
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
File: C6kCx31AoXILQnNsTotcNnjiuRQ.mft (raw, json)
Hash identifier: UYHq+2u0eJHKe4GfrwsQCiFANqnFwrefa6PQe2yDKEE=
Subject key identifier: 44:B9:78:A6:2A:28:E4:6C:14:E6:08:33:20:55:D5:7F:23:5F:BE:10
Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
Certificate issuer: /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
Manifest number: 31
Signing time: Fri 17 Apr 2026 08:24:06 +0000
Manifest this update: Fri 17 Apr 2026 08:24:06 +0000
Manifest next update: Fri 24 Apr 2026 08:24:06 +0000
Files and hashes: 1: C6kCx31AoXILQnNsTotcNnjiuRQ.crl (hash: /8mm7mOpXpeoP2Ue4Il9Vs/lXfXj2diBKhn18FbN6tU=)
2: 5787CC96FB3411F0A8F597323D6F56BC.roa (hash: lG5XzlCW36eN47UotWj73TCol7/E9mkhN9sNAOU+bso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Validity
Not Before: Apr 17 08:24:06 2026 GMT
Not After : Apr 24 08:24:06 2026 GMT
Subject: CN=69e1ee26-ff33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:6a:96:b1:e8:dc:16:e7:9d:15:09:b8:54:
40:2d:38:dd:bf:ed:05:40:d9:bf:8b:81:83:fc:cc:
cc:78:5d:e3:da:cc:df:c0:97:ed:8d:28:ad:a4:44:
fc:46:61:ee:8c:dd:60:4c:70:e6:75:14:a7:3f:49:
64:11:cf:a4:6c:af:56:3e:bc:fb:2c:29:24:3a:f4:
6d:24:11:b8:b2:66:72:f8:c3:ac:b8:97:de:72:bb:
55:dd:eb:04:8c:c9:fa:80:43:d2:64:50:2d:2e:c2:
b2:be:4f:d3:9a:f0:90:ca:ca:50:8c:06:bb:6b:06:
79:51:8e:e9:43:14:4c:38:3b:4c:22:73:fb:2e:c3:
bb:84:56:6d:17:01:b5:d2:f5:f0:9c:58:12:37:cf:
93:17:85:f0:19:46:5a:2a:ff:fd:02:25:79:2e:c6:
a1:71:51:bf:ea:61:46:3f:ed:d8:b3:12:c6:1b:6a:
9d:96:88:bb:d4:52:48:a2:a5:df:d0:96:45:58:fb:
5d:7a:b8:63:ab:d0:3b:e2:b0:62:29:18:2d:36:25:
68:c6:24:b9:ba:cc:99:42:9d:93:5d:28:b4:cf:99:
18:ed:39:35:5b:18:82:4a:cf:59:42:63:1e:2f:7e:
c3:57:8c:c7:2a:10:44:75:bf:c4:e4:1a:06:e7:0f:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B9:78:A6:2A:28:E4:6C:14:E6:08:33:20:55:D5:7F:23:5F:BE:10
X509v3 Authority Key Identifier:
keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:84:a1:60:62:b9:8b:44:ed:55:a1:3c:64:d1:20:9e:5b:43:
a5:82:5b:d1:06:f0:13:eb:70:52:be:cd:7d:cc:89:de:7a:aa:
73:eb:19:a7:c9:db:94:bc:ed:53:cb:c8:ec:16:31:a0:b3:c0:
0f:4d:7f:56:01:2e:7b:3e:63:ff:29:f3:2b:05:17:5a:a3:21:
31:bd:cf:3e:58:ce:72:bb:80:ec:f5:49:46:9d:ae:56:42:70:
fc:c0:a1:3b:99:66:ef:46:7c:71:61:95:e5:56:bc:df:44:d2:
b6:6c:98:60:84:a3:cd:24:65:9e:ea:b7:09:eb:bf:47:70:1c:
d7:18:5d:aa:dc:1e:ab:0b:fe:99:12:e1:cd:c5:b9:f8:2f:fa:
23:d0:83:e0:a6:16:40:16:6a:68:bf:2c:9f:4a:c0:a1:11:17:
c0:44:89:98:f9:1d:8e:fa:dd:7f:c3:89:05:f3:78:08:3c:d3:
4c:34:14:29:3c:5c:ee:f5:6a:8a:20:b1:6d:30:ec:27:94:df:
51:fb:8f:ef:cf:d2:58:b0:15:93:90:dc:c2:60:5d:21:fc:ce:
4f:6f:17:bf:7c:c0:44:f7:de:be:95:d7:65:ea:73:cc:48:55:
a9:13:a5:70:71:e2:a7:cc:d7:74:47:aa:dc:ef:07:1b:ad:2c:
55:ae:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:30 2026 by rpki-client