
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
File: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json)
Hash identifier: TvM9Yv/ck8zLw7uAByFEOWJCiN1+Eavi3nV02N7NOG0=
Subject key identifier: 49:9F:88:5B:B6:A9:50:87:D1:46:9D:3B:A6:44:52:9F:8D:C2:76:12
Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68
Certificate issuer: /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
Manifest number: 0139
Signing time: Sun 01 Mar 2026 06:25:54 +0000
Manifest this update: Sun 01 Mar 2026 06:25:54 +0000
Manifest next update: Sun 08 Mar 2026 06:25:54 +0000
Files and hashes: 1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: sx/WytdqhfZgpXznUbexvWGeFDbJbvLwxLeciG/2Icg=)
2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl
rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
Validity
Not Before: Mar 1 06:25:54 2026 GMT
Not After : Mar 8 06:25:54 2026 GMT
Subject: CN=69a3dbf2-7dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:0c:9f:44:47:f5:7f:1e:7b:4e:34:00:93:
e1:a1:3e:46:88:ed:19:ea:b1:53:54:fb:4f:36:55:
8a:e0:5a:c3:19:02:9a:b7:16:66:31:58:4b:b3:7a:
67:dc:b3:8e:35:90:dd:3e:b5:33:2e:ef:f2:a9:ae:
b8:dd:70:9f:79:8a:ac:ec:4a:03:96:a3:bd:54:b1:
88:0b:12:62:0b:b4:e2:67:50:ef:8e:ef:6a:d0:89:
2e:f2:be:88:46:eb:84:7c:4d:0d:67:05:59:6b:bb:
ba:73:7e:f3:99:47:c6:66:03:f7:9e:ad:b8:24:3a:
03:37:be:d7:c0:c0:91:67:84:9d:b9:27:21:0e:d7:
b7:e6:69:b9:8a:41:40:f7:4f:6a:9c:82:b5:23:94:
56:6d:67:8a:2a:e0:64:3c:05:c7:48:f8:93:a7:ba:
85:da:7e:e6:d4:8f:6a:cd:11:b0:b6:b1:4a:b5:9d:
b8:7e:0d:9e:f3:04:f8:88:c4:89:2e:45:be:7e:89:
34:5d:29:e6:4c:ff:79:ea:78:b8:82:62:75:a6:09:
36:7a:ee:e9:9a:f0:5c:43:93:32:f0:c1:82:dc:bd:
76:9d:eb:19:63:2c:91:e0:f7:ea:26:ba:f5:62:70:
b6:81:0d:fb:f2:66:49:d2:d9:26:27:5f:02:3d:54:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:88:5B:B6:A9:50:87:D1:46:9D:3B:A6:44:52:9F:8D:C2:76:12
X509v3 Authority Key Identifier:
keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:e3:92:e9:41:51:ed:78:99:29:8f:d1:d5:1b:50:e9:6b:
8c:e7:f0:e6:e8:ed:35:c6:c6:25:00:85:d7:14:3e:ab:cc:68:
bf:f3:13:65:0a:cc:03:6c:f7:09:61:ae:62:66:5d:0a:99:45:
aa:a3:97:52:0b:55:4b:b6:cf:dd:67:46:b1:89:f7:c8:8d:00:
77:32:d5:eb:c7:66:da:8f:b3:25:22:8e:98:f4:c7:d0:64:1a:
c6:76:e7:a6:8b:f2:82:e6:d2:46:f7:4a:cf:a4:7e:e5:b7:8c:
08:37:96:5e:75:3d:d4:41:46:8e:49:91:18:0c:1b:10:a4:bb:
d5:40:b1:cc:04:13:5c:a4:f2:ab:63:e7:da:6b:96:38:5a:6c:
68:30:11:51:42:1e:82:b8:71:a5:ee:dd:ed:f4:0b:39:38:e5:
cc:30:d7:57:5a:cf:ce:d4:6c:59:32:ef:5b:02:2b:fd:3c:73:
81:b0:da:90:75:d9:f5:6c:89:6a:40:14:77:b6:da:a7:7e:02:
ab:b5:7b:eb:1c:6f:95:9f:2c:13:32:73:e9:66:1f:6e:71:d6:
89:54:c2:ef:10:99:bf:c6:e7:a5:8e:59:b3:2f:dd:04:81:92:
4a:32:45:26:6d:2b:5c:49:2e:2d:32:69:73:ea:1a:5a:51:e4:
d2:28:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:26 2026 by rpki-client