sun 01 Mar 2026 23:28:59 +0000
Manifest next update: Sun 08 Mar 2026 23:28:59 +0000
Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: Wl0LULbri9pFZMYlhV/se2KuZL7nLze0Y5VlKkRIj40=)
2: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: nqKMSVlSyxa7QHrLlm6Y84qBJxYwcSQ64B4xVxT4RjA=)
3: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: WYnjZsNu5jiuRKrMLvrdkCklYsmIm0eNnQ6iCSiMY3Q=)
4: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: azXfIFcWznJdcfz2Tut0Wi0gwmcY2B86Fw4E7iLjlm0=)
5: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: GhhSaA0xTyH5baipIEusOVelE8AEomQ82Qzg02jGkGw=)
6: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: s6Qyv+Kjm6U8zsIA5gW9AT3/QCQSXrLitcN0Qq9EJLg=)
7: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: JqaPwoYkZsoCryG868iVTZ8zY+76Lni/250smlWRpm8=)
8: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: h2uMCBwNTFg6piL71Xpw5aeMHSrOsn6mAYZOypLUc88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Mar 1 23:28:59 2026 GMT
Not After : Mar 8 23:28:59 2026 GMT
Subject: CN=69a4cbbe-ef7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:21:3b:1b:c6:a6:43:69:bd:c8:b5:b9:71:
92:dd:c1:50:58:48:ab:4a:56:c2:3d:ec:04:9c:ea:
b9:61:fa:a5:b9:3b:54:d5:c7:59:d9:56:68:24:66:
f8:43:a7:a0:3c:12:bf:58:e4:ab:47:a4:e1:33:b6:
94:c4:6f:61:32:95:26:b6:a1:bd:fe:06:c1:09:0d:
b4:b6:d1:d2:ba:e5:79:83:94:73:ef:0a:f9:bc:38:
a8:9b:e0:c7:8d:84:3d:7c:1e:db:3a:d0:89:f8:fd:
3a:7d:73:89:e3:b0:18:99:31:47:77:e2:5a:28:fc:
21:0e:1a:b0:c3:19:7c:63:f2:97:1d:8e:1e:a8:50:
48:99:13:6b:0a:5c:43:98:e5:bf:55:04:75:d4:43:
01:d8:19:41:cb:d5:8f:0e:9b:cc:22:a9:a5:d4:80:
4e:2c:3d:03:04:0e:44:4e:ce:e5:53:79:a6:80:6e:
ea:26:7c:a8:43:58:07:6c:a6:74:ef:97:b6:03:53:
c2:bc:47:54:ea:c7:ec:3c:8a:17:58:b2:b9:52:35:
aa:72:79:f8:ac:dd:21:ba:78:ed:a9:87:07:2d:3c:
1a:4e:a7:69:11:3b:0f:ac:d6:20:e3:44:07:76:ec:
ea:5b:50:ac:53:1e:b0:72:04:c9:98:a8:54:45:d3:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:EF:26:1A:0D:21:5F:E9:3C:E1:24:30:0D:6B:63:57:2F:FF:D6
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:ea:17:ce:5b:97:ec:7c:6b:b2:84:27:83:c4:55:43:0f:
fd:a7:6e:2e:91:77:10:b9:b9:bd:76:05:37:86:c3:17:b0:6d:
a7:4c:7e:d5:1c:7d:9a:17:ad:93:2b:6f:2b:61:fc:9c:4a:09:
5b:25:ae:79:25:e4:2e:ba:fa:87:61:6e:2f:8f:07:a4:92:da:
78:fa:c4:0f:78:a0:a9:ff:80:ae:26:d2:a1:c5:3d:ed:91:bd:
d8:4f:07:03:b7:a6:f9:93:ae:7d:ed:69:b1:b8:f3:6c:6e:e2:
a8:10:9c:22:ff:70:31:c8:12:43:d9:d1:87:20:9b:9a:25:b9:
c2:41:61:5b:7c:f5:b6:2e:ff:35:69:d2:da:d0:d2:87:11:4a:
6b:92:6f:4f:87:03:5e:d4:5d:1c:39:4e:23:b8:65:3e:82:03:
e9:93:1a:ed:9b:6b:49:44:a4:bf:16:e9:ad:69:c7:80:af:d8:
7c:f3:8d:17:80:e2:f6:c3:b7:0f:93:a9:e3:a3:78:80:cc:45:
13:76:17:27:f5:08:1a:4b:83:b8:71:1a:3d:76:7d:72:a6:5a:
04:41:cd:f7:c8:d6:1e:39:b1:03:78:79:ca:d0:e5:68:42:61:
5c:8c:87:ae:93:f5:e0:b9:3e:55:67:e2:a0:2b:39:7e:c2:86:
52:f8:dc:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0
ODJDNkY5QjQwHhcNMjYwMzAxMjMyODU5WhcNMjYwMzA4MjMyODU5WjAYMRYwFAYD
VQQDEw02OWE0Y2JiZS1lZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApxwhOxvGpkNpvci1uXGS3cFQWEirSlbCPewEnOq5YfqluTtU1cdZ2VZoJGb4
Q6egPBK/WOSrR6ThM7aUxG9hMpUmtqG9/gbBCQ20ttHSuuV5g5Rz7wr5vDiom+DH
jYQ9fB7bOtCJ+P06fXOJ47AYmTFHd+JaKPwhDhqwwxl8Y/KXHY4eqFBImRNrClxD
mOW/VQR11EMB2BlBy9WPDpvMIqml1IBOLD0DBA5ETs7lU3mmgG7qJnyoQ1gHbKZ0
75e2A1PCvEdU6sfsPIoXWLK5UjWqcnn4rN0hunjtqYcHLTwaTqdpETsPrNYg40QH
duzqW1CsUx6wcgTJmKhURdPuXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8a7yYa
DSFf6TzhJDANa2NXL//WMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0
MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD
ZzV3VE0xSGFKUkZJTEctYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbgjqF85bl+x8a7KEJ4PEVUMP/aduLpF3ELm5vXYFN4bDF7Btp0x+1Rx9mhet
kytvK2H8nEoJWyWueSXkLrr6h2FuL48HpJLaePrED3igqf+AribSocU97ZG92E8H
A7em+ZOufe1psbjzbG7iqBCcIv9wMcgSQ9nRhyCbmiW5wkFhW3z1ti7/NWnS2tDS
hxFKa5JvT4cDXtRdHDlOI7hlPoID6ZMa7ZtrSUSkvxbprWnHgK/YfPONF4Di9sO3
D5Op46N4gMxFE3YXJ/UIGkuDuHEaPXZ9cqZaBEHN98jWHjmxA3h5ytDlaEJhXIyH
rpP14Lk+VWfioCs5fsKGUvjchw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:20 2026 by rpki-client