
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json)
Hash identifier: er0vV9UkRMIfACkqwngA+7c/tQTFLmShzIheDLz8yNU=
Subject key identifier: EC:3D:01:84:A4:80:0E:E3:FC:54:30:67:5D:C8:5D:FB:3C:CB:08:2D
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial: 0C49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
Manifest number: 0C41
Signing time: Sat 28 Feb 2026 18:55:41 +0000
Manifest this update: Sat 28 Feb 2026 18:55:41 +0000
Manifest next update: Sat 07 Mar 2026 18:55:41 +0000
Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: BSGqAwgUpLs8EfVc9fS36r1fRX0r7v1zwGh/lBX3eII=)
2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: bvU87sPankSR4y/0B0suj/VghvgnUkOI9EyFZQQUQyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3145 (0xc49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
Validity
Not Before: Feb 28 18:55:41 2026 GMT
Not After : Mar 7 18:55:41 2026 GMT
Subject: CN=69a33a2d-8378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:bb:e7:17:8b:01:91:da:a7:98:cd:27:f2:
6e:22:de:d1:dd:20:ac:b0:2e:ad:9f:17:d4:8c:d0:
b5:26:e1:8d:95:d7:06:70:ae:9f:a1:ee:3c:10:e2:
9d:91:34:57:c7:5b:ef:0c:f2:a7:cb:37:6d:4a:47:
b4:86:63:02:90:96:a2:c1:2c:da:98:6b:2e:7f:58:
b4:38:cc:54:5e:59:2d:8d:cb:7b:d8:26:91:84:fa:
28:e9:71:d2:2a:db:4d:4a:2d:65:b1:ac:2b:53:e8:
f1:5e:e6:f8:4b:89:8c:cd:31:81:b3:ba:eb:09:0a:
e4:e0:76:88:7a:d4:98:38:25:9d:d1:87:03:83:ea:
9e:ef:42:cb:c2:dc:9c:c8:e1:23:8f:3e:1f:41:e8:
5c:90:cf:73:69:fe:3a:06:93:a5:f2:40:cf:1a:0d:
55:b0:f4:b4:e4:de:b2:c1:e0:d6:b5:4f:98:50:48:
8a:e3:42:72:50:f8:70:61:98:cd:70:e4:19:1a:27:
a8:76:f9:54:6e:c9:fa:0f:9e:07:3b:ef:b3:0f:a8:
fd:56:cd:ea:08:11:4f:b4:53:0f:a6:fc:8d:09:ca:
da:c1:e9:fc:47:c6:86:82:1c:36:f9:8c:57:0e:d3:
da:f3:09:d5:76:91:8d:46:91:6b:d2:af:43:04:90:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:01:84:A4:80:0E:E3:FC:54:30:67:5D:C8:5D:FB:3C:CB:08:2D
X509v3 Authority Key Identifier:
keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:ec:20:87:0f:bb:e4:4a:24:7c:21:36:eb:95:23:c8:5e:
94:cc:b5:49:ea:37:1a:3e:cf:07:63:50:ed:9d:79:d6:5e:87:
c2:32:71:fc:af:de:eb:fe:43:40:78:e7:74:6b:cc:b9:7f:10:
8e:89:a6:17:aa:70:64:7c:bf:9b:22:f4:2d:a2:d7:4b:d5:2b:
c4:85:89:71:a1:72:39:f7:d2:e1:16:64:c0:87:28:a2:39:b6:
7b:2c:19:b0:61:fe:ec:5a:5a:89:24:a9:ec:fd:58:99:a0:5f:
c5:31:05:51:b3:de:b8:47:94:7e:50:c8:df:5b:9e:0f:bb:ba:
de:f4:c5:46:c1:96:54:2d:a2:37:53:f6:9e:fd:29:57:fc:3d:
74:39:e5:04:b5:e3:3e:50:fd:73:4d:41:f4:cb:ea:fe:97:26:
ad:f8:8e:62:80:69:6d:20:4a:eb:da:11:90:ce:6c:fb:f9:9c:
69:e5:38:fa:b2:a6:bd:5b:74:20:17:be:6f:2e:8d:02:0e:7a:
47:01:8a:42:1a:be:45:6d:95:44:f3:7c:29:92:fe:bb:06:18:
1f:a7:fc:3a:6e:4c:a8:37:af:67:4e:70:21:64:69:ab:10:9b:
4e:57:89:68:99:f1:ad:8e:37:96:2d:4e:be:c3:b5:fa:43:47:
30:98:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:46 2026 by rpki-client