
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier: p8bXad2/Js58I2tQ4IA826HnEL2fVT/b4fXJTZ68wLM=
Subject key identifier: 45:7F:19:57:B2:49:F1:35:6E:4C:EF:1D:F4:80:C7:0C:4C:28:94:F1
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial: 0B56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number: 0B3B
Signing time: Sat 04 Apr 2026 19:05:27 +0000
Manifest this update: Sat 04 Apr 2026 19:05:26 +0000
Manifest next update: Sat 11 Apr 2026 19:05:26 +0000
Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: 4kIan7/ilAHclhdqRSKnUzZgI0ppZzWTWvWLAyMFyT0=)
2: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=)
3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=)
4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2902 (0xb56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Validity
Not Before: Apr 4 19:05:26 2026 GMT
Not After : Apr 11 19:05:26 2026 GMT
Subject: CN=69d160f7-f86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:22:de:89:b0:25:5e:57:a4:4c:d4:e8:7c:
f7:a3:4b:64:44:0c:b5:8a:ed:d4:ef:55:fa:de:34:
8f:c0:e5:97:fb:24:d3:25:7b:6b:9c:a6:b3:5e:ec:
4f:8b:e1:aa:13:1d:3c:21:92:a8:98:75:33:10:a7:
35:d2:25:ec:ec:d9:56:5d:37:2a:f6:bc:5d:e7:84:
7f:e6:85:93:7c:c3:4a:e3:cb:4a:d4:aa:f5:3b:92:
54:c2:55:a3:92:34:b4:53:60:90:ba:75:e3:d8:f8:
b4:1a:83:3f:a8:22:8b:37:53:2b:2e:1c:df:c8:c3:
49:9a:9f:b3:8a:9c:07:ea:ed:c7:81:eb:35:6c:6c:
63:9c:53:88:87:8e:57:4b:9e:7e:bf:3b:bd:70:47:
35:ae:2d:f3:25:05:b7:23:2b:30:24:17:c6:13:32:
78:28:b0:83:4b:c2:18:33:b7:24:71:e2:89:a4:0e:
60:b7:bf:82:53:1b:76:c4:96:1e:62:20:cf:32:86:
11:5c:24:0e:86:b0:c5:bf:41:41:b0:ad:4a:48:4d:
08:fb:4c:b4:b9:6e:5d:1b:71:75:04:3a:e2:4a:e6:
b9:33:82:07:1f:d7:41:13:31:1f:a5:1e:d0:1c:d7:
1e:4f:bb:64:b4:f2:c6:3d:7d:d5:a0:eb:43:37:26:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:19:57:B2:49:F1:35:6E:4C:EF:1D:F4:80:C7:0C:4C:28:94:F1
X509v3 Authority Key Identifier:
keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2d:53:7e:66:f2:7b:12:e2:91:02:3a:f5:15:81:47:5a:4a:
d3:4e:66:d2:f3:99:82:15:35:04:55:33:64:5f:6e:4d:14:0d:
43:12:23:0c:cf:4d:29:f6:bd:33:ee:cc:e0:a8:a7:a6:b5:b3:
13:f1:88:1c:9b:5c:0a:d2:7f:37:0e:66:78:bd:d4:95:3b:e3:
f8:06:e3:7f:23:77:c1:7b:14:66:06:c1:1b:19:12:dd:85:44:
b6:d4:47:25:cf:21:9a:d1:d8:ce:7c:cd:76:47:f8:96:c5:5f:
2e:21:54:f3:80:14:5b:fc:26:ff:bc:cd:42:d4:56:6d:f3:26:
6d:2f:6a:53:dc:5a:60:a5:b9:5b:c0:dd:0f:5f:cc:f1:de:b1:
17:2b:f9:27:1b:32:9f:ec:1b:ba:10:1e:c9:ee:63:be:c7:ec:
45:df:2c:65:71:59:01:dd:85:ca:14:4e:7c:a5:3b:40:9f:e4:
4e:86:8d:cb:a1:4a:d2:53:39:b7:62:1d:29:a1:2f:d8:03:43:
f8:7d:3c:60:94:d2:e1:2d:4b:6d:61:74:ff:63:20:22:b9:30:
b7:db:87:9a:e7:bb:b3:e3:ae:76:fb:ec:20:ff:23:28:df:87:
f6:2a:a9:56:d9:44:f6:b7:63:04:3a:d7:48:c3:98:c0:71:ac:
8d:e3:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:59 2026 by rpki-client