
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json)
Hash identifier: +JaOdXxBwIamytOpGTVRnsfkbugdQxC8g4C6TLsNxg8=
Subject key identifier: 2D:17:8E:38:D4:89:B8:15:B1:65:9D:FE:4B:DE:1C:A3:9E:E7:52:C7
Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Certificate serial: 17C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
Manifest number: 17B6
Signing time: Sat 18 Apr 2026 16:29:34 +0000
Manifest this update: Sat 18 Apr 2026 16:29:33 +0000
Manifest next update: Sat 25 Apr 2026 16:29:33 +0000
Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: qEP+aIf1yodmiJ9fCL+N1hMNYxVJbld62qIVRYbkQ0U=)
2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: +KfR9XbiA07UHIB3QQaFMDsbb0IWgivCKLoTziO/wYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl
rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6083 (0x17c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Validity
Not Before: Apr 18 16:29:33 2026 GMT
Not After : Apr 25 16:29:33 2026 GMT
Subject: CN=69e3b16d-01f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:89:63:21:8a:0e:18:f2:b0:45:eb:50:d8:
f4:fb:70:65:24:26:1f:7c:97:4f:40:e4:3c:04:8b:
8f:a2:eb:b2:f8:91:d6:83:b0:ee:43:62:9e:ec:cb:
cd:53:14:8d:4b:09:fb:71:f8:99:23:d9:3f:9d:0b:
4c:bc:5b:f3:77:7b:28:40:e6:d1:42:7a:10:d2:ee:
7c:14:48:cd:82:8b:5e:80:4b:02:b5:d4:ec:48:a2:
ad:e8:83:39:d2:f5:72:94:f2:fa:42:6a:72:f2:73:
a8:31:5f:d2:7e:d1:2f:c9:7a:c8:f8:eb:32:3e:99:
38:68:fd:91:cd:64:b2:f1:35:d4:13:66:c1:04:50:
3f:91:26:d5:22:38:ff:e6:31:e2:20:8e:80:b3:1c:
64:61:72:d4:86:04:c7:24:d9:93:f8:a8:bf:e6:4d:
f1:8b:eb:41:a3:c5:c2:9d:42:f6:46:d3:e7:bd:f5:
d8:59:55:84:aa:f2:e9:e9:22:60:89:ae:20:2a:df:
89:47:84:1b:37:b4:f1:e7:c9:48:4c:ee:ac:a1:e8:
eb:67:f9:ac:eb:d0:79:6b:46:a7:99:c1:ac:69:2d:
43:5c:08:a0:a2:ad:23:d4:ac:55:09:0b:90:bd:eb:
ae:db:b5:cd:92:7b:96:7e:a4:36:f1:5d:5f:dc:9a:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:8E:38:D4:89:B8:15:B1:65:9D:FE:4B:DE:1C:A3:9E:E7:52:C7
X509v3 Authority Key Identifier:
keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:3c:7a:6a:3e:6c:71:23:3a:13:35:15:af:5c:43:b2:20:
20:c9:83:d4:71:48:47:cc:89:28:40:6d:cf:f2:db:15:59:78:
ee:80:83:79:a3:2e:81:d3:e4:cb:94:a4:d6:bf:71:c5:21:72:
18:1b:4a:12:59:c6:4c:5b:50:8f:87:8f:6e:c0:f8:6d:b2:30:
97:c9:9d:ca:31:c3:70:3f:57:44:b7:02:1a:f8:95:67:0c:0c:
a1:f5:5a:39:2b:d0:9a:b3:83:27:7e:4b:7f:be:67:ca:b7:48:
fa:9d:71:a8:04:52:f1:b2:67:1c:a9:02:72:ca:1e:51:a4:d8:
31:8a:78:12:b4:b7:bc:33:39:21:f9:46:c5:0d:01:ce:22:d6:
93:38:eb:57:89:7f:57:75:e5:09:4e:37:c7:57:b0:a6:c7:ac:
07:14:55:6a:cc:f8:02:c8:c9:80:6c:1c:97:2f:0f:4a:0f:30:
2e:62:64:37:d3:9f:c6:07:b4:93:a0:39:e3:b8:22:b8:5a:86:
7d:b0:af:f4:3e:a9:ce:25:3d:50:da:df:d5:0a:d6:f5:7e:75:
bb:7d:71:ac:fe:24:af:9f:43:ec:b2:a4:f3:e5:17:6d:7f:2d:
32:6a:09:c3:4a:ce:5e:e3:c3:a5:53:e3:f6:7e:3d:28:54:6d:
fd:2c:b1:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx
N0JBNThGODIwHhcNMjYwNDE4MTYyOTMzWhcNMjYwNDI1MTYyOTMzWjAYMRYwFAYD
VQQDEw02OWUzYjE2ZC0wMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprmJYyGKDhjysEXrUNj0+3BlJCYffJdPQOQ8BIuPouuy+JHWg7DuQ2Ke7MvN
UxSNSwn7cfiZI9k/nQtMvFvzd3soQObRQnoQ0u58FEjNgotegEsCtdTsSKKt6IM5
0vVylPL6Qmpy8nOoMV/SftEvyXrI+OsyPpk4aP2RzWSy8TXUE2bBBFA/kSbVIjj/
5jHiII6AsxxkYXLUhgTHJNmT+Ki/5k3xi+tBo8XCnUL2RtPnvfXYWVWEqvLp6SJg
ia4gKt+JR4QbN7Tx58lITO6soejrZ/ms69B5a0anmcGsaS1DXAigoq0j1KxVCQuQ
veuu27XNknuWfqQ28V1f3JotyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0XjjjU
ibgVsWWd/kveHKOe51LHMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4
QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq
NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5
VE5mLUU5WGx6bElYdWxqNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUho8emo+bHEjOhM1Fa9cQ7IgIMmD1HFIR8yJKEBtz/LbFVl47oCDeaMugdPk
y5Sk1r9xxSFyGBtKElnGTFtQj4ePbsD4bbIwl8mdyjHDcD9XRLcCGviVZwwMofVa
OSvQmrODJ35Lf75nyrdI+p1xqARS8bJnHKkCcsoeUaTYMYp4ErS3vDM5IflGxQ0B
ziLWkzjrV4l/V3XlCU43x1ewpsesBxRVasz4AsjJgGwcly8PSg8wLmJkN9Ofxge0
k6A547giuFqGfbCv9D6pziU9UNrf1QrW9X51u31xrP4kr59D7LKk8+UXbX8tMmoJ
w0rOXuPDpVPj9n49KFRt/SyxwA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:59 2026 by rpki-client