
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier: 4ZfBpZXLUvKogB890Kq+NoEZy4LGj2XZFasfgr1TG2A=
Subject key identifier: EC:7B:E1:3F:77:81:A0:B2:AF:C7:64:C8:37:64:F6:0C:39:B8:5F:02
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial: 353A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number: 3533
Signing time: Thu 16 Apr 2026 14:49:41 +0000
Manifest this update: Thu 16 Apr 2026 14:49:40 +0000
Manifest next update: Thu 23 Apr 2026 14:49:40 +0000
Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: Lz6YI/XSMHEzxHrsT4M34g8OLast2O5NP4q2Xxcy0kc=)
2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13626 (0x353a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Validity
Not Before: Apr 16 14:49:40 2026 GMT
Not After : Apr 23 14:49:40 2026 GMT
Subject: CN=69e0f705-bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:79:49:95:27:15:0f:df:02:33:16:be:76:c8:
eb:34:75:04:a9:66:d1:23:d3:49:9f:c2:44:a4:28:
ba:4c:ef:d6:0b:d1:4e:a1:4d:64:a7:1e:58:e2:c6:
b6:85:c5:84:25:97:a5:34:16:f9:b2:d0:87:47:f1:
9a:52:cb:80:98:ce:aa:70:ed:f9:8f:98:11:b2:5d:
f1:73:a4:18:3a:e5:cf:5b:00:d9:80:fe:d0:7e:10:
5e:c0:02:a1:62:fe:1a:ff:1e:35:03:b9:87:bd:03:
4d:8c:f0:0b:44:45:b3:c7:93:d9:04:2c:66:eb:ae:
8c:a7:72:55:64:4b:7c:fd:16:be:2a:e8:0b:27:c7:
9c:da:c4:b9:c5:90:54:40:7e:07:b0:9f:8a:23:4b:
c0:e7:b8:76:bd:d3:bd:34:37:4d:2f:c6:c1:cb:7d:
e1:d6:a2:5e:78:e3:a4:8b:70:8d:fc:f0:bb:23:3b:
e1:b3:59:44:b3:62:cc:20:fe:53:2c:5a:5c:c9:63:
de:0e:de:4c:ad:fc:ce:f8:5f:7a:78:3b:4a:d7:20:
cc:e4:ad:ae:b6:63:ee:b9:a3:c0:d0:3f:d5:bb:8c:
a0:2e:05:95:58:68:b7:ea:71:32:41:4a:85:1a:9a:
a3:1c:2a:da:80:e6:5f:34:57:0a:28:64:08:5e:02:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7B:E1:3F:77:81:A0:B2:AF:C7:64:C8:37:64:F6:0C:39:B8:5F:02
X509v3 Authority Key Identifier:
keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:1c:e6:52:ed:78:d9:c7:08:6e:88:bb:fe:2f:5f:de:86:2f:
5a:f6:49:f5:12:27:fa:32:0b:a3:84:e9:1d:63:74:20:20:53:
9c:d1:16:6d:e1:12:f9:09:7f:7e:b8:4a:e2:2d:45:1b:01:c3:
54:15:ea:92:ff:51:33:8b:a2:9c:a9:85:27:e8:b4:f9:82:ba:
71:8f:36:bf:e8:91:51:50:b1:03:80:de:9f:1b:81:e6:41:7e:
79:a0:60:53:7f:5b:73:53:a1:69:15:b9:9b:28:a0:0e:69:fe:
5f:c4:26:88:7b:08:e7:eb:c7:74:75:1c:27:30:4a:4c:1b:84:
ed:f7:94:75:fd:47:6b:41:eb:d1:3a:b6:c8:5f:54:b8:a1:02:
3b:fc:76:93:15:d6:52:3b:4c:12:5c:6d:0f:1a:77:d5:50:ec:
82:5b:a5:58:0b:bb:f5:13:f0:f3:ae:50:52:e6:74:2d:38:2a:
48:c4:e5:58:3a:f2:2d:4c:8a:e7:15:96:f9:33:fb:c2:5f:d0:
0e:cd:a0:a1:f0:52:aa:8b:38:ab:45:bc:18:4b:e0:aa:1d:35:
d5:e9:3e:52:f2:ae:fe:3f:ce:bd:9c:62:4b:f1:2f:c8:38:23:
02:19:34:20:44:e9:3f:14:33:d7:45:df:20:c1:37:b8:9a:9a:
c1:07:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:03:55 2026 by rpki-client