
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier: SqDzH1pYXVliBTM8NKtgEmjX60trzjoKARP3K/Xol+c=
Subject key identifier: DB:71:56:99:84:B2:E3:CA:8B:52:29:E0:39:BA:C1:E3:96:A9:1D:DA
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial: 3568
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number: 354C
Signing time: Thu 16 Apr 2026 14:42:47 +0000
Manifest this update: Thu 16 Apr 2026 14:42:47 +0000
Manifest next update: Thu 23 Apr 2026 14:42:47 +0000
Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 0z8jxonBiVmkL2Ce30NzhkpNO0CJkx767HDWRrKTCMg=)
2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: tckSAKTOei05940ALy4Vf/C0qPnj/LXYBJGPT90xVGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13672 (0x3568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Validity
Not Before: Apr 16 14:42:47 2026 GMT
Not After : Apr 23 14:42:47 2026 GMT
Subject: CN=69e0f567-222e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a0:0e:3a:a6:a6:f2:20:1b:df:28:8b:cf:3b:
99:26:3b:13:6b:c9:d3:77:47:99:39:bb:95:29:27:
fc:9f:e4:7f:bb:c5:3c:64:ac:84:6b:ad:67:d6:43:
27:ae:a6:62:da:14:79:ec:1c:37:14:70:7c:a7:ee:
4b:11:8f:d3:81:25:22:18:ae:9b:78:f1:ee:3c:ee:
f9:1e:0a:f6:b3:a9:81:62:14:50:3a:0f:c2:fc:eb:
62:9b:b2:67:79:c6:31:84:74:09:ec:e9:47:08:93:
f4:b2:4a:92:75:72:70:5d:b8:db:d8:c4:0f:1c:9b:
00:44:74:2c:11:a9:b3:50:5e:57:1b:9b:11:3c:b1:
3b:54:73:91:30:c2:43:6d:fd:36:76:15:7c:7b:bd:
e5:f6:c1:c5:d9:c9:2c:c8:58:bc:51:f8:82:8a:ec:
8a:5a:ab:90:1b:87:6d:b3:c9:7a:bb:fb:91:42:00:
10:a1:fc:fd:8d:7e:d4:66:94:ab:6e:16:e2:f0:37:
4b:f3:a4:75:7f:23:b8:9a:d9:bc:2b:ba:81:1f:a7:
34:7a:2f:15:40:cf:65:96:65:16:c0:6f:9c:28:6d:
a7:8e:ed:63:9b:48:80:a8:ed:8a:f1:29:00:dd:52:
ec:56:3c:35:ac:c0:38:0b:7b:02:a2:46:2d:0e:84:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:71:56:99:84:B2:E3:CA:8B:52:29:E0:39:BA:C1:E3:96:A9:1D:DA
X509v3 Authority Key Identifier:
keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:2e:72:c7:0c:48:b3:af:cc:c7:c0:6a:d4:5d:9a:81:eb:b1:
c3:f3:76:5a:49:2e:32:86:2d:66:c7:ad:b2:29:c7:5d:56:b5:
75:d6:1b:43:c1:60:25:5b:61:7a:92:11:85:47:5c:bf:03:58:
9e:69:2e:f3:cb:87:53:8f:ed:8a:bf:e0:7f:1f:1e:b7:54:aa:
b1:d7:d1:6b:2f:b9:95:11:75:3f:4f:bb:4b:45:2a:9e:6f:5e:
dc:31:91:65:1e:2b:20:7a:cd:65:66:bc:ef:04:80:20:e9:fc:
c5:cc:54:4a:03:78:5d:16:24:cc:56:b6:5e:a9:a9:ab:54:67:
b2:83:36:8b:a4:fe:03:c1:41:4d:19:98:e6:bb:2e:0a:32:d7:
82:69:c1:43:57:b7:90:0a:27:bd:08:92:0b:09:2f:c7:5c:b8:
85:27:0c:4d:01:e0:45:bf:ba:2a:eb:a8:57:22:7c:6b:10:9f:
1e:b8:de:2b:04:07:84:9e:6e:22:ca:1c:bc:67:05:d2:42:73:
db:58:36:fc:cd:3c:29:dc:56:28:c5:72:85:13:29:e2:aa:35:
c6:14:d0:c5:71:f2:c8:20:e4:be:01:61:8b:2c:68:ee:58:40:
33:92:a6:41:55:4a:f0:44:7d:dd:5b:26:08:01:ba:fd:26:bf:
d2:81:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:27:34 2026 by rpki-client