
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json)
Hash identifier: 5deygPGDwDp9Rrn1CH7ANR1khRt9Va5C+KlY+ayE4T8=
Subject key identifier: 9A:B3:11:3A:95:E1:D3:42:07:CA:16:46:C7:F2:41:A7:52:AC:12:03
Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86
Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
Manifest number: 020E
Signing time: Sun 01 Mar 2026 03:43:31 +0000
Manifest this update: Sun 01 Mar 2026 03:43:30 +0000
Manifest next update: Sun 08 Mar 2026 03:43:30 +0000
Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: RRgZtdSrFSQq8Jj1pWrkwAb+bV6VZ12fbMwhgmaljC8=)
2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: hIzR8zQHF9iXKmM1Y26mLPHbXqodEuNcMXt0RS8n034=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl
rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
Validity
Not Before: Mar 1 03:43:30 2026 GMT
Not After : Mar 8 03:43:30 2026 GMT
Subject: CN=69a3b5e2-45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:42:f7:e8:9d:01:9f:f3:0c:80:c5:2d:af:
ab:95:8c:5b:7a:ee:f5:51:bd:ca:1f:72:30:f7:5d:
b2:a4:db:60:11:43:e3:47:60:1c:be:29:3c:de:f2:
ee:7e:b8:bc:c4:22:1b:cd:56:66:38:44:77:b7:52:
5e:47:36:11:f6:64:a7:dc:31:9d:cd:86:02:27:81:
96:a4:fe:e1:cb:f2:a7:17:99:0f:67:fb:dd:b1:7b:
6c:0e:ff:54:c1:ab:8c:de:b3:fd:af:53:16:8f:52:
c6:dc:1e:6e:ab:33:4e:f9:79:22:14:0a:41:8e:1d:
5c:30:f1:b7:d5:7e:92:dc:33:19:6d:60:eb:06:bd:
86:de:11:b9:36:fd:ef:81:e0:e8:e3:76:7f:03:54:
a8:3b:52:86:05:64:5d:9c:95:fe:e9:56:d2:cd:30:
5c:94:36:c7:7a:b9:31:12:2a:85:dc:ac:28:ed:cf:
2f:e2:b8:8f:4f:98:ee:3c:0b:87:bf:05:e8:14:9c:
d7:04:65:0d:a7:97:13:7f:99:ba:3c:c6:52:2a:ff:
4e:e7:23:9d:b6:82:96:4a:ce:ac:d4:5c:60:7f:4b:
57:2c:a3:f0:f5:c9:04:07:d6:e1:d1:1c:3a:7b:cb:
f9:bf:1f:dc:87:db:fc:71:b2:7b:08:81:5c:bb:6d:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:11:3A:95:E1:D3:42:07:CA:16:46:C7:F2:41:A7:52:AC:12:03
X509v3 Authority Key Identifier:
keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:38:13:3e:9a:2c:05:d7:4b:66:a9:3e:e2:dc:65:91:87:17:
97:e1:ad:40:f6:49:bc:5f:51:1d:22:e5:6f:44:3b:4b:33:53:
ac:ce:5d:2c:9b:b1:2f:fa:47:2c:31:37:8e:61:4a:a8:77:12:
93:6d:35:61:17:0c:39:c2:1c:24:c3:6d:57:bb:7e:64:81:fa:
ee:63:76:8e:c3:b8:4e:cc:1a:dc:02:42:ea:7c:e9:44:c6:ee:
eb:32:13:4c:2b:fb:16:ee:e6:14:5e:25:f8:c6:cf:9a:ad:fb:
28:bc:49:3d:4e:12:dd:61:6a:e5:b4:b9:05:ec:3c:00:fc:71:
2a:77:82:cf:a2:55:16:4d:94:07:44:00:af:5e:fb:e6:d6:b0:
47:33:29:9b:56:bd:44:ef:95:7a:c6:b4:2d:14:7b:73:c1:16:
51:33:27:1c:cc:a1:13:03:76:c2:3f:23:c7:96:b3:62:9d:7e:
69:5f:52:da:aa:16:85:d6:ee:91:8d:e1:f0:49:86:33:b5:63:
ee:c7:2e:c4:6e:4b:bb:90:b9:9d:b1:08:c1:13:38:7d:50:4a:
55:55:a6:11:39:66:bf:69:2e:a2:79:9e:76:0b:e7:a2:34:19:
16:90:4e:a4:eb:7a:a1:78:6d:9a:7b:61:09:17:64:1f:95:99:
07:8a:03:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdFNUQxMTAvBgNVBAUTKDBCQTY4MkU4MDM4RDc3MUEzNzA3RUFGQTgyRkREMDRD
NDI5QTRGODYwHhcNMjYwMzAxMDM0MzMwWhcNMjYwMzA4MDM0MzMwWjAYMRYwFAYD
VQQDDA02OWEzYjVlMi00NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoVVC9+idAZ/zDIDFLa+rlYxbeu71Ub3KH3Iw912ypNtgEUPjR2Acvik83vLu
fri8xCIbzVZmOER3t1JeRzYR9mSn3DGdzYYCJ4GWpP7hy/KnF5kPZ/vdsXtsDv9U
wauM3rP9r1MWj1LG3B5uqzNO+XkiFApBjh1cMPG31X6S3DMZbWDrBr2G3hG5Nv3v
geDo43Z/A1SoO1KGBWRdnJX+6VbSzTBclDbHerkxEiqF3Kwo7c8v4riPT5juPAuH
vwXoFJzXBGUNp5cTf5m6PMZSKv9O5yOdtoKWSs6s1Fxgf0tXLKPw9ckEB9bh0Rw6
e8v5vx/ch9v8cbJ7CIFcu202kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqzETqV
4dNCB8oWRsfyQadSrBIDMB8GA1UdIwQYMBaAFAumgugDjXcaNwfq+oL90ExCmk+G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0U1RC80MTIyQ0Q5Q0Yw
QjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4bzNCLXI2Z3YzUVRFS2FU
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M2YUM2QU9OZHhvM0ItcjZndjNRVEVLYVQ0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0U1RC80MTIyQ0Q5Q0YwQjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4
bzNCLXI2Z3YzUVRFS2FUNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGTgTPposBddLZqk+4txlkYcXl+GtQPZJvF9RHSLlb0Q7SzNTrM5dLJuxL/pH
LDE3jmFKqHcSk201YRcMOcIcJMNtV7t+ZIH67mN2jsO4Tswa3AJC6nzpRMbu6zIT
TCv7Fu7mFF4l+MbPmq37KLxJPU4S3WFq5bS5Bew8APxxKneCz6JVFk2UB0QAr177
5tawRzMpm1a9RO+Vesa0LRR7c8EWUTMnHMyhEwN2wj8jx5azYp1+aV9S2qoWhdbu
kY3h8EmGM7Vj7scuxG5Lu5C5nbEIwRM4fVBKVVWmETlmv2kuonmedgvnojQZFpBO
pOt6oXhtmnthCRdkH5WZB4oD0g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:13 2026 by rpki-client