
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File: 6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier: XphA00nqO7VHjKKFkJ6o02vMaIWte7z8h5/mh+goGto=
Subject key identifier: 16:66:AF:E1:DE:C8:BD:B9:86:CB:97:56:0E:4A:6E:BA:28:0C:EA:2A
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number: 0134
Signing time: Tue 17 Mar 2026 04:27:29 +0000
Manifest this update: Tue 17 Mar 2026 04:27:28 +0000
Manifest next update: Tue 24 Mar 2026 04:27:28 +0000
Files and hashes: 1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: 17VU11LGKlT7izi0WX2uel2VVfMUk5HRxxOYHFvTm7Y=)
2: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: cwdVnCmvvqxvWzMgTGL5Jud7cZIF7lHoUd7q8Ic9ySU=)
3: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: 0oj6DB6AcAI80O6cWTUs9uNP0wv1u3q24kvlcmDmd+0=)
4: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: GLcX1wFp7o9QRrChsXnCvjX1Ko/I4of/iC0AV3GlULs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Mar 2026 04:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Mar 17 04:27:28 2026 GMT
Not After : Mar 24 04:27:28 2026 GMT
Subject: CN=69b8d831-9ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:42:60:35:0b:41:55:d6:dc:97:1f:67:c0:
0c:53:4b:80:20:4b:4f:43:4b:a8:12:dc:79:05:e8:
91:23:2f:00:42:82:6d:1c:b7:24:b1:ff:e0:21:c6:
1f:53:94:49:e9:fa:58:ea:01:fa:dc:56:2b:9e:5c:
92:47:61:48:ec:55:32:1c:0b:ec:a6:9d:20:55:9f:
c4:6c:29:94:18:df:1d:c1:d7:e3:1a:ae:fc:76:91:
84:c1:1a:d6:af:18:a7:0b:6e:c5:66:29:2e:39:1a:
ff:6a:43:c0:26:b6:2b:3d:d3:5f:19:b3:bb:15:36:
04:54:4a:a3:83:43:e9:aa:b7:90:51:26:03:b8:5e:
29:c1:d4:a3:87:71:6f:e2:6a:d9:eb:57:c6:fa:09:
db:c3:76:30:73:2d:9a:e7:e8:d9:b7:17:2c:15:f6:
1f:8a:66:c1:9d:33:47:0b:bd:51:a6:33:93:ba:d1:
e1:a7:a8:fc:ef:24:69:6c:13:95:79:57:7d:4a:98:
dd:3f:f2:8a:60:fe:6d:16:94:ca:54:82:4e:62:77:
91:12:cd:6c:8a:ed:4c:c4:15:d2:ab:82:b5:53:2f:
3c:02:4e:a3:b3:1a:ac:82:23:a8:be:8c:cf:d1:19:
39:d9:40:0f:dc:b9:58:c7:4e:72:9d:82:3a:13:f9:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:AF:E1:DE:C8:BD:B9:86:CB:97:56:0E:4A:6E:BA:28:0C:EA:2A
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:64:be:9b:c8:d7:69:00:05:25:c9:38:2d:fd:f6:ad:56:
f0:95:17:d2:8e:8f:f9:3d:4f:6f:54:e0:2d:93:04:2a:de:23:
e4:1f:55:8e:90:f2:ee:74:4c:15:8d:74:ce:db:12:d6:07:a7:
06:3c:82:dc:74:be:a3:07:58:e1:ef:d4:67:fc:b5:4e:3b:88:
4c:a8:2f:27:6c:80:63:0a:5e:37:56:83:95:40:dd:88:19:a3:
1e:00:e4:8f:d2:dd:96:b6:03:8a:d5:e5:b0:ac:20:0d:8f:91:
7f:ab:7e:50:72:d7:de:c0:f7:e3:d7:ea:8c:1a:e2:af:f0:4a:
21:53:43:06:0b:c6:1c:84:57:9f:73:97:8a:60:61:83:c1:c4:
27:48:17:d9:5d:c8:84:f2:21:49:8f:58:00:59:d1:69:17:18:
45:3e:74:6d:3a:c2:d3:00:f9:b3:38:00:4e:78:35:8b:3f:cf:
59:7a:5d:e7:31:b7:b0:30:c6:62:93:d5:fe:4c:5c:09:cd:4c:
42:b2:c2:98:9b:e7:8d:79:86:55:59:7d:74:f5:37:f6:ed:d8:
8a:2a:d0:fd:ec:7a:32:ae:71:58:ad:b9:0d:02:c0:29:44:d5:
7d:83:97:75:e5:d9:54:b3:01:45:39:e6:23:a0:48:66:dc:8b:
9e:34:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 00:24:21 2026 by rpki-client