
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier: 4F2oXlfY8JPxevsmZu3mfgHL6gE/dyF65bN9yVZLAp0=
Subject key identifier: 44:A6:39:C3:7E:2A:B7:51:51:79:EF:09:8E:6E:A1:61:2D:D9:1A:F9
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number: 014C
Signing time: Sun 01 Mar 2026 06:10:30 +0000
Manifest this update: Sun 01 Mar 2026 06:10:30 +0000
Manifest next update: Sun 08 Mar 2026 06:10:30 +0000
Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: Ni+CQfErEhg9p7w7K/OMb0X/YqI8nNZKiltRW15Fa1k=)
2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=)
3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Validity
Not Before: Mar 1 06:10:30 2026 GMT
Not After : Mar 8 06:10:30 2026 GMT
Subject: CN=69a3d856-e5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c8:45:72:f3:09:61:66:b7:62:71:4d:97:50:
47:0d:3b:d0:6e:ba:e2:de:23:06:78:15:3d:c5:4f:
57:6b:8a:58:6a:59:84:66:6e:74:46:f9:1a:cd:f8:
4f:ce:9f:3e:85:cf:62:27:68:81:dc:fa:2b:5e:f8:
59:02:21:08:a4:d2:91:d6:c4:66:b6:bf:84:94:25:
2a:0c:ec:56:8b:c4:b5:b2:09:12:6d:c2:3a:6e:09:
46:11:4e:a8:38:34:fb:e6:22:58:98:e3:31:c1:29:
d8:c9:34:c9:6e:ba:8c:99:50:53:53:b3:d2:86:da:
ae:2a:56:a0:7a:9e:58:cf:0f:8b:ca:6d:bb:34:95:
2e:42:ae:25:6a:fa:4f:b1:66:84:10:58:d4:24:0c:
eb:75:e5:15:03:a7:80:15:4d:1c:a2:71:ec:c5:2e:
71:64:6f:95:22:2b:0d:aa:a8:88:a6:0f:76:e3:db:
80:85:5d:d5:ae:b9:09:08:99:c9:96:c6:25:03:ad:
ab:ef:f8:ad:22:bc:99:2d:56:29:d1:e7:31:93:08:
b8:60:84:5a:0e:dd:f5:29:b2:c7:41:c6:c3:b5:ad:
3f:30:c1:b7:c6:d3:e5:77:f9:3f:1b:9f:17:fc:79:
c7:ed:10:0c:5f:06:40:8c:3a:9a:7a:e7:c8:08:c8:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:39:C3:7E:2A:B7:51:51:79:EF:09:8E:6E:A1:61:2D:D9:1A:F9
X509v3 Authority Key Identifier:
keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6c:45:ce:bb:3e:11:3f:66:13:67:11:63:23:4a:05:65:bc:
a4:e0:d6:e6:33:8a:26:a8:e8:df:9f:df:81:51:a0:26:51:00:
8f:24:6c:ff:6e:9a:53:ff:05:c7:02:0e:5f:d8:1f:a9:7b:b8:
a3:41:34:bd:20:65:17:a1:66:49:b1:a9:7d:ee:4a:c6:9b:c5:
d4:a7:09:5f:57:b9:17:44:ba:07:51:4d:7f:39:1e:4c:eb:89:
75:eb:02:91:97:6a:49:71:7d:e4:c7:ff:67:df:64:e7:30:fc:
f4:88:21:1a:9a:78:bf:f8:fe:75:f7:50:da:52:f8:87:4d:97:
93:b5:fd:5b:f1:07:c9:9c:73:85:df:da:d5:be:c2:ea:1b:87:
73:1b:ce:05:c8:c1:e4:d5:f3:a1:cd:5b:53:13:60:16:d9:51:
98:9b:00:14:c0:87:69:71:17:b4:5d:c8:c1:f7:91:f8:3b:70:
a5:66:cb:7f:da:a5:a6:2e:2b:00:b9:1f:ef:14:39:14:16:dc:
2d:af:12:75:4b:b5:69:eb:8b:64:17:32:13:f7:32:b0:9c:bc:
f5:4a:38:82:7a:09:67:b3:f2:78:31:e4:62:43:c0:e8:be:83:
f6:d3:09:da:2f:16:44:f8:a1:fa:44:b2:16:48:63:1c:c2:5d:
3b:d1:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:49 2026 by rpki-client