
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier: EXIkYM+wLgg2R0wBtWNVUxSB4fQ9WOGj/BeCJxmGhjs=
Subject key identifier: 4F:F6:54:6F:82:5F:E2:5D:B9:79:0D:F9:6A:27:27:69:C1:B9:1F:15
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial: 0A3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number: 0A2B
Signing time: Sat 28 Feb 2026 20:02:23 +0000
Manifest this update: Sat 28 Feb 2026 20:02:23 +0000
Manifest next update: Sat 07 Mar 2026 20:02:23 +0000
Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: SoFg4uGZnqqVHAKA+HAwff7bbhHrCZjdbvF+DU+Zn8o=)
2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 0uP0qBSRuS530AzJEmj9fiO+kW+9ViD0Nt8IGp0bhcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2618 (0xa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Validity
Not Before: Feb 28 20:02:23 2026 GMT
Not After : Mar 7 20:02:23 2026 GMT
Subject: CN=69a349cf-f65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:8c:ce:e3:f0:83:87:18:4c:5e:71:56:90:
27:26:54:5a:ea:b4:cc:97:7e:54:4e:88:e6:e9:ff:
10:b6:2f:9e:72:8c:61:58:6f:69:a5:98:2c:99:6f:
ab:29:ad:ff:d0:57:db:be:16:de:86:90:8b:b8:43:
7a:8a:2e:8d:64:35:89:6c:e3:4b:60:d7:02:ec:27:
cf:8b:0e:7c:07:03:24:15:4a:f2:85:54:e9:b1:ec:
17:bc:78:2a:df:ed:3d:bb:b8:45:c9:da:e6:55:cb:
44:1f:69:bd:2e:5c:55:ef:00:64:fa:a2:bf:bd:0b:
d8:99:bf:29:8e:55:ee:e2:4c:d7:df:7d:ff:01:fa:
ca:9b:43:d2:6e:18:b4:9d:aa:c9:da:65:91:48:f2:
23:71:ee:63:f5:6f:48:8b:54:28:6b:3b:71:b8:64:
7c:cf:72:3b:28:37:6e:fa:50:6e:59:5a:d8:fd:d3:
6a:8d:5b:5e:89:e3:03:34:58:1f:19:5a:9a:19:4e:
2b:d3:40:89:07:75:91:09:72:f3:34:2a:8e:5c:5d:
6b:a6:7a:db:b3:e6:c6:41:ba:be:c9:4d:ee:0a:d5:
c1:f0:51:8e:df:9d:63:19:52:cf:ab:e9:10:dd:0f:
9d:eb:6d:b4:d6:71:3d:e4:03:5b:12:b9:b4:70:2d:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:54:6F:82:5F:E2:5D:B9:79:0D:F9:6A:27:27:69:C1:B9:1F:15
X509v3 Authority Key Identifier:
keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f8:ae:aa:1f:45:e2:29:53:c9:95:a8:7d:f4:44:d7:50:ae:
25:a2:da:94:18:03:10:2a:cd:72:02:73:38:f2:7b:d1:c7:96:
41:af:61:76:b9:3a:02:bf:d2:d9:65:f0:c7:6a:b0:fe:45:35:
e6:50:a5:85:fa:81:7d:91:70:26:b1:b3:6f:83:b1:8c:e9:0b:
69:52:44:4a:8f:94:0e:8a:f0:7b:14:3e:0a:b9:b5:21:01:41:
3b:a6:15:c7:55:e4:f6:6e:45:b9:82:bd:7d:a4:c5:d9:4c:88:
71:6d:dc:86:eb:61:7b:c8:19:10:73:da:d5:29:f7:cc:2b:91:
03:c7:ac:c9:28:f2:96:52:ca:84:fb:fd:da:53:ce:16:18:2e:
2f:0f:b7:37:ac:72:59:90:be:cf:65:41:eb:9d:70:fb:e9:db:
fb:5a:5b:26:c4:97:85:81:65:58:3e:57:64:2d:ae:5c:7d:60:
b3:2e:06:94:f0:11:f3:fe:5b:15:6a:34:db:d2:8b:41:24:5e:
72:62:a6:53:0c:b4:3d:07:b8:d3:a9:98:6f:08:f4:eb:83:fd:
3b:ff:3e:b3:d0:ac:d7:f2:4c:78:78:a9:36:9b:ac:e4:41:d4:
d9:83:b5:86:e9:a4:3a:7d:e8:05:f0:4a:da:1f:1b:c1:97:8a:
50:b6:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:14 2026 by rpki-client