
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
File: 6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft (raw, json)
Hash identifier: /zjEKnqKuG75+2cOQ0nNxQLVxuW2o447mOxkJCibHPw=
Subject key identifier: 60:AD:27:BE:B3:AE:17:A9:7A:AC:FD:0A:61:BD:20:FA:56:86:38:E5
Authority key identifier: E8:6B:2A:08:1B:4C:FC:A8:0C:A8:BD:C6:61:48:C9:56:FA:78:EE:74
Certificate issuer: /CN=A919B59F/serialNumber=E86B2A081B4CFCA80CA8BDC66148C956FA78EE74
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
Manifest number: 34
Signing time: Sun 01 Mar 2026 10:01:39 +0000
Manifest this update: Sun 01 Mar 2026 10:01:38 +0000
Manifest next update: Sun 08 Mar 2026 10:01:38 +0000
Files and hashes: 1: 6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl (hash: tkwu6WbtFdUpiLFM+z7xHXWPdGAzqRBO+fZmMWXmnKs=)
2: 44AC4920C8F411F0B2A04129C4F9AE02.roa (hash: ZCYK+OMfucCWSUmvJyn+aEP/3WxYDb55XSzl4bwuHVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl
rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B59F, serialNumber=E86B2A081B4CFCA80CA8BDC66148C956FA78EE74
Validity
Not Before: Mar 1 10:01:38 2026 GMT
Not After : Mar 8 10:01:38 2026 GMT
Subject: CN=69a40e82-6d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:98:de:83:c7:13:d5:a3:79:e6:60:87:09:
3c:f9:51:15:a1:83:7f:3a:36:85:26:07:ef:db:e5:
9f:82:8f:f9:76:be:59:81:26:67:56:47:23:2c:66:
df:b0:2d:9b:f4:3c:4b:cc:45:13:4a:1d:87:1b:06:
84:19:76:b2:17:05:26:10:e0:4a:d3:3f:2e:ff:e0:
ae:e9:12:36:59:81:ac:fd:35:91:69:30:d5:c4:e5:
ac:f1:f7:fe:90:0d:39:4e:8e:08:bd:5e:b6:bf:bc:
20:a6:3a:8c:b0:37:f6:aa:45:1e:79:d8:ea:89:9f:
73:f9:d5:a3:7e:93:a1:88:65:e1:a0:75:db:70:87:
10:96:63:38:6c:c7:9c:bb:74:66:fb:60:1e:7a:35:
0e:59:66:68:61:0a:03:c2:0a:d5:be:a4:89:28:16:
f6:bf:88:28:38:29:39:eb:86:00:3e:54:42:cf:26:
2d:59:ac:29:e1:6c:ff:c8:f8:f9:9e:0c:b5:75:12:
d7:2f:9b:50:eb:62:1a:c2:f0:fb:3e:7f:1c:54:dc:
e5:31:30:fd:fa:d6:b8:03:a6:29:7c:5e:c2:6e:b9:
84:00:0d:aa:af:69:09:84:20:b5:8f:e2:8b:92:94:
03:c1:70:a9:93:b4:8e:43:08:10:e5:57:5b:07:a9:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AD:27:BE:B3:AE:17:A9:7A:AC:FD:0A:61:BD:20:FA:56:86:38:E5
X509v3 Authority Key Identifier:
keyid:E8:6B:2A:08:1B:4C:FC:A8:0C:A8:BD:C6:61:48:C9:56:FA:78:EE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f3:fa:82:09:79:a5:9a:80:80:fb:d2:53:31:0e:4b:9e:90:
ca:9d:b3:dc:c3:d2:91:df:dc:ef:27:53:1f:79:e2:4e:18:43:
3b:74:0d:fa:e2:0c:c5:28:1a:a3:35:7c:8a:64:05:94:7f:47:
da:5b:50:c0:b7:86:24:57:32:20:9a:d7:43:67:2a:57:1b:d1:
08:f0:11:b0:bc:4d:f8:06:be:87:83:0c:b2:7a:a6:c4:8d:b2:
e3:8b:96:c3:88:d2:8e:5e:96:4f:ef:5b:23:a5:9e:00:20:a9:
2b:57:5f:ee:f6:f0:99:be:31:a2:25:d9:62:a2:ff:65:00:e0:
57:9f:3b:82:fb:52:f6:6d:9b:4e:47:d0:8f:39:be:53:df:1b:
63:68:21:28:a8:55:e0:1e:7f:e5:95:43:25:b9:ab:4d:43:cf:
ad:b7:bb:09:3e:53:79:09:da:ec:8b:93:69:6d:82:de:b0:2c:
d4:df:c7:e4:23:bb:a7:16:f2:6e:d8:64:5f:3b:83:5a:4b:ed:
ab:76:d5:7f:cd:4d:14:5a:a8:55:ab:2b:7c:22:6d:57:02:d2:
b4:56:db:08:ad:69:06:e6:fd:f2:e9:35:c4:6f:67:ea:20:61:
a7:76:5c:16:c5:27:ba:c7:c6:e1:16:4a:56:6c:09:63:aa:19:
6b:b0:fb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:30 2026 by rpki-client