
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier: D2/lReiNPLWfnDNQLJrkfaj/MFo3lllvaRa5sMwceV4=
Subject key identifier: 0A:AA:AA:2C:DC:19:48:CC:98:6B:56:92:2B:CB:FD:00:8B:AE:A5:39
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number: C4
Signing time: Mon 02 Mar 2026 01:52:17 +0000
Manifest this update: Mon 02 Mar 2026 01:52:16 +0000
Manifest next update: Mon 09 Mar 2026 01:52:16 +0000
Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: FRivcWXG7IeYAcK5B5bkshCT7WHVxJlBdYoY6rZTk98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Validity
Not Before: Mar 2 01:52:16 2026 GMT
Not After : Mar 9 01:52:16 2026 GMT
Subject: CN=69a4ed51-7919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:0f:de:64:7f:a3:0f:74:92:09:a6:bd:80:
f1:ac:e2:40:36:60:38:cc:87:9d:7e:3d:ab:c9:a8:
3e:27:35:8b:76:3f:10:25:17:89:53:4f:63:71:d6:
05:1a:1c:94:e2:32:80:35:31:bb:d0:cf:36:7c:6d:
84:db:43:09:b5:b2:44:24:df:2a:f5:d4:64:e4:36:
fe:7e:c2:a9:6f:62:fb:07:2d:f3:70:eb:bc:41:d5:
f0:bf:0b:26:16:cb:70:48:00:66:f4:6f:f6:e1:a6:
14:24:30:c7:e5:f1:4d:d6:57:65:98:48:85:0c:de:
da:e3:6c:4d:f7:5f:2f:40:03:a4:95:4a:b3:54:47:
11:a4:26:32:d4:61:2b:c4:51:2d:3c:d3:44:2f:f5:
31:d7:6c:58:49:19:a9:c9:3b:d4:92:d4:55:dc:bc:
43:61:5b:a5:5f:2c:09:35:07:2a:5e:bf:05:00:7f:
d3:1c:50:90:20:b2:fc:91:80:ce:f4:9c:1c:ce:e6:
cc:99:85:b6:66:33:2c:5d:78:5d:db:5f:65:e5:82:
22:ab:31:c3:1b:72:1d:1d:5e:9f:a2:c1:2a:30:c7:
92:dd:7f:78:19:94:b0:3e:92:e5:b1:64:42:58:b4:
46:47:07:ed:98:dd:41:ad:7a:01:76:a4:4b:9b:69:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:AA:2C:DC:19:48:CC:98:6B:56:92:2B:CB:FD:00:8B:AE:A5:39
X509v3 Authority Key Identifier:
keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:27:8e:80:7b:17:25:3a:3b:f5:54:3b:0f:25:f8:c4:4c:b7:
a6:77:4a:83:b1:c8:1f:48:d5:e0:24:ca:5d:19:dc:26:eb:04:
c2:57:2a:a9:8e:eb:7d:50:9b:e9:64:c9:5b:fe:87:c1:bf:83:
a8:6d:70:08:a2:bc:44:c6:ae:7c:81:14:f6:46:3e:6d:b9:97:
17:8f:9e:ca:b0:3d:38:44:12:ba:9f:43:da:55:c2:27:f3:65:
22:a8:c7:eb:c9:18:3d:4d:10:96:fd:ce:73:94:05:cc:c0:2e:
0a:36:34:76:e7:3b:96:05:6c:ba:fe:b8:04:c9:9a:9f:b7:ec:
32:64:29:b9:8e:f2:0b:b9:c7:54:9c:2b:a3:de:5e:df:1f:13:
8f:c0:ff:d6:a7:0b:b0:52:a5:18:9d:55:d3:b1:e2:95:20:60:
12:da:47:e3:7f:01:ba:0b:37:e8:6e:db:36:c8:7d:b1:0e:38:
1f:70:93:8c:8c:b3:35:aa:83:bf:a0:d6:6b:60:ef:35:c7:59:
a6:b6:d7:b3:e3:8a:7d:42:a7:20:81:d7:f8:4e:e5:b0:83:5e:
ca:f0:3b:56:67:13:6f:71:20:c2:31:ca:5a:e6:3c:1f:f9:8a:
1e:b0:67:d9:79:aa:cb:d4:30:04:1d:61:c5:7f:7f:57:47:80:
de:87:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:51 2026 by rpki-client