
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
File: 6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json)
Hash identifier: OgIUOY8OtXgXM1DY/4azTeAy0lcklJiDKqCeVn1yZQM=
Subject key identifier: DC:5C:9E:5A:02:95:25:8B:FC:F3:09:08:F6:77:0E:77:AF:AE:95:A7
Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Certificate serial: 07FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
Manifest number: 07EC
Signing time: Mon 02 Mar 2026 02:07:05 +0000
Manifest this update: Mon 02 Mar 2026 02:07:03 +0000
Manifest next update: Mon 09 Mar 2026 02:07:03 +0000
Files and hashes: 1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: 8RTmkVK8nW29hkiunZUPRkdcRzQUALjhqAnya45yvdY=)
2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: Vx9CSg1xbwu8Z8j5boN4uWmjJECKQuxgQNUIUyPWiKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Validity
Not Before: Mar 2 02:07:03 2026 GMT
Not After : Mar 9 02:07:03 2026 GMT
Subject: CN=69a4f0c8-1284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:20:ba:fe:61:5f:d2:9d:3e:2a:ea:f7:55:
fd:12:18:74:93:e3:cc:9e:bf:f4:3b:99:23:a4:a3:
45:e9:34:2a:3c:a7:74:32:c3:24:75:b9:0e:b8:49:
4f:1f:56:20:e6:c5:eb:7a:40:a8:e7:da:e5:ca:4f:
46:f9:db:04:84:bf:12:fa:ff:3f:ec:7d:60:46:03:
98:d7:e1:ca:4f:12:a1:d1:b8:ce:a6:1b:44:21:ba:
76:1f:d7:c3:09:b6:ed:c5:41:7d:08:99:7d:fc:0b:
17:27:52:8f:27:27:a2:8b:8f:1e:7e:31:25:33:fe:
e3:a9:80:5f:b8:6d:17:52:97:f8:77:36:b1:97:ba:
6f:a5:86:a1:a8:84:29:69:00:fb:fe:f0:4e:0b:2c:
cd:36:d1:c5:bd:d7:82:cd:b9:4a:ce:9f:01:3d:bf:
24:5e:6a:44:ef:0f:83:53:e9:97:3b:11:70:13:0b:
c6:e9:6e:6a:48:1b:19:72:59:b0:16:4b:96:23:2a:
95:4e:59:04:76:f5:ad:d8:83:8d:f2:f2:7a:ab:52:
54:2d:32:74:e1:c2:80:87:5a:69:ba:11:ed:01:5a:
8d:2a:f4:da:0f:3f:4b:08:72:90:b1:4a:cf:d6:06:
c1:11:cd:ce:44:e5:16:5b:9a:b9:84:0d:92:d9:81:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:9E:5A:02:95:25:8B:FC:F3:09:08:F6:77:0E:77:AF:AE:95:A7
X509v3 Authority Key Identifier:
keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:53:c5:57:ad:19:e3:2a:c4:1f:3f:b9:2c:61:0d:0d:80:c9:
f3:02:29:ba:8f:b7:1b:fc:46:bc:27:81:f2:57:fe:f4:2e:bb:
c4:a5:c7:dd:a1:4c:ba:41:5b:e7:2c:d1:10:61:fc:53:51:47:
df:08:f0:73:dd:6e:65:03:91:d4:e1:03:67:c0:15:54:4b:7b:
76:38:ea:04:d6:2d:4d:8d:ea:18:0a:cf:c0:af:82:9f:7d:0b:
89:c3:82:8c:dd:32:16:5e:2f:bf:30:dc:62:7b:b1:9d:0a:b4:
80:f6:f8:6a:71:74:5a:f4:52:65:da:03:05:06:a6:b1:de:67:
93:8c:a9:d7:1e:4f:0f:19:41:4e:c5:77:0c:a4:fe:a8:41:d1:
74:05:e7:6d:fa:05:f2:d7:ff:5b:1d:30:1e:7a:da:31:3a:ec:
46:ee:87:f5:1c:50:37:12:a5:47:95:39:fb:80:47:1a:fc:68:
31:ce:91:4a:9c:64:72:fa:ac:55:62:01:94:94:0a:3d:4b:53:
7a:73:08:ab:c0:18:85:e3:d9:2c:c7:ab:d2:35:95:ee:06:f2:
8b:f1:c7:3e:d9:87:fd:b9:94:fe:0f:4e:a6:51:14:6b:66:7a:
7e:1a:01:2c:d1:a1:c6:c0:6f:6a:ab:cd:66:6a:96:d3:5a:9d:
73:2f:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:43 2026 by rpki-client