
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
File: RC6qL6yoXGzvgcRKZaY36GftNTQ.mft (raw, json)
Hash identifier: C2fQ16nSeX02QEns1raRHMvotAMFqeQaXYWp9gnQH70=
Subject key identifier: 4E:A3:0D:66:1A:2D:2C:21:4D:2A:7C:77:04:1A:CC:DD:D1:B2:F5:F9
Authority key identifier: 44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
Certificate issuer: /CN=A9145E01/serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
Manifest number: 31
Signing time: Sun 01 Mar 2026 10:06:08 +0000
Manifest this update: Sun 01 Mar 2026 10:06:06 +0000
Manifest next update: Sun 08 Mar 2026 10:06:06 +0000
Files and hashes: 1: RC6qL6yoXGzvgcRKZaY36GftNTQ.crl (hash: tl1F1Z6FE2mQCcMH/hpwvPG0Lk/KoFbCLJdXf97uRXE=)
2: 042373B2CF5A11F08A42EF16C4F9AE02.roa (hash: /V6x4/J7dT8+4qvJXKi5Qse6OJ2IiykeCNzqSWmhWeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E01, serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Validity
Not Before: Mar 1 10:06:06 2026 GMT
Not After : Mar 8 10:06:06 2026 GMT
Subject: CN=69a40f8f-89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:bc:06:d8:d6:3c:47:96:f5:c4:b1:00:ee:
14:1d:21:9c:e6:e4:d9:5c:48:6c:d8:c6:bd:46:3a:
ad:86:b6:a0:c1:dc:07:29:86:e0:0b:84:72:7c:9e:
ce:c5:9d:26:36:de:b5:e2:d7:50:82:15:c8:71:1d:
25:0e:b4:4b:c2:e4:ef:5f:77:69:99:5b:0e:42:ab:
c6:18:49:89:31:a6:5b:cc:80:f6:e3:74:0f:ae:4d:
43:0b:8b:9d:e8:f0:e4:43:81:eb:87:0c:b7:d9:35:
8b:3d:7b:47:9f:6e:b5:a1:8f:08:27:58:55:14:66:
b8:70:55:20:74:9d:a6:9b:df:dd:39:39:25:85:e7:
c8:8b:c4:77:4b:06:56:66:70:60:00:bf:26:66:5c:
d0:f9:07:84:53:64:b7:f5:44:09:8c:25:9d:17:4d:
b3:c5:73:59:fc:a1:4e:27:74:50:2f:98:9f:45:0a:
05:f0:54:51:9b:53:2d:64:43:de:bf:33:c8:6c:f6:
cb:65:3c:50:8e:8c:9e:7e:6a:e8:fa:c7:12:0c:2d:
61:97:fb:46:4e:46:b2:da:e4:47:9f:18:f3:d2:4f:
ff:7b:4f:68:7d:1d:67:9a:23:9b:a2:97:22:2b:fc:
0d:c9:f2:55:ae:4d:7b:a6:7c:16:23:23:8d:8e:09:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:0D:66:1A:2D:2C:21:4D:2A:7C:77:04:1A:CC:DD:D1:B2:F5:F9
X509v3 Authority Key Identifier:
keyid:44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:34:b9:1e:2f:8d:38:42:6d:93:39:60:32:93:5e:d5:d0:d4:
01:f8:4d:73:b5:b6:3e:90:74:f9:1b:f0:d5:18:3f:6c:37:ef:
02:02:db:ab:d2:ed:01:ec:44:39:b9:68:02:e5:ef:80:76:65:
b3:ff:1b:4a:c1:17:5a:0c:ad:20:f0:f9:5d:93:04:0c:dc:6d:
a1:b5:b7:97:56:bf:43:a8:d7:86:9f:74:97:c6:5d:d4:00:0d:
e2:e0:c3:62:95:9c:bb:dc:9a:83:04:d8:dc:3b:f8:26:2e:bb:
ef:85:76:64:ca:64:e5:ce:ff:3c:ac:69:47:4e:23:32:d3:7a:
19:de:6a:74:ad:d1:23:1b:83:6a:5f:44:be:56:6d:6c:35:94:
99:ba:b4:ac:0b:f8:dc:a6:87:8b:98:ea:55:75:0c:e6:41:8e:
6a:7f:93:24:5e:76:59:19:41:a8:96:c1:90:a9:de:7f:c9:fd:
25:e2:df:90:5a:cf:60:4b:11:99:f5:d6:47:ea:c2:83:32:a1:
af:34:d6:bc:8f:b8:a4:33:fd:b2:36:04:f2:66:bf:51:d9:20:
ee:f8:b2:e5:32:16:42:c1:5e:ea:68:b5:a3:3f:64:7a:b2:cb:
76:7d:b9:9a:9c:f4:8d:80:b4:93:3f:87:10:03:f6:bf:f8:55:
74:a3:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:53 2026 by rpki-client