
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
File: 6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json)
Hash identifier: vczSZ/JWV9CiZwX8LBfRkb19B0BmkoBxMrETCpnrm/I=
Subject key identifier: 4E:F4:C5:01:26:33:D3:FE:93:46:0B:E3:00:DF:98:EB:98:43:8C:6A
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Certificate issuer: /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
Manifest number: 0163
Signing time: Sun 01 Mar 2026 05:52:22 +0000
Manifest this update: Sun 01 Mar 2026 05:52:22 +0000
Manifest next update: Sun 08 Mar 2026 05:52:22 +0000
Files and hashes: 1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: CYJ7TCjJtU0jmB7iWiLTNZIYau7E42fVinLOBl8qZiI=)
2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Validity
Not Before: Mar 1 05:52:22 2026 GMT
Not After : Mar 8 05:52:22 2026 GMT
Subject: CN=69a3d416-8f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:30:3d:cf:8d:87:ae:82:f7:f1:6d:b3:3a:
9c:bd:61:1f:55:72:f6:8e:68:1e:94:36:7c:66:99:
56:ab:22:12:71:64:c1:6e:01:ac:f2:8d:2c:9d:88:
07:13:49:39:f7:24:3f:a8:1a:69:d6:7c:15:03:c3:
0a:99:d4:1f:a9:98:98:5b:33:47:b2:23:b0:c2:d9:
93:b6:54:ed:5f:ad:e7:f9:6f:c1:21:07:d5:08:3f:
42:b6:d3:ad:11:97:a1:07:48:3a:0a:d8:b0:5f:9e:
77:5e:3e:4e:ad:63:b0:45:88:aa:20:d4:5d:47:64:
5f:da:0f:cc:72:09:c2:3c:08:fa:61:88:e0:b2:8e:
e2:d1:2e:79:85:2b:f5:1d:62:99:16:52:30:88:b9:
0a:87:b7:9a:45:85:f8:1d:be:bf:e2:52:22:b1:90:
8b:fb:88:f5:6d:94:43:80:7d:f8:04:be:db:cd:97:
59:f8:97:56:cc:7e:3e:7f:4f:0c:97:90:b9:bb:69:
16:92:6c:6c:37:ac:c5:7a:4e:c8:2c:7b:4e:cc:d8:
66:2d:a5:77:49:3c:c4:ef:e5:99:98:e4:56:9c:e3:
78:e6:9b:b7:fa:ad:ae:b7:0b:9b:44:d7:5b:d4:73:
bc:fc:95:11:4d:04:c3:92:bf:36:a6:23:58:a3:2a:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:C5:01:26:33:D3:FE:93:46:0B:E3:00:DF:98:EB:98:43:8C:6A
X509v3 Authority Key Identifier:
keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:df:a5:cb:73:3c:72:5b:a2:f7:af:4d:fe:cb:0c:96:d6:8c:
82:5d:3f:1b:6e:bb:81:e4:1d:e9:67:f8:75:2b:1f:68:3f:61:
8e:2b:2d:24:40:b9:f9:c9:85:dc:d7:0a:ea:32:b3:bb:9a:3e:
f1:c3:bb:58:52:89:b4:29:5f:05:e3:6f:d3:68:a3:cc:a8:75:
72:a4:74:f2:0d:03:02:62:76:8d:66:af:e7:91:7f:b6:2c:e4:
3c:80:4a:70:07:12:1d:65:a4:90:40:fa:5d:47:c7:d7:0d:08:
bb:67:9f:80:22:9c:4d:00:be:01:94:ba:54:64:12:62:01:18:
f3:6a:d0:6c:03:b9:76:82:1a:06:9c:d5:ee:ae:12:19:e6:af:
4d:bd:0c:ad:6c:84:2b:f1:5c:c3:b4:95:4b:59:c5:28:89:23:
13:2c:b2:84:af:3a:e8:df:b0:3c:1a:74:a9:9e:dd:d2:55:91:
e5:a7:15:22:19:df:e2:c6:5f:82:c8:a9:91:77:e2:f0:24:46:
86:34:07:cf:58:ba:79:69:1b:06:81:64:48:65:48:0a:18:af:
25:67:b3:b4:b3:69:fe:77:50:bd:dc:1d:8a:97:fd:9f:02:d3:
f3:89:ac:9f:f0:c8:8b:1f:c1:36:72:7a:f1:7d:48:20:9e:c5:
d7:5b:cc:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY1RTYxMTAvBgNVBAUTKEVCRjc3NUZCNkIyRDJCM0Y4MDNDM0YzMzZCODMwMEE4
QkU2QkU5ODUwHhcNMjYwMzAxMDU1MjIyWhcNMjYwMzA4MDU1MjIyWjAYMRYwFAYD
VQQDEw02OWEzZDQxNi04ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/AwPc+Nh66C9/FtszqcvWEfVXL2jmgelDZ8ZplWqyIScWTBbgGs8o0snYgH
E0k59yQ/qBpp1nwVA8MKmdQfqZiYWzNHsiOwwtmTtlTtX63n+W/BIQfVCD9CttOt
EZehB0g6CtiwX553Xj5OrWOwRYiqINRdR2Rf2g/McgnCPAj6YYjgso7i0S55hSv1
HWKZFlIwiLkKh7eaRYX4Hb6/4lIisZCL+4j1bZRDgH34BL7bzZdZ+JdWzH4+f08M
l5C5u2kWkmxsN6zFek7ILHtOzNhmLaV3STzE7+WZmORWnON45pu3+q2utwubRNdb
1HO8/JURTQTDkr82piNYoyqkoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE70xQEm
M9P+k0YL4wDfmOuYQ4xqMB8GA1UdIwQYMBaAFOv3dftrLSs/gDw/M2uDAKi+a+mF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVFNi9BODRCQzNCOEYw
QTkxMUVFQUU3MkYwMkVDNEY5QUUwMi82X2QxLTJzdEt6LUFQRDh6YTRNQXFMNXI2
WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZfZDEtMnN0S3otQVBEOHphNE1BcUw1cjZZVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjVFNi9BODRCQzNCOEYwQTkxMUVFQUU3MkYwMkVDNEY5QUUwMi82X2QxLTJzdEt6
LUFQRDh6YTRNQXFMNXI2WVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPN+ly3M8clui969N/ssMltaMgl0/G267geQd6Wf4dSsfaD9hjistJEC5+cmF
3NcK6jKzu5o+8cO7WFKJtClfBeNv02ijzKh1cqR08g0DAmJ2jWav55F/tizkPIBK
cAcSHWWkkED6XUfH1w0Iu2efgCKcTQC+AZS6VGQSYgEY82rQbAO5doIaBpzV7q4S
GeavTb0MrWyEK/Fcw7SVS1nFKIkjEyyyhK866N+wPBp0qZ7d0lWR5acVIhnf4sZf
gsipkXfi8CRGhjQHz1i6eWkbBoFkSGVIChivJWeztLNp/ndQvdwdipf9nwLT84ms
n/DIix/BNnJ68X1IIJ7F11vMUA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:21 2026 by rpki-client