
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json)
Hash identifier: xx4vLKou77L6BeVBiBlhSrK8SLnLX7aSkjB89gecVcE=
Subject key identifier: 97:4E:CC:A0:BA:FB:27:23:8B:11:13:50:5B:CC:A8:99:6B:B7:56:24
Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
Certificate serial: 0550
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
Manifest number: 0549
Signing time: Sun 01 Mar 2026 00:03:07 +0000
Manifest this update: Sun 01 Mar 2026 00:03:06 +0000
Manifest next update: Sun 08 Mar 2026 00:03:06 +0000
Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: 4g9Tj5rxX0u2mxSazX+Pgr/76B5AeiRC4ITYCHSqbD0=)
2: E11714EE89E711F0B91AE62DC4F9AE02.roa (hash: wDRLIHrvxrqmI7nnU4ubgr079aqianE5n+pmFlnwcnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
Validity
Not Before: Mar 1 00:03:06 2026 GMT
Not After : Mar 8 00:03:06 2026 GMT
Subject: CN=69a3823b-03f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:7d:dd:0d:a2:56:43:bd:d4:66:01:92:d6:
40:a8:a2:b9:52:07:e9:a0:75:07:17:f7:13:d8:16:
a2:bf:5a:ee:21:e0:a3:b7:f4:5b:60:81:b1:ad:25:
68:33:6e:a2:bc:cb:14:52:a3:f8:01:7c:9e:08:c1:
d7:c9:80:30:76:75:f4:ba:24:22:06:57:91:68:93:
2e:9b:52:fe:ac:f7:37:49:54:92:73:cf:9c:61:78:
49:79:58:33:d7:59:19:2a:6c:10:68:93:c6:31:31:
10:ac:ba:10:5a:c8:9a:c3:d6:8d:cc:65:99:98:f2:
5d:ab:ff:f0:e0:27:4d:5a:b6:db:78:f2:b1:30:56:
3c:c8:1d:22:ae:95:81:34:c6:21:58:84:c6:54:cd:
17:21:0e:89:9a:4a:bf:9a:20:66:44:ce:27:ba:cf:
da:e4:aa:e2:d3:5b:c3:01:5c:08:66:11:5e:e2:ef:
62:08:59:70:df:3c:bb:6e:8f:63:5a:c9:9d:83:a3:
ce:dc:3e:51:11:c3:9a:6d:21:af:e2:b9:d8:0c:18:
e6:0e:f6:01:df:02:1d:a2:d0:96:24:e0:e0:c3:26:
28:33:67:00:ce:3e:4a:3d:c0:c1:cf:5d:48:92:fc:
d9:fa:9c:e8:a6:ab:2e:fa:ec:69:cc:6c:2d:18:65:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:CC:A0:BA:FB:27:23:8B:11:13:50:5B:CC:A8:99:6B:B7:56:24
X509v3 Authority Key Identifier:
keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:56:95:d5:af:f1:e8:73:12:12:51:9a:98:01:d1:0e:51:
35:24:01:92:cf:a7:b2:5e:d9:f3:9e:ac:a1:f5:12:59:dd:be:
93:58:bb:26:27:27:5c:5d:c5:65:a6:d5:f6:2a:18:6e:d4:1d:
e6:ea:bb:95:0a:7b:f6:5e:94:ef:6e:55:b7:8f:36:fe:3a:3b:
00:09:a4:cb:b7:1d:2a:14:ec:a5:dc:66:92:8a:f3:ff:c1:f0:
bd:ba:2e:bc:a5:4c:35:40:e4:02:8a:5d:5a:e0:38:50:44:1a:
8c:04:0a:a6:be:bb:57:29:92:03:25:ea:54:46:bf:fb:92:ed:
43:9e:8e:56:8a:f0:41:f0:90:80:c1:90:7a:36:b0:52:88:0f:
60:25:d3:6d:6b:dc:83:56:46:8c:ae:d3:be:33:41:02:a3:12:
b8:88:dd:29:2b:60:d8:45:e7:da:c2:2a:16:20:f2:cb:df:b8:
9a:5e:55:e2:f6:96:fa:51:65:84:97:9d:ef:5c:7a:cf:36:37:
98:53:c1:2c:92:b9:3b:4f:de:26:b9:4e:21:86:97:1b:ee:94:
a5:d9:88:14:72:b4:03:0d:35:fe:6c:74:55:b7:de:89:70:89:
03:45:24:ab:81:da:10:52:d2:32:be:8e:6f:9a:c1:d7:dd:1c:
2d:9f:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:32 2026 by rpki-client