
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: DkCd8CLeKdkoQr+COWPVeJy+Ks5IIsnVEcuZ6kZf1jI=
Subject key identifier: C0:B5:BE:65:AA:62:37:6E:C0:DB:87:89:19:A9:76:5A:6C:22:34:21
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E0C
Signing time: Thu 16 Apr 2026 16:02:36 +0000
Manifest this update: Thu 16 Apr 2026 16:02:35 +0000
Manifest next update: Thu 23 Apr 2026 16:02:35 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: FVQchigXMQZIdmhWzL79Kll1R8loKQDaa49Mb9jSXTc=)
2: B7BA9860DB8A11F09F03163163D3641D.roa (hash: O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=)
3: B842F0DEDB8A11F09F03163163D3641D.roa (hash: ks313B+YVez30ZvOkXppIDe7jBhr+JL2wzA7+C6C6as=)
4: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7714 (0x1e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: Apr 16 16:02:35 2026 GMT
Not After : Apr 23 16:02:35 2026 GMT
Subject: CN=69e1081c-1a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:87:48:2d:86:40:3b:06:d9:f8:36:e1:44:
2f:c2:6f:26:a0:a6:6b:a9:16:1a:68:de:69:24:db:
66:53:e4:27:38:4f:03:5a:af:4f:6e:4d:26:45:72:
0b:2c:de:a1:38:c5:eb:a2:b8:03:59:4b:8a:be:e9:
2d:7a:ba:cb:bf:f4:8c:78:92:7a:3e:72:a2:53:da:
b6:7f:f3:ab:36:f6:60:72:9a:8f:ef:92:b0:d9:c2:
06:d6:f4:a4:bb:61:59:80:01:a4:e5:2c:eb:51:18:
7f:5f:7e:f6:00:ad:10:b2:45:f4:b4:f3:3c:a5:e1:
b5:78:dd:ac:a9:92:e1:6f:79:6a:af:90:c7:5d:4d:
19:18:4f:92:0d:dc:ab:5d:cc:d6:74:6b:91:f9:5e:
0a:ab:73:a7:63:95:b7:a3:98:16:20:36:df:2b:df:
cd:64:79:ad:77:ae:0f:62:15:67:68:b0:31:6f:7b:
ac:ee:f9:85:bc:2f:e4:c8:ec:7e:66:92:87:1e:6b:
0e:e8:75:11:88:18:e6:6e:62:81:a9:b4:21:3a:68:
21:f8:88:c6:cb:13:84:91:24:ed:4f:1d:80:72:c0:
77:19:89:33:6a:e3:ce:d0:78:a7:4e:44:cb:ee:4a:
f4:8f:e2:44:20:8a:a3:f3:0e:31:42:09:29:83:5a:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:BE:65:AA:62:37:6E:C0:DB:87:89:19:A9:76:5A:6C:22:34:21
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:00:fe:09:71:11:cb:53:65:c9:53:91:6b:a1:70:dd:43:36:
77:80:b7:65:f0:db:db:cf:16:69:09:1c:0a:ae:8a:85:db:79:
9f:5e:c2:3f:9f:dc:7c:a3:58:5a:b5:ad:4f:97:54:27:43:a4:
c2:96:f6:da:4e:59:01:20:19:e9:02:f7:21:a6:96:22:a6:46:
e9:08:8f:33:f0:2c:92:47:b0:11:cd:90:de:cc:9a:6e:63:df:
19:4d:72:6a:41:a7:38:29:c9:3d:59:1d:2f:c0:c1:7b:a4:5b:
fc:8e:64:1c:b2:34:19:5d:a6:5b:2f:80:1a:c8:24:c4:ff:15:
db:e3:7b:24:71:19:99:7c:a8:c9:bc:1e:85:ef:71:be:b2:df:
72:a8:ac:36:90:c9:31:d7:38:8e:c2:e5:29:18:3e:6d:3c:ab:
af:84:b3:e8:42:8f:de:e3:23:c1:80:c4:8d:86:36:4c:be:f3:
f0:14:bf:c0:bc:19:1e:92:ea:f7:1b:d8:24:b4:38:0f:da:2a:
96:f2:d3:b0:12:16:26:aa:92:82:2a:a3:0e:c6:d4:b2:38:3e:
59:cd:8b:44:87:ca:61:62:1b:9f:45:34:f9:d0:31:5b:cd:e1:
c9:df:94:eb:43:7b:9d:d3:4f:00:4a:7f:80:27:09:00:0e:c3:
68:96:8b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:50 2026 by rpki-client