
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
File: 6lpgP_sqBA47OEsgYbciJy8KljA.mft (raw, json)
Hash identifier: Y4idj9d2uohysYx/NTowNVLMoCDf9sJropImgleo0hA=
Subject key identifier: 83:F3:5E:24:74:4B:2E:A5:D0:83:33:2C:A1:9C:44:4A:89:21:78:75
Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
Certificate issuer: /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
Manifest number: 22
Signing time: Sun 01 Mar 2026 10:20:10 +0000
Manifest this update: Sun 01 Mar 2026 10:20:10 +0000
Manifest next update: Sun 08 Mar 2026 10:20:10 +0000
Files and hashes: 1: 6lpgP_sqBA47OEsgYbciJy8KljA.crl (hash: CA1vsLpK9qyY/DHTZkCf4CKpmz23fTsEQthCytNrXTM=)
2: 13C4E664EB7C11F08E054CC1506F56BC.roa (hash: olbzdRL6AsNPeS/zgMXxNELZ6EWkpdF2QWq2F03rVGM=)
3: E9AA7826EB7B11F08DB6A8BC506F56BC.roa (hash: QnpiKBICTz8gktVGumWZfFFqtGpL9XWz/57p1aG/fO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Validity
Not Before: Mar 1 10:20:10 2026 GMT
Not After : Mar 8 10:20:10 2026 GMT
Subject: CN=69a412da-8404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:f4:1c:c9:8b:af:5c:b7:84:ca:5f:06:8e:
cb:52:90:d3:d8:f0:9d:f4:79:0c:2b:d8:16:18:a5:
dd:67:be:a5:7f:66:4c:05:3e:1e:c3:c4:b2:74:2f:
49:48:1a:fd:94:b6:fe:b0:3c:99:f6:42:25:d9:cb:
95:ac:b6:6d:b7:72:2a:82:ba:97:01:8d:08:96:8b:
6e:c3:64:4c:e6:c4:c5:b4:be:9e:b0:ce:f1:c4:20:
73:71:b3:c3:f6:87:98:dd:2d:f8:cd:19:68:10:1d:
56:9c:ce:e2:a0:88:cc:62:be:15:13:3b:00:fc:c5:
2c:59:f7:79:00:e9:c9:f4:c0:36:cf:9f:9a:6d:2c:
de:35:1d:ae:af:f2:fa:15:68:c2:0c:21:38:31:1d:
54:96:da:3b:3e:a2:59:01:04:09:dc:69:62:32:42:
21:72:de:30:9f:72:54:70:eb:26:b1:88:5f:56:f0:
9b:c2:44:5c:21:bc:fd:7d:08:37:60:8e:5b:af:15:
f0:d5:52:de:6c:00:58:47:f9:66:2d:26:e6:b9:fc:
0e:ce:fd:4e:34:69:99:c1:51:fd:2a:46:14:c6:95:
f6:db:b1:b1:7a:df:04:6d:aa:24:6f:48:55:f5:63:
7a:84:9e:af:95:e7:e5:92:dd:91:79:e3:65:dd:13:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:5E:24:74:4B:2E:A5:D0:83:33:2C:A1:9C:44:4A:89:21:78:75
X509v3 Authority Key Identifier:
keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:ef:b9:77:6d:40:b7:e0:1a:d2:f5:60:8b:e8:63:3b:d5:9d:
19:52:b7:35:12:ce:42:9b:be:95:85:38:d4:f9:3b:59:96:6d:
4a:b4:cc:97:2a:08:67:0e:80:6b:4b:11:cb:cc:78:9d:8f:29:
42:e8:fa:7c:da:36:b8:e7:1e:17:03:1f:30:06:53:1c:e7:9c:
02:c0:02:d7:62:fd:f0:97:6f:a2:62:c8:80:c3:4a:3a:00:7e:
15:d6:d8:00:f0:37:43:0e:db:08:d5:40:e0:97:38:e6:58:7d:
8a:9b:30:db:f2:78:02:ab:4f:6e:9b:db:07:20:08:05:8c:28:
49:3a:2d:e2:ca:f1:71:02:c7:f3:05:43:70:f0:d1:79:ef:2c:
00:4f:09:db:fe:09:16:de:0d:e0:e4:6d:fc:93:d6:10:cb:d2:
3b:a6:6b:04:d1:f8:d9:ce:5e:57:14:08:35:50:ce:6f:f5:d4:
a1:b8:33:db:c8:3e:40:83:af:fe:ef:09:fd:f1:99:e4:ac:aa:
a1:44:fb:0f:1c:99:1e:1c:f6:06:01:47:50:1e:f8:cd:5a:4c:
29:e8:a6:28:7f:e1:c8:18:d0:81:05:33:df:0d:66:88:d6:c3:
9f:f6:5b:c6:95:60:40:96:98:df:f5:6d:5f:ed:56:34:db:54:
74:99:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:00:54 2026 by rpki-client