
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
File: q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft (raw, json)
Hash identifier: iJNSDkAhWl0XizHTBwpeaJQSBFZ+pLV+VI2gsTebKhw=
Subject key identifier: 86:F6:BC:06:B9:0E:D8:E9:45:76:60:7F:82:36:6B:B0:11:6C:B6:E2
Authority key identifier: AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
Certificate issuer: /CN=A914E1BD/serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
Manifest number: 29
Signing time: Sun 05 Apr 2026 08:06:24 +0000
Manifest this update: Sun 05 Apr 2026 08:06:24 +0000
Manifest next update: Sun 12 Apr 2026 08:06:24 +0000
Files and hashes: 1: q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl (hash: ZTIZ4BVbVguDcHTZsXsrokut7oYrmh2xWvft1IaFxlo=)
2: FC4E4156FB3411F0841666933D6F56BC.roa (hash: EB7Zu5vP9pgptqSutxDmsy3gmbeSeQdiZ2X1SMg8Qf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1BD, serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Validity
Not Before: Apr 5 08:06:24 2026 GMT
Not After : Apr 12 08:06:24 2026 GMT
Subject: CN=69d21800-b3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:87:40:15:d5:dd:3b:23:7a:c0:41:3a:2d:
b9:aa:67:63:23:9a:aa:cd:37:7a:9e:87:b1:3e:0b:
9c:d1:c4:df:a9:23:fb:f3:58:c4:fa:20:83:85:19:
2a:00:a5:5c:da:9d:a3:b7:38:37:58:29:dc:f6:55:
5b:2a:e3:ef:0b:26:3a:19:b6:8d:9b:cf:11:18:6e:
d7:4f:f3:4c:8b:39:ba:6a:79:22:bc:84:b0:fd:ef:
7e:4e:e4:da:06:87:55:e3:de:5b:9c:d4:65:19:06:
7d:c6:46:8f:1b:14:b1:53:b2:d0:93:96:85:74:90:
81:eb:33:07:96:ca:f2:e0:2b:0a:cf:17:56:ff:4c:
e6:ce:07:33:a7:0e:c1:10:b1:5d:09:78:8a:37:62:
b8:e9:0d:1a:57:38:88:30:87:6d:04:5b:d6:b6:bd:
81:d0:a8:35:9c:59:4a:7b:d5:a8:38:d2:66:ab:89:
64:96:f4:f3:c2:be:d4:39:e2:9d:2e:fd:3a:85:1e:
d6:01:25:28:84:a4:35:77:24:59:1c:9f:32:8f:a0:
c4:c1:3d:f1:b0:8d:f7:44:29:ed:c7:f3:3a:f7:a6:
a3:e2:fc:df:b6:85:d4:f7:80:b5:a7:17:a8:43:36:
a1:56:ca:2e:a6:a0:30:f8:30:9c:22:fa:7a:3d:fa:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:BC:06:B9:0E:D8:E9:45:76:60:7F:82:36:6B:B0:11:6C:B6:E2
X509v3 Authority Key Identifier:
keyid:AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:90:d0:e8:e4:66:4e:18:df:8f:b0:3b:93:35:82:1c:4d:
13:1e:2e:e7:3b:03:ae:15:ee:d2:22:c6:ca:9e:5f:12:64:d7:
c6:1b:65:9b:f5:0c:27:dd:21:5b:34:52:a7:bb:68:07:9e:b0:
48:2f:82:60:6f:53:62:1b:82:17:c7:51:e8:83:d1:8e:4b:a4:
e8:6b:3f:38:5e:ba:99:25:21:92:dc:d8:b3:8b:df:63:bf:df:
15:60:3e:1d:7b:8e:3c:33:25:41:22:51:55:dc:f8:b1:13:74:
30:f2:a6:a9:af:9d:43:f5:36:98:c4:fd:b2:53:ae:63:f7:80:
78:2b:52:b4:e2:de:1a:66:d1:b4:77:1c:2e:78:6b:a2:aa:8a:
c9:fe:5a:b3:83:c9:26:13:1d:e7:98:48:69:85:14:a0:a0:1d:
d1:22:21:d3:4e:68:7a:4c:15:65:74:8a:9d:7c:cb:b1:72:67:
82:d6:ce:d2:88:dc:1c:84:25:33:35:d1:a3:81:80:1d:95:b9:
14:7f:4c:cf:94:2a:ba:7e:1c:ed:3c:c6:39:7b:71:24:dc:7e:
d3:6a:6e:f4:c5:20:48:1f:61:8d:fc:6d:53:e1:cd:90:ad:58:
e7:9c:77:6f:d8:fe:0a:26:34:19:59:55:21:40:05:c7:34:c6:
40:c8:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:48:58 2026 by rpki-client