
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json)
Hash identifier: k4O/d4YxLCFrOaZmlhs1O99A7p9tDRF4I3BBrBRI6Rk=
Subject key identifier: 12:9F:49:06:B5:33:F5:2B:5D:44:A6:34:54:C6:EA:8F:AF:44:D8:7D
Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Certificate serial: 0483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
Manifest number: 0478
Signing time: Sun 01 Mar 2026 00:48:08 +0000
Manifest this update: Sun 01 Mar 2026 00:48:08 +0000
Manifest next update: Sun 08 Mar 2026 00:48:08 +0000
Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: rRPM5m4Vsu559gKZcsT+lfWCyi3bxx5shsh3ywo5/fQ=)
2: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: RYTGTaJo9tgeLfdLTz9lnkOel+5ud5H41Dw2zm5x3dM=)
3: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: NYWD2JqusfrB1Pm/fEvYX0+WP2e5BK0diIi0VyFEvIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Validity
Not Before: Mar 1 00:48:08 2026 GMT
Not After : Mar 8 00:48:08 2026 GMT
Subject: CN=69a38cc8-719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:04:d9:ac:60:53:05:9d:73:45:31:88:38:57:
76:cd:ce:c3:4e:14:61:b9:18:9f:d1:80:4d:ef:7d:
1d:b9:56:c5:2c:de:e8:65:38:5c:84:9e:16:87:7e:
ae:d7:10:06:f0:49:ac:03:38:b8:61:a3:5b:41:8e:
4e:de:c7:10:8e:40:66:2b:71:78:c2:eb:5d:f7:72:
1e:77:d5:8c:e9:ad:ce:a2:a6:60:c1:12:f0:c9:7c:
bb:9a:74:74:b5:18:7c:f5:95:50:2d:d5:15:42:f6:
fc:20:9f:59:86:56:88:9c:22:82:bb:ab:ca:95:d0:
3f:e7:a0:4b:33:95:41:85:43:7c:74:3c:e7:5a:a6:
31:10:52:b6:4b:c5:d0:7b:58:e0:4d:9b:ee:fd:eb:
d7:9e:30:a5:66:ad:89:12:a3:75:06:86:e3:ad:6d:
b1:96:e3:51:32:a5:c1:91:92:1e:bd:af:33:d4:7e:
bf:ce:7b:d7:c6:0f:55:52:27:c5:cf:7a:d6:f8:2e:
bf:4d:ef:ac:6f:1b:73:da:9e:54:45:09:81:82:64:
69:b5:24:d2:1f:fa:12:58:34:c2:4e:b1:96:d5:e3:
be:e4:b0:54:51:32:d7:dd:f9:43:d9:9d:40:cd:bd:
c2:61:53:ee:df:21:66:b5:c7:84:ab:cd:a0:c5:e6:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:49:06:B5:33:F5:2B:5D:44:A6:34:54:C6:EA:8F:AF:44:D8:7D
X509v3 Authority Key Identifier:
keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:7a:b5:4c:db:2a:17:56:6d:ba:a2:41:92:cb:f8:cc:0a:
47:27:e9:bb:e8:65:a2:97:9d:fd:be:ab:69:70:9b:e4:bd:99:
20:78:2d:2f:76:10:06:4d:03:a6:e3:cc:2e:22:b7:87:4d:37:
9b:c1:92:23:ea:fa:9f:6b:16:9e:4b:85:bf:63:85:6a:08:c7:
58:d8:68:5e:85:46:a1:6c:3b:0e:24:b1:14:15:3d:d8:52:05:
f6:4d:be:04:8c:36:6b:fb:81:cb:7d:03:6a:f3:14:fd:44:d2:
22:95:89:b6:bf:c4:28:c2:d8:d7:4b:bd:2a:c3:25:b3:2f:b3:
f8:3c:db:88:8b:e1:9b:ce:53:15:e8:8f:f0:bc:fd:cf:f1:bf:
54:c2:1b:b4:fb:da:e5:29:1e:06:fc:67:00:32:c6:5b:a6:3c:
d2:07:4d:96:a4:90:da:69:8c:2a:3e:85:f3:fd:39:90:86:65:
db:2d:e5:4e:cf:5d:4e:1c:c5:ed:02:51:72:1a:22:37:49:32:
c1:7c:b9:d5:40:69:10:86:4f:c4:e4:5a:51:9b:a8:46:64:36:
f8:92:dc:f6:9d:c3:3c:4d:be:a2:44:bc:06:46:77:90:b8:cd:
e8:a5:2f:5d:48:04:db:5c:14:29:15:5a:a6:11:d5:64:b0:6b:
f9:d3:b7:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5
RjlDODc5NDQwHhcNMjYwMzAxMDA0ODA4WhcNMjYwMzA4MDA0ODA4WjAYMRYwFAYD
VQQDDA02OWEzOGNjOC03MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+ATZrGBTBZ1zRTGIOFd2zc7DThRhuRif0YBN730duVbFLN7oZThchJ4Wh36u
1xAG8EmsAzi4YaNbQY5O3scQjkBmK3F4wutd93Ied9WM6a3OoqZgwRLwyXy7mnR0
tRh89ZVQLdUVQvb8IJ9ZhlaInCKCu6vKldA/56BLM5VBhUN8dDznWqYxEFK2S8XQ
e1jgTZvu/evXnjClZq2JEqN1BobjrW2xluNRMqXBkZIeva8z1H6/znvXxg9VUifF
z3rW+C6/Te+sbxtz2p5URQmBgmRptSTSH/oSWDTCTrGW1eO+5LBUUTLX3flD2Z1A
zb3CYVPu3yFmtceEq82gxebJQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKfSQa1
M/UrXUSmNFTG6o+vRNh9MB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE
NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq
ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV3Z6tUzbKhdWbbqiQZLL+MwKRyfpu+hloped/b6raXCb5L2ZIHgtL3YQBk0D
puPMLiK3h003m8GSI+r6n2sWnkuFv2OFagjHWNhoXoVGoWw7DiSxFBU92FIF9k2+
BIw2a/uBy30DavMU/UTSIpWJtr/EKMLY10u9KsMlsy+z+DzbiIvhm85TFeiP8Lz9
z/G/VMIbtPva5SkeBvxnADLGW6Y80gdNlqSQ2mmMKj6F8/05kIZl2y3lTs9dThzF
7QJRchoiN0kywXy51UBpEIZPxORaUZuoRmQ2+JLc9p3DPE2+okS8BkZ3kLjN6KUv
XUgE21wUKRVaphHVZLBr+dO3MA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:06 2026 by rpki-client