
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier: KUwNZr//noCGApI/8UDuoZFLZmrx1Ez9UYUTRwATpUM=
Subject key identifier: 32:7A:52:B7:5E:5E:38:47:AF:CD:DF:9C:9A:76:C4:30:CD:62:22:0F
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 094C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number: 08E1
Signing time: Sat 28 Feb 2026 20:55:36 +0000
Manifest this update: Sat 28 Feb 2026 20:55:36 +0000
Manifest next update: Sat 07 Mar 2026 20:55:36 +0000
Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: N1/YysJkX/oNZNUrluJEUOa5a1vlHuJhbDj5pDnMXSw=)
2: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=)
3: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=)
4: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU=)
5: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: BwcQamXNLiosPDRZ6f2FtmfW9jpBhqektxQqopKnPY4=)
6: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=)
7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=)
8: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Feb 28 20:55:36 2026 GMT
Not After : Mar 7 20:55:36 2026 GMT
Subject: CN=69a35648-9194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:c3:f6:2b:db:56:48:69:78:a4:d0:d2:03:
2c:2a:6c:19:da:b4:32:93:dd:d4:fd:e0:08:34:f3:
19:d3:76:23:68:10:45:53:e8:ac:81:79:81:74:24:
8f:e3:c3:dd:31:c7:0d:3e:5c:ec:74:8b:e2:4f:d0:
bf:2b:8e:24:73:90:53:7f:78:1f:59:c2:5e:e1:43:
4f:5b:02:46:d2:a8:c0:99:f0:5f:ac:bf:6c:79:91:
bb:ae:b8:4f:9c:25:c7:36:19:60:df:a5:d6:3c:11:
71:c5:e8:a7:64:ea:52:a0:56:01:72:c8:ed:0e:7c:
83:70:97:7f:f6:b2:23:7e:56:c7:5f:03:29:8a:fc:
12:e3:fb:6b:d1:a8:6b:18:2a:09:50:55:2f:2c:00:
b7:e7:5b:26:0f:00:4e:4d:c8:58:e6:86:d9:dd:31:
82:be:7c:d2:28:f7:ad:77:24:2a:06:13:fd:26:01:
6b:03:82:56:e5:ae:b4:f9:3c:f8:28:b4:01:5f:90:
be:bf:68:6d:86:75:72:13:34:fc:24:e2:fc:72:80:
e2:48:e0:b4:85:9e:6a:21:5e:16:c2:92:dd:de:76:
3d:d1:43:40:71:58:37:0b:20:f2:73:60:a9:6e:d5:
07:2b:b0:0b:cf:d6:93:18:04:48:fc:e1:fc:6d:17:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:52:B7:5E:5E:38:47:AF:CD:DF:9C:9A:76:C4:30:CD:62:22:0F
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5f:d2:99:b9:e9:6f:dc:8e:fe:3c:9b:2d:d4:b4:0a:0f:13:
cb:55:f1:4b:21:71:b9:ab:35:54:ad:0f:2b:b9:f9:68:38:99:
ec:72:a9:49:1b:f1:6a:db:e8:89:be:69:47:d2:de:0f:35:ed:
10:d3:c0:eb:bb:76:65:ab:30:6d:32:e0:e6:ac:42:a4:ea:83:
ba:bf:b4:2f:b3:28:45:39:08:13:63:eb:93:4f:2b:43:f7:a0:
c8:80:cc:64:71:69:66:0b:6d:98:b6:92:ca:55:33:40:bb:be:
9d:0f:6e:8f:c2:5d:7b:e3:a8:57:83:12:87:2a:c5:ff:e8:70:
e5:0d:e4:6a:fc:d8:99:7f:a6:c7:1b:db:8c:cd:7c:09:29:e8:
f8:22:17:25:6a:99:cd:05:a6:b5:ca:f3:db:f7:6b:98:eb:5a:
5d:2d:66:7d:57:6c:07:eb:58:99:5d:86:e0:27:26:1b:04:ea:
22:02:eb:e1:66:75:82:43:aa:96:62:2d:ae:18:e5:a1:5e:7d:
ea:b7:0c:3c:61:0a:0e:9a:56:8e:61:48:9d:a0:28:e1:9b:a1:
ee:1d:68:cd:00:f2:00:b3:4f:7e:12:10:c7:05:52:c4:67:7b:
11:b1:cf:67:5b:83:43:ca:e2:ac:6e:b9:0f:25:0f:be:11:67:
3e:35:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:12 2026 by rpki-client