
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier: uUuHZoHJNAGdjqvsLN27Omrbxy92xil+MGbTs9+mAgs=
Subject key identifier: 2D:04:2D:57:71:7F:2D:5B:FD:03:6C:A3:0A:16:7C:9E:CB:E7:C2:24
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number: 0B41
Signing time: Thu 16 Apr 2026 19:10:58 +0000
Manifest this update: Thu 16 Apr 2026 19:10:57 +0000
Manifest next update: Thu 23 Apr 2026 19:10:57 +0000
Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: eqAl9NNjHhzxbjeyzNiOQjQX3XMkcme8339coQGdN0A=)
2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=)
3: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=)
4: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Validity
Not Before: Apr 16 19:10:57 2026 GMT
Not After : Apr 23 19:10:57 2026 GMT
Subject: CN=69e13442-cc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:53:b5:56:bb:f4:9b:ab:d5:71:e9:06:f8:
bc:15:85:9d:70:2d:fd:10:ea:ae:5d:2c:d7:3d:b4:
d8:9e:1a:b4:8b:dc:a2:fa:86:9d:36:78:d3:58:be:
c7:64:bf:de:c0:90:5e:95:f0:77:05:39:cc:90:b0:
c7:ec:38:48:1c:67:01:21:33:27:41:36:00:df:51:
5a:74:1b:56:57:74:d6:45:47:c6:82:94:f9:a2:01:
9c:44:ce:83:23:09:86:8a:85:8c:31:1d:2a:ee:86:
81:01:58:ac:65:a6:21:6e:1c:98:1c:77:53:74:13:
19:b5:b8:56:42:ca:95:4e:2c:ca:d4:76:49:74:53:
c2:48:3b:54:db:11:76:3e:df:7a:4b:3a:4b:42:6a:
9e:ee:ad:57:74:9e:98:62:46:1c:5b:c3:7c:56:a2:
bc:c4:2f:d0:b8:b9:7a:e4:59:12:47:67:0d:ba:e1:
5d:98:7b:cf:0a:99:f2:ee:ba:d1:ce:b8:5f:13:c9:
61:bc:c7:0f:4f:83:25:59:c3:87:52:b6:8c:19:5d:
8b:44:81:0f:a5:8d:0b:fe:62:d1:1b:df:bb:c1:e4:
a9:22:c7:40:86:d0:b4:18:6c:92:6e:30:fe:8b:65:
3f:e7:d2:ee:2a:6c:cf:c6:cc:fb:82:6c:ec:e6:cc:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:2D:57:71:7F:2D:5B:FD:03:6C:A3:0A:16:7C:9E:CB:E7:C2:24
X509v3 Authority Key Identifier:
keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:63:34:9b:01:ca:d1:f7:e7:57:70:46:2a:22:f6:64:86:
06:dc:89:0a:0f:41:ec:0d:1e:ca:37:2b:75:81:d9:0c:ac:63:
0b:59:fe:78:34:b1:50:14:a9:cc:7b:84:d9:a3:74:41:07:03:
cf:47:9b:31:06:d3:71:18:7f:f0:ca:2d:69:01:62:1f:7e:48:
c8:48:69:5a:89:3c:3a:83:67:e5:9a:0a:a0:48:b5:41:aa:db:
fe:fb:87:4f:d2:7d:a0:8b:8e:d4:3f:84:0c:7e:3b:d3:0d:e6:
58:a8:ca:3b:75:b2:56:08:9d:c3:fb:73:f1:67:07:8a:60:5f:
1d:8a:08:88:2d:28:d1:fb:20:14:59:51:5b:6f:95:6f:2e:8e:
f5:5f:43:d2:f6:fe:f8:af:02:86:8f:02:c8:0b:2c:26:d4:92:
57:25:04:0f:93:2f:27:e6:05:75:53:4a:e6:68:f4:61:83:61:
d8:c6:b1:49:52:5b:c4:6a:00:54:8d:f4:4d:0b:9d:39:d3:64:
14:05:45:a3:70:49:12:2a:0b:83:37:38:98:81:90:34:d0:43:
55:b5:f8:fc:5a:c1:fe:ca:30:e5:9e:ee:51:9f:f7:06:67:26:
1d:f6:3c:04:4c:f3:d4:c0:1d:6a:f7:12:36:39:fe:3c:11:5d:
fd:50:f9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:29 2026 by rpki-client