
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
File: 6tKydVDbcXQNXPh2q1QLuGtfKjg.mft (raw, json)
Hash identifier: XUfyauMxXqkr14qZ/zyaZuk8NkmQZBX3hIhyu4P2gp8=
Subject key identifier: 06:C1:56:0C:A8:A5:AD:43:47:67:CB:38:AD:30:6B:A2:82:54:A1:BA
Authority key identifier: EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
Certificate issuer: /CN=A913CFCF/serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
Manifest number: 12
Signing time: Sun 01 Mar 2026 10:36:17 +0000
Manifest this update: Sun 01 Mar 2026 10:36:16 +0000
Manifest next update: Sun 08 Mar 2026 10:36:16 +0000
Files and hashes: 1: 6tKydVDbcXQNXPh2q1QLuGtfKjg.crl (hash: qtJxPdt9VV9vi6ZvromofnV0WOziDDKTPVhK67/WONo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl
rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CFCF, serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
Validity
Not Before: Mar 1 10:36:16 2026 GMT
Not After : Mar 8 10:36:16 2026 GMT
Subject: CN=69a416a1-4748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:19:f3:5b:b2:07:91:c2:6c:6e:26:93:65:
d5:d0:b0:a2:1f:c7:a7:49:2d:99:2d:3e:e9:3a:1e:
c3:2d:e6:8e:e9:9e:2b:e2:99:98:8c:98:03:3c:e8:
eb:cf:80:19:85:67:fe:51:af:e8:b1:b7:71:c8:ed:
c1:be:99:4b:4c:05:12:1f:b9:2b:4b:3c:94:7e:cc:
6c:64:ab:e7:da:e3:d4:20:74:7e:a1:fb:0e:21:10:
25:72:b2:a1:5a:a0:e2:af:64:20:27:86:50:df:fd:
1d:02:1e:ba:c4:d9:2b:45:95:8c:4c:db:46:63:b2:
c7:9d:4b:20:93:c2:05:55:b1:52:ae:8d:d7:b5:17:
00:82:d2:8e:e7:4e:70:e0:af:17:9e:06:bd:dc:2e:
75:ea:b8:38:04:47:85:97:80:3d:6e:8f:ed:37:bf:
1a:6c:fe:80:fc:a6:26:76:35:50:f4:1b:d7:c9:af:
5b:3d:42:7a:ac:9f:13:0a:e3:7c:ed:f0:48:73:8a:
8c:10:7e:33:55:c4:05:c5:5c:cb:b9:85:72:5d:82:
3c:e9:07:7e:79:e1:5b:12:17:41:b7:1b:0b:34:63:
85:6e:e9:cc:a5:7a:fd:fa:93:c4:59:c0:45:e0:71:
40:ca:99:5a:3f:82:a2:c7:cb:91:cc:c5:ce:43:b2:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:56:0C:A8:A5:AD:43:47:67:CB:38:AD:30:6B:A2:82:54:A1:BA
X509v3 Authority Key Identifier:
keyid:EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:cf:61:6e:b8:ba:1a:29:6a:67:6a:13:0b:d7:52:2f:29:c4:
8e:c4:c7:2f:a4:50:95:59:98:6f:50:93:b6:09:3e:08:17:1c:
19:28:55:e6:65:a1:74:e4:8c:16:47:2b:c1:dc:97:df:57:f3:
47:f0:6b:ec:84:29:10:0d:68:56:95:57:47:86:a7:a5:49:81:
a2:a7:aa:d3:f0:39:33:ad:47:91:ca:6d:a8:42:c4:a9:ad:9c:
fa:4b:8b:5b:65:11:ee:9a:f7:54:b7:3e:a8:24:b1:b0:c0:39:
6a:fb:9b:cd:68:bd:32:83:91:df:45:ae:6d:8f:94:a1:f2:92:
ba:bd:94:c0:eb:05:46:58:52:22:29:33:a9:8e:ef:66:93:f2:
e5:c2:a6:fa:ed:c8:5e:50:19:ad:26:d4:0f:30:60:dc:99:be:
a7:92:8b:98:64:a5:39:b3:ee:c3:38:d0:99:40:00:27:73:2f:
93:05:1a:0b:05:7c:76:99:bb:d7:0f:6c:4c:0b:06:61:8f:d7:
64:ba:9e:c7:a1:4e:7a:a0:46:59:6c:e7:0f:70:e7:05:79:19:
44:55:01:cb:6c:59:63:f3:43:27:67:8e:da:72:3b:60:1b:aa:
b8:39:63:e8:ed:b9:69:8d:65:20:03:6b:0d:bb:61:09:fc:0e:
42:88:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:30:15 2026 by rpki-client