
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier: eZzie7eZhTT+EEhvAXwggnHEKxTtmBq1FgrvLF/9mqQ=
Subject key identifier: 43:51:AE:D4:27:DE:19:AA:CA:D5:8C:16:ED:C3:A2:DD:0D:1D:7D:31
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number: 027E
Signing time: Fri 17 Apr 2026 01:36:53 +0000
Manifest this update: Fri 17 Apr 2026 01:36:52 +0000
Manifest next update: Fri 24 Apr 2026 01:36:52 +0000
Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: 5SiYJp5TuJaxJn1zmiI473WHX6+wYUi57dG9cgB9OAk=)
2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: oC6miXWdaPojqcpO8i3+8D+CMDRbnsGghAkCPd5g198=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Validity
Not Before: Apr 17 01:36:52 2026 GMT
Not After : Apr 24 01:36:52 2026 GMT
Subject: CN=69e18eb5-eed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:5e:aa:8d:85:7f:3c:02:d8:55:c2:b6:f0:
d4:27:bc:02:17:a3:22:fd:fe:6b:a8:b9:73:3c:b9:
42:ae:7b:cf:ae:07:0f:2d:87:76:13:ba:ff:04:db:
c5:ac:25:85:0e:49:ca:03:cb:da:f6:95:bc:2f:6e:
4a:43:f6:ba:51:11:0d:bc:34:46:34:8a:81:7e:40:
fd:c9:93:22:39:b1:47:d1:a7:77:b4:80:0f:15:ce:
90:39:7a:34:8d:4a:4f:86:23:09:ac:4e:ce:cf:8a:
03:61:3a:e9:76:76:a4:a9:cb:b3:5f:1e:37:52:77:
0b:6e:e1:35:b3:0f:a8:3b:7f:f7:4b:08:eb:57:e1:
f6:dc:f2:cd:6a:a5:59:d2:79:eb:b3:e8:c1:fb:03:
b0:25:ce:39:63:1b:23:2c:19:4e:68:35:d5:a2:e3:
98:6f:26:69:28:17:13:ca:2d:d3:5e:eb:07:05:ce:
9d:9a:c0:1a:dd:84:54:b3:f8:5d:51:1c:02:8b:80:
e2:ca:d4:99:8d:2a:8a:7b:7c:20:97:7c:0b:0a:1f:
c3:89:4d:61:3e:5f:7b:3b:b1:ea:99:60:7c:ad:bf:
c9:92:c4:7f:fc:f8:92:62:14:57:0c:7f:31:7e:04:
d0:fd:bc:9d:7e:cb:1f:9e:14:d5:a8:24:25:30:c6:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:AE:D4:27:DE:19:AA:CA:D5:8C:16:ED:C3:A2:DD:0D:1D:7D:31
X509v3 Authority Key Identifier:
keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ee:47:7c:b5:1a:48:1c:25:79:93:52:00:1e:52:c6:f7:b6:
86:54:93:82:02:a6:6d:69:8d:e4:63:7c:3d:1b:f0:2f:76:23:
32:d3:27:35:5b:93:38:c7:bf:14:2e:25:56:7f:34:f5:c8:e5:
01:a3:0d:b6:4b:84:c9:99:95:79:41:f1:85:0e:f3:6d:20:c4:
0b:9b:a9:ea:f3:37:53:c1:50:57:1d:9f:4d:19:df:84:59:aa:
57:4d:7f:6b:ec:c0:86:6e:12:5d:c4:b5:ad:d7:be:11:1f:50:
a4:83:ba:24:e9:78:00:19:11:0a:b8:ae:cb:61:b1:81:dc:02:
0e:43:ac:00:65:5c:63:dd:51:e4:39:f8:74:b8:62:11:25:6f:
d0:16:78:63:8a:09:b2:ae:3e:b1:93:aa:05:7c:98:db:27:4e:
93:e7:60:ff:d8:fa:df:99:e3:f0:08:95:77:81:fd:19:f6:9f:
84:72:ce:cb:71:5b:f9:8a:89:bd:7b:94:ed:67:06:6a:00:9e:
84:af:a7:d2:b7:28:9f:02:25:00:1e:0b:14:e3:b9:f9:87:84:
d9:c7:d6:da:9e:b5:b3:c5:88:64:3a:5d:fc:2e:eb:2d:6c:9f:
54:74:1c:ee:d3:19:da:c0:b4:90:c8:c4:e0:02:39:dc:dc:cd:
94:6c:db:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz
RkQyNUI5QzEwHhcNMjYwNDE3MDEzNjUyWhcNMjYwNDI0MDEzNjUyWjAYMRYwFAYD
VQQDEw02OWUxOGViNS1lZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtU1eqo2FfzwC2FXCtvDUJ7wCF6Mi/f5rqLlzPLlCrnvPrgcPLYd2E7r/BNvF
rCWFDknKA8va9pW8L25KQ/a6URENvDRGNIqBfkD9yZMiObFH0ad3tIAPFc6QOXo0
jUpPhiMJrE7Oz4oDYTrpdnakqcuzXx43UncLbuE1sw+oO3/3SwjrV+H23PLNaqVZ
0nnrs+jB+wOwJc45YxsjLBlOaDXVouOYbyZpKBcTyi3TXusHBc6dmsAa3YRUs/hd
URwCi4DiytSZjSqKe3wgl3wLCh/DiU1hPl97O7HqmWB8rb/JksR//PiSYhRXDH8x
fgTQ/bydfssfnhTVqCQlMMarbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENRrtQn
3hmqytWMFu3Dot0NHX0xMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2
MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03
aHZQQll1eWYwMjBfMGx1Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFe5HfLUaSBwleZNSAB5Sxve2hlSTggKmbWmN5GN8PRvwL3YjMtMnNVuTOMe/
FC4lVn809cjlAaMNtkuEyZmVeUHxhQ7zbSDEC5up6vM3U8FQVx2fTRnfhFmqV01/
a+zAhm4SXcS1rde+ER9QpIO6JOl4ABkRCriuy2GxgdwCDkOsAGVcY91R5Dn4dLhi
ESVv0BZ4Y4oJsq4+sZOqBXyY2ydOk+dg/9j635nj8AiVd4H9GfafhHLOy3Fb+YqJ
vXuU7WcGagCehK+n0rconwIlAB4LFOO5+YeE2cfW2p61s8WIZDpd/C7rLWyfVHQc
7tMZ2sC0kMjE4AI53NzNlGzbLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:01 2026 by rpki-client