
$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json)
Hash identifier: d2b8PKkEWlwXlZkyrm47RniETgqE/n1v5X2gjLjhkg8=
Subject key identifier: EF:7C:20:3D:D2:86:55:23:59:F5:5E:5D:E3:DB:1D:E6:27:B1:5D:15
Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
Manifest number: 01AC
Signing time: Fri 17 Apr 2026 03:45:30 +0000
Manifest this update: Fri 17 Apr 2026 03:45:30 +0000
Manifest next update: Fri 24 Apr 2026 03:45:30 +0000
Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: hYvExC8uN4zx+iMoU2I8hVJ2/9Ib74oPXeH615xlWlQ=)
2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 8IJddaauAbPRZ+tJveuySl440+OqP5ny57SJigufBM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Validity
Not Before: Apr 17 03:45:30 2026 GMT
Not After : Apr 24 03:45:30 2026 GMT
Subject: CN=69e1acda-793e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:40:42:36:ff:0d:07:21:31:d9:42:bf:ae:
0b:06:e4:f0:f6:a3:47:26:ae:05:a8:b1:2e:ee:d1:
1e:6c:ac:e3:38:99:cd:bd:4c:31:77:b3:f0:5d:77:
84:ee:68:a2:80:c0:f2:53:77:8d:3e:11:a7:ae:97:
98:15:53:77:39:42:7b:86:38:45:b6:76:b5:11:72:
b0:e7:7f:38:b6:4c:b7:1e:16:7c:25:a2:53:38:0e:
43:ae:57:9e:65:28:7d:9f:f7:9f:5a:31:4c:c2:49:
0f:73:67:ff:a7:00:0e:0e:00:d1:5a:fc:10:67:c1:
3e:5c:48:d6:71:19:e8:34:fd:f2:8a:f0:d4:f0:d6:
61:0f:6d:80:95:02:fc:bc:9b:ba:e8:81:15:30:48:
7d:cc:d6:66:9f:d0:08:71:0e:0e:5c:bc:6e:66:c4:
e5:06:02:c0:88:c8:8b:91:4a:a3:46:7e:bb:76:4d:
96:e5:ed:a8:f0:7e:c8:92:fa:89:26:fe:39:4d:7d:
fe:68:4b:9b:f0:5e:dd:c7:9d:99:b3:59:ec:cf:3a:
df:0b:f0:97:87:5e:4b:c7:2a:8e:4c:dd:94:85:5c:
63:af:e3:66:cb:37:00:cc:4f:ed:90:87:75:ae:9b:
6d:8f:a0:e8:47:85:b1:69:dc:e8:7c:47:29:05:22:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7C:20:3D:D2:86:55:23:59:F5:5E:5D:E3:DB:1D:E6:27:B1:5D:15
X509v3 Authority Key Identifier:
keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:6e:a9:08:82:af:fb:7d:ff:10:5e:b9:13:af:85:76:f8:
9e:fe:62:fc:24:fc:7b:76:1a:60:3e:d4:85:da:32:89:1d:f8:
f3:c2:7d:60:72:35:27:03:b8:3f:04:82:20:5d:e0:13:cc:42:
48:2f:de:bf:ba:14:93:f8:65:31:a8:d6:dc:e1:bd:7b:31:d0:
15:b0:85:3b:91:f1:94:e2:5d:cc:be:4e:fa:4d:45:82:4e:14:
03:18:db:d6:46:83:e4:8b:c9:be:bf:0d:32:ff:f0:0e:aa:d1:
51:e9:6a:cd:3b:44:3d:e2:97:ec:8d:3f:c7:f5:82:02:23:58:
a9:a1:13:18:37:ae:45:a8:7a:8f:ab:cc:4a:13:c4:fd:5e:0a:
f1:5d:a0:2c:29:3a:2a:9a:41:ea:6f:9f:0a:91:9f:fe:9d:02:
e5:c1:c8:d5:6f:79:f9:96:b7:75:0c:94:f5:28:bd:5f:66:24:
fd:40:17:cc:93:f9:d8:42:83:1a:19:09:a3:a5:f5:f1:d7:06:
54:b2:c5:68:97:8c:1a:93:8b:35:f4:da:5b:54:b7:cf:db:04:
7f:58:49:cd:ef:89:a2:3d:2a:72:78:51:5f:08:01:23:d4:1d:
2d:c3:ef:0b:28:a6:05:14:da:46:73:55:ee:f9:61:39:f0:bb:
3a:0b:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:40 2026 by rpki-client