
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json)
Hash identifier: nwG7XyB15/BbZPsbb+rabUokHXIHnAVAa1W9ON8rulk=
Subject key identifier: A7:2A:43:FF:98:75:05:C5:D0:F0:95:92:D8:32:DB:BD:89:70:FB:DA
Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
Manifest number: 52
Signing time: Wed 15 Apr 2026 07:44:32 +0000
Manifest this update: Wed 15 Apr 2026 07:44:32 +0000
Manifest next update: Wed 22 Apr 2026 07:44:32 +0000
Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: s3UmuWzAuJ4HJTHS7iAcLMtHZiv6hzgkwBnpIEBLgBA=)
2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Validity
Not Before: Apr 15 07:44:32 2026 GMT
Not After : Apr 22 07:44:32 2026 GMT
Subject: CN=69df41e0-4274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:2a:c2:4b:fe:b2:20:84:a9:b4:8b:f3:a4:
68:c0:ac:18:c2:a3:14:9a:0f:31:4b:8c:9f:9a:33:
ae:67:5a:a2:b7:d6:ba:d0:22:0f:69:b3:b0:81:d1:
ee:f0:8b:70:6e:ee:07:8a:a6:a9:30:d5:fc:00:2b:
18:39:0b:c6:86:7b:6a:70:e7:8e:ee:94:67:d8:52:
fd:de:22:9c:44:78:b5:21:78:ff:e0:c7:fe:a0:57:
f4:e4:13:02:7e:bb:cc:f1:b3:dc:f6:a1:3a:89:98:
68:9e:dd:34:03:b2:e1:a5:40:a3:42:91:bf:53:fb:
c1:bb:42:28:36:db:49:44:20:36:7a:49:57:3b:2b:
43:1f:5f:b9:51:c9:c5:a2:86:ff:69:b9:77:63:39:
a9:43:d1:bd:75:a7:be:32:e0:41:03:56:97:d1:e9:
43:f5:00:0d:b4:86:ec:8c:dc:9f:46:d8:c6:b6:df:
6e:34:14:7f:fd:bb:54:aa:c1:3b:22:62:3c:23:9f:
50:48:94:bb:88:b0:72:59:11:b5:91:ba:b7:27:2b:
e6:4a:f9:4d:70:73:36:97:49:20:00:1a:17:f0:4f:
9b:70:8c:d8:65:1a:2e:fc:09:1f:d3:50:9e:e6:95:
35:ba:40:fa:f2:62:f1:91:5e:b7:5c:97:f3:53:c1:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:43:FF:98:75:05:C5:D0:F0:95:92:D8:32:DB:BD:89:70:FB:DA
X509v3 Authority Key Identifier:
keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:05:8f:01:15:88:5f:7d:8f:bc:f6:dc:cf:24:5f:60:ca:7d:
af:f6:94:a1:ca:16:5c:4f:49:73:ab:38:b0:f1:fe:73:92:ac:
5e:ae:e5:85:a5:a1:66:da:13:68:ae:8e:82:f4:7b:6b:61:97:
54:7b:b0:5e:b1:8b:fe:bc:06:07:26:75:5e:b8:61:99:c2:23:
a5:e4:cb:55:6b:1e:c8:7e:96:88:45:62:a9:cc:05:97:27:c2:
c9:37:92:38:48:63:79:50:9d:0c:a3:c6:d2:61:59:65:12:ff:
e9:b3:ed:92:ba:54:44:c3:c5:e3:17:c9:cd:43:f1:8f:8a:24:
4d:99:43:f5:7e:f3:d5:1b:91:2a:a0:5c:ba:da:36:91:11:5b:
08:78:32:bc:c4:08:19:da:4b:9c:28:d5:ff:b2:8b:ab:79:a4:
88:90:47:ea:c0:2b:e4:7a:ca:b3:29:ed:68:fc:06:6a:a8:ea:
5f:96:ce:c0:a0:40:ec:4d:28:8e:d0:2a:31:a3:1c:5c:a1:b2:
0b:85:01:b4:84:54:d2:d3:75:db:f5:4e:0d:92:93:e5:01:e1:
8b:c2:78:9b:b1:eb:6d:49:43:2c:ca:42:e7:98:6d:29:37:91:
31:7e:27:83:77:7c:22:cf:ce:d9:3d:e8:8a:fd:0c:70:dc:e3:
aa:bf:a0:53
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NDlCQTExMC8GA1UEBRMoRTg3OTAzMDE3QUIxRjA2QTlDQjQ2QUIwMjFCRDBCOTIx
QzlBRkE4ODAeFw0yNjA0MTUwNzQ0MzJaFw0yNjA0MjIwNzQ0MzJaMBgxFjAUBgNV
BAMTDTY5ZGY0MWUwLTQyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIPyrCS/6yIISptIvzpGjArBjCoxSaDzFLjJ+aM65nWqK31rrQIg9ps7CB0e7w
i3Bu7geKpqkw1fwAKxg5C8aGe2pw547ulGfYUv3eIpxEeLUheP/gx/6gV/TkEwJ+
u8zxs9z2oTqJmGie3TQDsuGlQKNCkb9T+8G7Qig220lEIDZ6SVc7K0MfX7lRycWi
hv9puXdjOalD0b11p74y4EEDVpfR6UP1AA20huyM3J9G2Ma23240FH/9u1SqwTsi
Yjwjn1BIlLuIsHJZEbWRurcnK+ZK+U1wczaXSSAAGhfwT5twjNhlGi78CR/TUJ7m
lTW6QPryYvGRXrdcl/NTwYO1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpypD/5h1
BcXQ8JWS2DLbvYlw+9owHwYDVR0jBBgwFoAU6HkDAXqx8GqctGqwIb0Lkhya+ogw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0OUJBL0UzNjdGNkM2QkVG
NTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1v
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNkhrREFYcXg4R3FjdEdxd0liMExraHlhLW9nLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
OUJBL0UzNjdGNkM2QkVGNTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdx
Y3RHcXdJYjBMa2h5YS1vZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDgBY8BFYhffY+89tzPJF9gyn2v9pShyhZcT0lzqziw8f5zkqxeruWFpaFm2hNo
ro6C9HtrYZdUe7BesYv+vAYHJnVeuGGZwiOl5MtVax7IfpaIRWKpzAWXJ8LJN5I4
SGN5UJ0Mo8bSYVllEv/ps+2SulREw8XjF8nNQ/GPiiRNmUP1fvPVG5EqoFy62jaR
EVsIeDK8xAgZ2kucKNX/soureaSIkEfqwCvkesqzKe1o/AZqqOpfls7AoEDsTSiO
0CoxoxxcobILhQG0hFTS03Xb9U4NkpPlAeGLwnibsettSUMsykLnmG0pN5ExfieD
d3wiz87ZPeiK/Qxw3OOqv6BT
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:29 2026 by rpki-client