
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
File: 6lpgP_sqBA47OEsgYbciJy8KljA.mft (raw, json)
Hash identifier: rpPfoKe8ECFE8vt0cCct7aL9akwbkBjyQbb/NisXdqg=
Subject key identifier: 42:8B:4F:04:D9:D8:FF:73:BF:5A:A4:1F:1C:07:C2:6F:F9:7D:A4:FC
Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
Certificate issuer: /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
Manifest number: 3A
Signing time: Fri 17 Apr 2026 08:15:28 +0000
Manifest this update: Fri 17 Apr 2026 08:15:28 +0000
Manifest next update: Fri 24 Apr 2026 08:15:28 +0000
Files and hashes: 1: 6lpgP_sqBA47OEsgYbciJy8KljA.crl (hash: kNnrtSneogSz7htB2Ju2I5Pm9ZmCh5gJ4Tu33doW0o8=)
2: 13C4E664EB7C11F08E054CC1506F56BC.roa (hash: olbzdRL6AsNPeS/zgMXxNELZ6EWkpdF2QWq2F03rVGM=)
3: E9AA7826EB7B11F08DB6A8BC506F56BC.roa (hash: QnpiKBICTz8gktVGumWZfFFqtGpL9XWz/57p1aG/fO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Validity
Not Before: Apr 17 08:15:28 2026 GMT
Not After : Apr 24 08:15:28 2026 GMT
Subject: CN=69e1ec20-7e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:73:ab:d9:8c:55:ae:7f:a9:c0:a1:23:1b:
9d:e4:12:5d:d0:f3:46:4f:61:13:28:95:31:ad:f9:
7d:0d:3d:59:bf:fc:b5:25:fa:3e:14:e9:20:05:eb:
57:16:2a:82:1e:80:45:3d:e8:20:b0:fd:00:6f:47:
d3:68:50:67:12:67:67:22:72:5f:71:36:fe:72:54:
e6:10:96:52:19:59:26:4d:9a:24:00:e0:d2:45:69:
b7:a3:8d:58:32:b8:e8:c0:01:e6:70:09:19:75:a3:
ec:18:51:d0:0d:ab:d4:ea:c8:8d:70:8b:f9:9f:e9:
ac:d6:bb:51:4b:a3:1d:fd:63:dc:26:85:17:7a:9d:
a5:74:22:21:95:9d:84:b3:51:e0:6f:32:84:31:20:
a7:a8:7b:32:4f:a0:53:d3:77:5c:4f:b5:88:d0:e2:
f1:a1:e9:4a:c9:64:df:7c:90:91:3a:29:72:63:cd:
f8:a4:63:36:b9:7b:48:a6:a0:fb:09:05:de:23:a3:
ba:aa:3d:f1:83:57:12:cc:a7:b0:27:3e:f1:5f:04:
5d:e1:68:b5:79:d5:6a:aa:1a:d8:e8:31:1a:02:7e:
74:d5:15:07:c3:91:c5:77:14:fd:65:00:2c:59:6e:
72:52:19:37:e2:52:86:df:d2:bb:84:60:33:5b:ab:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8B:4F:04:D9:D8:FF:73:BF:5A:A4:1F:1C:07:C2:6F:F9:7D:A4:FC
X509v3 Authority Key Identifier:
keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:00:e9:eb:10:0e:54:4b:63:56:6d:32:ab:b1:cd:36:53:
49:f5:65:a5:d1:96:c8:98:13:f6:64:f6:fd:e6:fc:9d:0c:fb:
b3:9c:f1:06:ce:52:67:ac:30:8b:98:d7:43:83:23:b5:28:ce:
c6:c5:8c:de:44:2f:71:38:58:84:56:fb:32:81:92:b6:ac:2a:
c8:eb:b2:90:af:2c:bd:bd:de:9e:87:21:e5:18:6b:7e:6b:57:
9a:c0:59:eb:04:7f:8f:56:25:b7:7b:f8:71:d3:9c:e2:ad:cb:
6f:ff:60:01:35:f3:55:a1:b4:61:bb:ff:df:d3:6a:96:34:0f:
91:34:32:8e:81:f0:a2:a7:5f:4f:60:9c:2f:48:a4:d1:de:88:
85:8a:3a:ec:94:b8:f9:ff:83:c4:0f:ad:83:e1:19:bc:da:85:
c4:b7:30:e5:f2:c3:51:be:32:da:99:f1:de:34:70:1a:23:da:
7d:95:76:98:1d:c8:71:b7:16:04:26:47:ec:87:74:71:ab:8e:
30:bd:d0:ae:33:93:11:27:ff:f2:d3:fc:10:7b:78:34:0a:e1:
9c:60:9e:ff:68:cd:1c:17:56:46:43:d3:db:11:8a:38:1a:14:
67:af:39:9b:cf:05:c9:66:96:83:6a:2d:33:1a:dd:36:34:4a:
e1:ea:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:33 2026 by rpki-client