
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier: fuaMTxDsyaWnSaDz+cra1DlVU9Z4ypC2Dwk1C2EBzdM=
Subject key identifier: 01:0C:21:11:58:85:2F:24:0E:AF:AC:DA:51:28:4A:57:D1:49:89:42
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0973
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number: 08FE
Signing time: Thu 16 Apr 2026 20:26:49 +0000
Manifest this update: Thu 16 Apr 2026 20:26:48 +0000
Manifest next update: Thu 23 Apr 2026 20:26:48 +0000
Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: WJ+qNhJBRFIRlld6uQvo3Gnsh548jt70mlLsHM/2Ajk=)
2: 61C915302DA611F1B2990DECA2833773.roa (hash: KaomdsVrAqV74tigFGzbofL46Dx0oPl1SoGoDWsWCag=)
3: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: HAMfTfZzKgQr1S5Al/mmH4wqYSjJ80ubOBRue4CFJYE=)
4: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: ldTfVlgZx0sqAfRFwUDVu08wZit17CSgV0jvtS+encM=)
5: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: fcYY8JCJfGpn6U42SxS4kdU4DDiWQRVoqOsbnKMAPqQ=)
6: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: y6W9Xq4d8zRGRJelWYQQv1r/i5L4bEaH/ibWNQgVyoU=)
7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: VbE9wtNoONHpVqfDihjQrObKeQw1ADJiCzljyCKB/mQ=)
8: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: LH5rCnW4AlRTA7oXpdl4war9anlv1eQFsMx7zEz8aDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Apr 16 20:26:48 2026 GMT
Not After : Apr 23 20:26:48 2026 GMT
Subject: CN=69e14608-6d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:58:01:19:17:15:e6:35:58:16:14:12:49:
a3:0a:ae:7a:d7:0b:a1:e9:ef:2b:17:81:41:b2:aa:
7d:20:6c:69:a0:91:a9:8c:d2:16:bc:fa:fc:2e:a7:
a3:ee:68:5c:91:a8:95:3d:1c:30:b7:1b:1c:7e:28:
9f:71:df:aa:00:8b:f2:ed:94:dd:8a:ad:c1:48:8c:
c3:f0:32:69:31:62:ef:c7:f2:4f:65:eb:5a:51:19:
f3:e2:92:9c:d0:68:6e:db:61:de:3d:35:51:83:2d:
31:bb:5d:6a:8d:d7:43:d1:77:80:4f:22:c2:e2:d6:
7a:cb:aa:18:50:ff:00:df:41:ab:3f:6f:ba:87:5e:
55:a1:25:b2:72:cc:ed:da:fb:8f:57:d5:0d:ce:5b:
1c:ef:ab:99:a0:3c:4e:93:ac:2a:e3:bc:28:ca:fa:
6d:a0:25:01:ed:90:c0:ac:a8:96:e5:ed:b4:ef:5a:
c3:1d:81:af:5e:c4:8e:b3:25:53:12:16:5d:da:f7:
41:d5:b7:8b:07:cb:96:12:12:34:5d:b8:da:e5:46:
f3:5d:a1:c9:50:80:f7:e2:1f:b8:26:c4:b8:da:bb:
ef:85:05:b8:3a:06:bf:a3:36:35:01:41:a8:c0:81:
7b:af:7b:25:18:c6:21:83:2c:e9:ae:db:84:94:47:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:21:11:58:85:2F:24:0E:AF:AC:DA:51:28:4A:57:D1:49:89:42
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:09:3b:6b:60:30:4a:68:98:b2:f9:64:7a:be:9f:14:5b:31:
0b:f9:e3:d3:84:d6:92:7e:c4:9d:95:b3:6c:f8:1c:98:a0:1a:
6a:a4:fc:e8:a7:78:db:69:99:da:f9:0e:0e:64:6e:8d:59:65:
38:c7:cb:c8:d4:eb:92:42:c4:6b:df:1b:35:30:11:25:a6:9f:
77:cb:8f:64:bb:44:54:d7:4c:7c:cb:61:53:1c:78:0e:be:54:
e3:c4:cc:47:7b:2f:07:c3:57:f1:80:a6:fb:7e:c7:38:bd:80:
6a:ce:5b:1b:e6:94:aa:92:f8:05:72:1b:3b:dd:ed:35:67:c2:
63:19:bf:19:05:b1:d5:2d:82:49:f0:74:30:13:44:06:76:0e:
b8:8a:ba:ca:a5:bf:c1:28:3d:3e:52:4f:9d:89:67:c7:2a:f1:
72:99:94:68:31:ce:61:3f:7a:3a:be:d1:7b:b7:88:1d:4f:cf:
d2:9e:f6:57:e1:aa:cc:1c:78:90:a7:6a:41:bf:fc:21:24:02:
0c:4b:cb:cc:1c:b7:1e:b0:b7:52:2e:48:e8:ac:ee:0c:96:61:
58:2b:4b:d9:bf:17:0a:f0:4f:e9:5b:b1:e0:a6:0d:cc:9c:24:
bd:81:95:83:9c:e4:b5:ed:6c:74:bd:2a:ce:15:7f:c2:39:ff:
fe:8c:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:03 2026 by rpki-client