
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
File: 6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json)
Hash identifier: CdOhI6JQ9jD6y1O/5sFpJnsD+0LdFTSniA0R/aHXsIA=
Subject key identifier: C9:5B:C7:2C:68:92:EC:32:E4:E3:DD:CE:D2:2B:52:64:1B:41:2B:EF
Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
Certificate issuer: /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Certificate serial: 12B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
Manifest number: 12A1
Signing time: Mon 02 Mar 2026 00:05:55 +0000
Manifest this update: Mon 02 Mar 2026 00:05:53 +0000
Manifest next update: Mon 09 Mar 2026 00:05:53 +0000
Files and hashes: 1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: WOJ+U+y+NDuulUVByE/tOKUR8fCH+DHszlj6jXiHy24=)
2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: +CoEOPC9ENpdvVSY9T7CJBQL5WVmw+Ihk9P6+ohhARE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4787 (0x12b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Validity
Not Before: Mar 2 00:05:53 2026 GMT
Not After : Mar 9 00:05:53 2026 GMT
Subject: CN=69a4d462-146d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:e3:ff:c1:23:94:34:57:c2:70:67:52:51:
9a:ef:53:3a:1a:f2:f0:d8:83:3c:1d:58:c3:90:16:
41:a8:f8:7d:96:c1:0b:f8:7b:3d:a8:97:dc:87:4d:
fb:b4:27:43:71:28:82:dd:9e:af:08:b9:7b:1e:31:
50:70:cb:24:d0:5a:fe:6a:a8:94:f8:bf:21:53:85:
37:0b:7d:4c:2a:cf:d8:df:b4:be:82:31:98:94:c4:
32:f7:1f:9d:09:b6:28:bd:1f:cb:03:2b:c1:2f:9e:
e8:29:61:f7:af:99:4a:db:48:e5:1d:f4:2c:71:8e:
cc:95:09:c7:5d:ea:c3:f2:52:02:07:77:0f:08:01:
71:89:8c:e3:f5:12:cc:3c:71:ff:ce:57:e9:00:7b:
96:f8:2b:7d:d1:d2:8d:d1:5b:6a:74:cd:c6:b6:ff:
25:47:23:fb:84:d2:3c:a1:94:67:d8:11:38:b4:0f:
35:78:be:08:d5:79:8d:81:ea:ad:f7:2e:5f:96:bf:
35:59:57:3d:97:24:ef:b0:88:ed:be:75:1d:00:53:
07:ed:89:2e:3b:26:92:81:f1:47:a3:72:c8:91:6e:
9c:40:ab:9c:ec:58:b3:cc:0a:39:fa:31:0b:72:b6:
45:74:bf:96:ac:44:1c:13:80:b3:32:d3:3a:6e:94:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:C7:2C:68:92:EC:32:E4:E3:DD:CE:D2:2B:52:64:1B:41:2B:EF
X509v3 Authority Key Identifier:
keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:91:23:1a:f2:dd:35:e9:76:a0:b4:ad:e8:d7:19:e7:1c:8c:
01:e5:38:68:e4:28:6f:80:97:84:73:43:87:6f:cb:d6:d1:ff:
e6:7b:04:4e:00:0b:88:66:82:b7:63:39:bd:8f:38:f5:b8:b5:
6f:7d:2c:81:13:b3:7f:ed:20:24:71:2a:44:c3:8f:83:90:9c:
2d:08:ab:b5:77:f6:72:de:5b:d4:82:92:b3:8d:9b:fe:5c:a0:
3c:00:bc:ea:af:8b:eb:5a:f8:77:0e:44:3f:0a:7c:46:22:0c:
78:5a:92:98:b0:02:b7:85:a2:53:7a:27:55:f2:e2:cb:10:b0:
73:27:f9:c7:8c:49:50:13:a4:67:df:cc:b8:f1:94:86:b5:3d:
42:68:9a:17:8e:02:5e:9e:97:17:da:08:bc:85:f0:bf:cd:6c:
45:d9:bd:bd:09:18:0d:74:bb:c1:4d:fa:f5:4f:aa:79:55:c1:
34:ec:7b:77:bd:68:9a:a8:4a:b4:f0:ac:ed:cc:87:fc:af:d5:
a3:3c:d0:8c:8b:7a:66:59:45:9e:f0:ba:37:b8:97:5d:47:f8:
67:48:c6:bc:56:4f:20:d4:4a:61:83:1f:d8:b9:50:33:32:e4:
e7:3e:55:7f:e9:86:a3:a1:c1:bc:20:54:77:d6:9f:c7:a7:f1:
9b:84:3e:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICErMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMTQxMTAvBgNVBAUTKEU4NkMwRjcyMEU5NkExRDVGMDYwRDk2MEFFNDIyMjEy
NTU2MERDNEEwHhcNMjYwMzAyMDAwNTUzWhcNMjYwMzA5MDAwNTUzWjAYMRYwFAYD
VQQDEw02OWE0ZDQ2Mi0xNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8jj/8EjlDRXwnBnUlGa71M6GvLw2IM8HVjDkBZBqPh9lsEL+Hs9qJfch037
tCdDcSiC3Z6vCLl7HjFQcMsk0Fr+aqiU+L8hU4U3C31MKs/Y37S+gjGYlMQy9x+d
CbYovR/LAyvBL57oKWH3r5lK20jlHfQscY7MlQnHXerD8lICB3cPCAFxiYzj9RLM
PHH/zlfpAHuW+Ct90dKN0VtqdM3Gtv8lRyP7hNI8oZRn2BE4tA81eL4I1XmNgeqt
9y5flr81WVc9lyTvsIjtvnUdAFMH7YkuOyaSgfFHo3LIkW6cQKuc7FizzAo5+jEL
crZFdL+WrEQcE4CzMtM6bpQ5GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlbxyxo
kuwy5OPdztIrUmQbQSvvMB8GA1UdIwQYMBaAFOhsD3IOlqHV8GDZYK5CIhJVYNxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMxNC85NkZFMzAwNkUw
RDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29kWHdZTmxncmtJaUVsVmcz
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZHd1BjZzZXb2RYd1lObGdya0lpRWxWZzNFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjMxNC85NkZFMzAwNkUwRDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29k
WHdZTmxncmtJaUVsVmczRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAZEjGvLdNel2oLSt6NcZ5xyMAeU4aOQob4CXhHNDh2/L1tH/5nsETgALiGaC
t2M5vY849bi1b30sgROzf+0gJHEqRMOPg5CcLQirtXf2ct5b1IKSs42b/lygPAC8
6q+L61r4dw5EPwp8RiIMeFqSmLACt4WiU3onVfLiyxCwcyf5x4xJUBOkZ9/MuPGU
hrU9QmiaF44CXp6XF9oIvIXwv81sRdm9vQkYDXS7wU369U+qeVXBNOx7d71omqhK
tPCs7cyH/K/VozzQjIt6ZllFnvC6N7iXXUf4Z0jGvFZPINRKYYMf2LlQMzLk5z5V
f+mGo6HBvCBUd9afx6fxm4Q+bg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:01 2026 by rpki-client