
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier: q0nEkwKpQFf9toDf+ZS71b16WQM59nOTYNAOU1nO9TU=
Subject key identifier: EF:B4:33:9D:96:D1:3D:09:06:93:58:48:2E:48:66:DF:6A:D3:36:A0
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial: 0DE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number: 0DDC
Signing time: Sat 04 Apr 2026 17:44:43 +0000
Manifest this update: Sat 04 Apr 2026 17:44:42 +0000
Manifest next update: Sat 11 Apr 2026 17:44:42 +0000
Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: 9uvXBjkD8wJ1lTYts/GBgbmh0BbYOM3yNs8/3qTSmQM=)
2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: MCiCoDcn9iWsMnw+W4ic1bgrDj5hNzV2NifUiMBx2Ro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3560 (0xde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Validity
Not Before: Apr 4 17:44:42 2026 GMT
Not After : Apr 11 17:44:42 2026 GMT
Subject: CN=69d14e0b-2e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:77:72:d1:c8:a1:7f:84:fe:a1:81:af:c6:
5f:16:5d:89:b8:04:19:5a:72:15:08:e7:cd:6b:78:
c0:bd:28:07:7e:89:1c:da:cc:3d:d6:1f:1c:d7:ea:
bb:40:15:28:0a:3b:cf:67:90:14:77:6b:1d:f7:c1:
e3:5e:24:2c:cc:0e:cb:1e:08:cf:9f:6e:03:09:df:
d5:12:38:10:b4:f8:ad:ed:af:77:12:ac:ad:03:8d:
be:e3:fd:6c:fa:5a:c1:8c:7d:e7:10:de:33:62:ad:
1d:4c:d3:b9:08:a6:23:dc:2b:f2:1f:ca:80:ad:45:
13:9d:a2:d3:a0:6e:6c:24:b0:0b:eb:66:4f:b5:62:
60:d5:15:97:2b:39:69:93:6f:ff:1a:e7:33:84:a5:
7a:f0:8c:5b:13:d0:1a:d5:df:bb:70:98:0d:fa:4e:
0a:39:03:5f:5e:03:a6:73:1d:5c:93:52:63:6e:6c:
8c:2b:2d:f9:39:c6:77:0f:e0:a8:89:ac:79:34:db:
be:5b:34:89:35:f7:f8:9b:ee:98:f5:73:f2:46:43:
d7:46:66:ef:41:61:27:48:0d:be:3f:84:3b:3c:2d:
58:26:b3:b9:a4:65:c9:39:38:7e:e2:84:25:93:f4:
e9:ca:6d:92:d8:3c:71:b0:49:f8:c5:2d:1e:cc:89:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:33:9D:96:D1:3D:09:06:93:58:48:2E:48:66:DF:6A:D3:36:A0
X509v3 Authority Key Identifier:
keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:1a:40:80:ac:ba:b6:65:01:ad:24:60:ac:15:4d:ea:ef:92:
d2:6a:b6:3b:1e:ce:8b:1b:f3:da:b8:8f:dc:c9:0d:5c:5d:32:
aa:f2:c0:fe:79:1e:dd:cc:16:2a:3b:30:9b:2c:8e:62:1c:b5:
ae:59:09:73:61:a7:f7:28:a6:bc:0b:15:2c:87:b4:f6:b4:f4:
9f:fa:7d:67:f3:69:90:6d:3c:a5:dd:e8:55:2a:59:9e:bb:b9:
a2:ed:56:a5:95:2a:d8:06:fe:03:7b:91:bd:8e:58:6c:6a:e0:
2b:39:02:75:ec:13:d2:b3:82:2a:8c:ec:c4:ac:a5:e0:dc:f6:
da:2a:75:6f:bd:9d:77:ca:9f:ad:7b:d8:c3:f5:49:86:9f:85:
1e:a8:9e:78:ae:8d:1b:83:50:fc:36:74:53:6b:f3:b6:c8:15:
c3:33:b2:4e:17:9f:e5:cb:19:24:9b:1d:c8:fe:eb:86:89:e2:
2f:28:37:4d:c8:fc:48:8e:3d:6a:e7:68:7a:4b:6d:52:63:0c:
c3:95:7c:36:da:81:cc:9f:7a:cb:a7:2b:25:72:3c:47:6e:29:
a9:56:6e:ad:a5:52:99:bc:a9:e2:a1:15:5c:02:07:ce:06:a3:
a6:79:a2:c7:75:69:26:2c:df:17:af:de:59:1c:f4:a5:e4:0a:
05:db:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:52 2026 by rpki-client