
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json)
Hash identifier: wfKwqFHjQh14pet3lOSN+n9zHx0/I1egeuuHnNI4l2U=
Subject key identifier: 45:B9:FE:E9:AA:F2:96:4B:93:53:0E:EF:54:ED:5F:E0:15:80:54:C2
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
Manifest number: 01EA
Signing time: Mon 02 Mar 2026 01:23:07 +0000
Manifest this update: Mon 02 Mar 2026 01:23:05 +0000
Manifest next update: Mon 09 Mar 2026 01:23:05 +0000
Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: TWGcmg8zMuxCG68rjYdSe7IEE+yDQydi+C3b/TwQADU=)
2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: pE9Ctw9QKRS8QgMh/STn9x6A8pM1YmpBJFnciqO1iE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Validity
Not Before: Mar 2 01:23:05 2026 GMT
Not After : Mar 9 01:23:05 2026 GMT
Subject: CN=69a4e67b-796a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:d5:72:55:22:cb:85:b5:b9:3e:08:4d:88:
88:c7:f2:97:c8:d6:09:4a:43:3a:6a:32:bb:d3:68:
23:8b:ab:c1:ee:01:e7:2f:57:e0:9d:16:8c:12:c6:
d4:f6:b4:d5:22:b4:0e:5b:d9:02:d5:f1:a3:ed:68:
db:50:c5:00:f4:0d:43:14:30:27:e1:d3:26:b7:d1:
3a:4b:af:cc:bb:59:ea:0a:f9:a7:ec:a9:c9:4b:3c:
f5:31:f0:8e:4e:44:1a:e7:87:dd:66:94:17:23:bf:
cc:d9:3c:23:96:87:aa:55:f2:6b:a5:47:e1:51:f9:
fe:5f:69:06:57:ae:d7:01:83:6f:0a:0f:8f:12:50:
ed:35:74:7f:b9:a3:b0:6c:1d:cb:d6:0c:b2:85:64:
06:f1:db:29:62:1e:af:fc:3a:b5:56:ab:fa:87:01:
44:2d:c6:25:60:ec:a6:51:a8:37:20:0e:0a:d0:ee:
a4:d2:98:b1:97:87:4d:f3:ad:87:02:e2:bc:e1:05:
b7:58:c2:31:56:a1:37:c8:6d:29:29:ab:d6:0a:f3:
95:58:e8:05:7d:0f:de:8a:16:76:2b:5c:c1:8c:df:
97:f9:0f:62:04:2d:7b:aa:88:54:4d:4a:82:8f:71:
7b:f1:8b:2d:6b:be:8e:f5:1f:a9:c5:58:2f:39:4a:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:FE:E9:AA:F2:96:4B:93:53:0E:EF:54:ED:5F:E0:15:80:54:C2
X509v3 Authority Key Identifier:
keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a5:bc:e8:ed:8c:26:5b:aa:fc:47:19:24:78:c7:23:5d:69:
d3:0e:ad:e7:8f:56:52:0c:8e:ca:44:cb:12:7c:92:1a:fc:46:
e9:da:bc:f2:1e:e2:ac:4e:2d:76:84:68:6f:a8:f5:31:98:ac:
26:f5:c9:c8:3a:de:0f:4b:d5:80:2c:bf:7e:e7:88:57:a3:8b:
c9:25:d2:3b:08:02:3c:0a:3b:d1:8b:34:41:2a:86:e2:cd:12:
51:28:db:eb:83:ef:ee:9d:3e:f2:e4:2e:61:3a:34:27:08:e5:
c3:28:9a:86:5f:f0:4d:85:7c:17:4e:53:b2:cf:0e:81:e4:1b:
16:96:fc:bf:cf:c5:66:54:8c:23:d1:0c:7f:42:d1:d8:80:f8:
ba:10:7e:af:bb:0d:d6:d9:ab:47:ff:00:60:5a:e2:36:03:13:
03:41:07:dd:2f:46:62:ac:5e:6e:58:1e:bc:d0:75:00:95:81:
46:5b:6a:d8:3f:94:91:49:99:4b:bf:25:b0:8d:a5:6a:eb:5f:
09:c5:e0:e6:f7:af:75:b4:24:4f:3d:1f:fc:50:2d:b4:8f:29:
8d:64:58:14:09:75:60:eb:88:80:d9:df:8d:29:c4:c5:12:6c:
86:30:0c:d6:96:82:0d:96:cd:4a:06:99:95:97:c5:28:52:0d:
40:9e:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:56 2026 by rpki-client