
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier: 7sLxdsJIDcUh+cy6Q0FMRc0byzsXQzgnkxRwhjA7f5A=
Subject key identifier: 11:F1:A8:AA:F3:02:40:A1:72:B3:D3:46:FE:00:C1:1C:75:49:E4:EA
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number: 0277
Signing time: Mon 02 Mar 2026 01:06:20 +0000
Manifest this update: Mon 02 Mar 2026 01:06:19 +0000
Manifest next update: Mon 09 Mar 2026 01:06:19 +0000
Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: 3Oxm2doJevhAKGnKQv2nioCWoKKjgh6QMCQN7J0WlcQ=)
2: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ufXIWT3ybJ8GsLB+9LFHnYVpVRoxtUOEddi9vIDDRZ8=)
3: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: 0TEewgELmV5zVXvWVafqWeimsKRDC+bmdch2A5FjSG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Validity
Not Before: Mar 2 01:06:19 2026 GMT
Not After : Mar 9 01:06:19 2026 GMT
Subject: CN=69a4e28c-7431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:c9:47:7f:84:2c:4f:6d:29:b0:9e:36:60:
ea:70:90:83:d3:d8:6c:fd:a2:02:6c:6a:74:6c:93:
2a:f6:78:94:1f:d6:25:36:d8:32:6d:fe:4d:c3:71:
48:fb:ad:1a:fb:e6:07:fe:99:12:f6:48:e4:c5:72:
3d:c4:32:03:c8:be:67:cc:97:e8:65:1c:77:27:d5:
63:b4:50:02:b8:96:ed:f9:47:ab:93:14:cf:7f:02:
df:d3:5f:af:ff:7d:4f:f0:34:ff:b3:a8:d7:ac:32:
08:43:45:b8:a4:66:14:ec:a6:f7:b4:62:c6:bc:5e:
e0:05:4c:d0:32:e7:8a:31:e8:a5:52:86:2f:b5:fd:
c1:d6:2f:36:ac:cc:82:e0:68:e0:a2:9b:c0:71:2b:
aa:d9:cf:7b:a2:b3:d3:ec:95:5a:f3:23:c0:ed:1b:
62:ae:ff:87:81:8f:ae:62:a8:c9:7d:b1:f0:73:d4:
4c:69:79:e1:ee:46:f6:a0:b8:61:c0:1b:3d:9a:56:
10:22:26:35:00:67:62:8a:7a:f8:c4:13:bc:f1:7d:
35:45:f9:09:a6:d5:0a:f4:7f:79:36:42:e9:de:67:
f8:01:4c:19:fb:e4:44:35:27:0e:6b:38:3e:a2:a0:
f3:12:b9:ee:26:c8:45:2a:58:13:75:ab:12:de:f1:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F1:A8:AA:F3:02:40:A1:72:B3:D3:46:FE:00:C1:1C:75:49:E4:EA
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8b:f5:fa:70:62:e4:5f:9f:b2:63:c9:f4:dd:19:8f:66:f2:
7d:b9:ce:fa:3a:0f:eb:a7:8f:61:0b:f9:bf:25:55:e0:7b:b0:
da:c8:a4:72:55:6d:bb:0e:31:b6:cc:77:e5:1c:9b:86:cd:14:
3d:d2:30:dd:aa:6d:61:d8:16:85:68:75:98:c8:30:7f:9b:88:
eb:94:af:18:ab:c8:f3:2c:85:67:fb:af:5b:e6:b1:f7:4d:eb:
17:02:9b:51:52:8c:20:f4:25:5b:fe:2a:77:86:e6:08:07:74:
10:a8:8c:31:0f:42:6c:64:24:da:a9:8b:db:8d:87:3b:96:94:
ca:49:f8:ac:c9:9c:a0:6b:5f:8b:8f:7e:9a:a1:24:cc:6e:82:
cc:5c:a5:b9:b9:c8:11:01:a9:76:c1:cc:ba:0a:0a:86:29:5c:
ac:74:5d:89:f4:35:d2:58:67:8f:be:22:eb:25:fe:34:53:76:
de:2b:4d:a7:e2:34:b4:94:d8:c7:c1:a1:5b:6c:d6:cc:8e:e1:
3f:fc:99:45:6e:b1:b6:9a:5d:c4:1a:20:8d:c8:c6:c9:c5:9b:
c0:b2:f1:64:de:1e:23:83:18:b7:63:3f:b2:01:57:ff:9e:02:
33:47:6f:d3:b1:99:a8:5d:61:51:15:19:aa:01:3b:8e:18:4e:
42:ff:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:31 2026 by rpki-client