
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier: AgN6r8oD/s3S+dDskzUhbN3y3YXX7CHnW+Kal9Bes8A=
Subject key identifier: D5:44:3C:45:11:45:89:F7:9A:A1:9C:D3:6F:25:E7:55:7D:1D:C4:77
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial: 0D38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number: 0D0C
Signing time: Thu 16 Apr 2026 18:05:06 +0000
Manifest this update: Thu 16 Apr 2026 18:05:05 +0000
Manifest next update: Thu 23 Apr 2026 18:05:05 +0000
Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: tfHHN7cPuLG6P8sbkWWqMbAvW7z/RJZkVYb2PRURiRY=)
2: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: bxdAOGEj/+Udp1jV0BPkX+3yhlPb74LiIfGot0pNRBw=)
3: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: rFeU6+VRmAkqArzk8m/u7RZ8+bahOhmzZ3Bcpw03nLw=)
4: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: wE1GPx9wnoFcfEYGMUAJqz9RuXU5yBbJIWxjAwW0zyI=)
5: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: WI26tucy3cSYO4sE9GmP72fSFg+gB2AzQ5GmMyowLBY=)
6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: KIcJRDk3S7+rRmk7CaiKtvN5123l+l7hzY10/IQxIQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Validity
Not Before: Apr 16 18:05:05 2026 GMT
Not After : Apr 23 18:05:05 2026 GMT
Subject: CN=69e124d1-f298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:59:08:af:38:cd:6b:e3:fb:f1:83:90:77:
d8:4d:82:da:34:cd:10:e2:61:a2:9b:28:56:8b:f0:
07:df:89:b2:2f:c9:1a:d9:d3:8d:21:73:47:f7:a7:
77:e0:0a:69:ce:45:36:05:be:5d:00:7a:7d:8c:64:
39:bd:59:1f:7d:24:bd:00:45:1e:ca:66:20:e8:aa:
ed:3b:6d:e7:e9:7b:84:dc:d8:a4:5a:37:6a:f1:8d:
8f:c9:06:94:c4:44:c1:3f:41:55:c3:15:fb:f2:da:
ae:1c:d7:d6:40:d6:e7:95:7d:0b:41:18:d3:97:05:
bd:e6:10:fe:70:df:9d:24:8a:7c:13:5f:c5:62:56:
30:54:e6:40:1f:28:a3:4b:9a:0c:24:14:26:f5:3f:
69:22:53:4e:6c:3d:47:af:e9:ac:08:8a:38:d3:c3:
bb:66:74:e2:87:3e:9c:4c:c5:43:e3:9e:35:22:43:
5b:cf:8c:fc:50:40:5e:e2:a2:8e:8d:67:c3:8a:2b:
9f:60:8e:78:03:bf:e6:96:37:bd:97:5c:c2:d5:3a:
22:22:c0:7c:65:b9:99:94:37:88:df:fb:70:55:26:
d1:64:cf:e5:13:a9:54:f5:4d:f3:50:ff:04:c8:56:
a2:00:57:b6:e7:f9:2e:c6:05:51:12:8e:e1:69:59:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:3C:45:11:45:89:F7:9A:A1:9C:D3:6F:25:E7:55:7D:1D:C4:77
X509v3 Authority Key Identifier:
keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e1:30:af:fc:04:56:58:5e:12:10:46:02:a0:ee:94:8f:e1:
db:eb:57:bc:e0:49:27:29:39:e4:6e:13:a2:5d:f6:3a:df:2e:
34:56:77:bd:87:2e:4a:ed:11:0b:c4:28:6a:dd:c5:a8:2c:bc:
0b:18:37:65:06:45:e4:56:c9:b9:2c:3e:6e:75:13:12:fc:12:
97:af:15:f3:f8:24:ec:f2:33:a9:12:fe:ce:3e:85:89:d8:c1:
48:e0:b7:ec:b3:7e:2f:a8:6b:5e:16:74:54:2e:cc:63:ef:6a:
27:7d:69:c6:d3:f6:46:e2:8e:5b:2a:f4:7f:4f:e4:9d:e3:d7:
fb:98:58:1a:e7:b1:0f:13:9b:c8:c0:85:b4:87:b2:52:8c:29:
1d:7a:0a:d2:ee:7b:7e:cd:3d:1f:08:49:62:ce:45:87:d9:97:
de:df:13:1a:dd:d2:72:10:a8:51:76:11:c7:cc:0f:70:3b:72:
9c:b0:be:e3:2c:47:d6:33:cd:30:57:e8:48:d6:c0:a3:a7:59:
58:5d:be:49:a1:67:9d:aa:53:2b:b6:f6:6e:33:79:36:0e:39:
f9:e9:5f:b6:2d:e3:12:fe:48:70:37:60:2c:58:5b:81:32:5f:
a0:41:b2:29:d9:4b:a2:fe:f7:69:09:66:e2:41:d4:8c:75:6d:
9d:46:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:16:55 2026 by rpki-client