
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json)
Hash identifier: J9rM/R9/Tt9bbwIM2fAN8Z4p3+oS88SX8mPDrO3IHyQ=
Subject key identifier: 83:83:42:94:86:F3:46:52:AA:CA:1D:42:F8:03:51:21:29:87:73:B3
Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
Manifest number: 048C
Signing time: Sat 04 Apr 2026 23:47:11 +0000
Manifest this update: Sat 04 Apr 2026 23:47:11 +0000
Manifest next update: Sat 11 Apr 2026 23:47:11 +0000
Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: 03lEY5Y8o+i18owQ8sO5R9ivG8JiK6Sft9VPLpBDzfM=)
2: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: N2OHhfn+CsWn9uM8g1Ofmnj7ymg7gw2Y4/3DtYOdMeg=)
3: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: WD9MrIU1Zj3w+mVYD7v9tJ6t/TRXPSfmjh+WqlfPWrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Validity
Not Before: Apr 4 23:47:11 2026 GMT
Not After : Apr 11 23:47:11 2026 GMT
Subject: CN=69d1a2ff-e399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:88:c7:e5:64:3c:f8:81:87:02:96:43:a8:
99:e6:47:b8:c8:75:f6:fe:40:c8:7b:5f:21:63:98:
e3:96:b8:e2:2f:1a:f5:65:ba:3e:3d:4a:4b:27:58:
be:58:fc:6a:92:fc:c2:4d:af:4b:44:54:22:61:81:
46:68:d7:4e:4a:22:38:a1:11:42:ba:98:e4:83:55:
07:25:0d:ba:5d:03:fb:cd:79:26:d1:96:6e:3f:7f:
96:57:11:d6:18:e9:58:41:fc:08:23:27:4e:6e:31:
43:cf:9c:eb:f7:ef:c0:6c:0a:3c:0e:7a:d5:9b:55:
21:8f:5d:c4:f0:ef:67:92:6a:96:f3:af:1e:39:f0:
88:06:f9:f3:e6:c2:7c:d0:b4:b2:a4:ee:da:6e:3f:
68:be:d1:44:9d:2d:62:56:7e:a1:e5:f1:36:d4:83:
0d:f7:5e:22:6f:eb:78:97:40:4d:c7:b0:72:80:74:
39:31:3d:5a:f7:1a:56:51:10:91:f0:ae:d3:09:04:
86:d0:d6:6a:2b:62:b0:3d:37:ba:c5:c4:1d:fb:5a:
33:15:c5:fb:2f:96:33:0e:26:ec:55:90:2a:3c:0d:
4e:53:bc:4e:8f:e8:48:7f:83:cd:95:a2:89:93:37:
66:69:7c:05:67:ea:d4:fb:95:06:41:b2:3e:68:f6:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:42:94:86:F3:46:52:AA:CA:1D:42:F8:03:51:21:29:87:73:B3
X509v3 Authority Key Identifier:
keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:60:2c:ac:f6:4b:bc:46:14:eb:91:c8:ff:af:5e:62:bf:55:
16:f7:58:8e:38:5d:1a:ab:b0:f9:61:65:90:cb:da:c9:c2:a9:
09:71:db:12:cc:4a:2d:de:54:b7:7b:69:5c:61:5e:e5:99:0e:
5c:2e:14:6a:d3:4b:76:9f:2b:50:30:f3:32:98:7d:87:0b:23:
d1:c2:00:f4:1a:0d:09:c7:a8:a0:40:7f:3e:2f:71:39:49:82:
3e:37:fd:2a:e4:e3:dd:ec:f3:30:3d:09:a0:f9:61:c6:5f:d2:
97:e4:35:5f:f6:b1:8a:6e:26:a6:42:a2:13:9c:c7:68:c2:27:
c7:c8:b3:d3:43:b4:9a:0d:82:49:8c:06:24:ae:63:89:42:f4:
f6:e9:88:37:ee:ea:21:a8:bd:04:54:25:1e:c5:f6:75:f3:27:
0c:5e:c5:14:0b:9b:43:00:78:be:24:ee:30:2e:88:eb:cd:35:
7f:89:1b:d1:e9:07:8c:6f:bc:90:e6:cb:3a:9d:a0:01:09:10:
32:90:fe:93:da:a7:9f:af:98:bd:ad:72:50:6d:25:be:b7:cf:
50:cb:1c:d6:00:8b:af:2e:72:58:81:e5:62:86:69:a6:e5:a3:
6f:a6:48:1e:62:52:ac:8b:cc:3a:ae:04:c9:24:dc:c6:1d:0b:
3e:14:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:46 2026 by rpki-client