
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier: w0kSFCoUJAIH+T5j/T44PDCu7SOoayP6b52QCpejDVU=
Subject key identifier: FD:87:DA:BD:02:BB:E8:91:D8:AC:4F:E7:A1:D9:A7:FF:06:8A:13:2D
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial: 0459
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number: 044B
Signing time: Tue 23 Jun 2026 00:19:01 +0000
Manifest this update: Tue 23 Jun 2026 00:19:00 +0000
Manifest next update: Tue 30 Jun 2026 00:19:00 +0000
Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: abW4P2dltE4TPDwOFtFHAfQLBwr3U4rrNxq0zkW9TNc=)
2: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: iuWH4XsJsz0loBqcOc0cY5MFt/NYR3pQCRGo6mfAtWM=)
3: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: azSQvrLGixSL3oYOq7/u81UYo4j8paDDRGJYii7YcF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Validity
Not Before: Jun 23 00:19:00 2026 GMT
Not After : Jun 30 00:19:00 2026 GMT
Subject: CN=6a39d0f4-af7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:73:28:f8:60:2f:3c:4c:54:da:fd:69:bd:
80:6d:8b:3c:58:15:93:5c:53:5d:4f:8f:44:4f:a0:
22:47:fa:82:d8:7d:d2:fe:91:16:50:2f:a5:8b:f9:
b8:67:87:43:40:fc:0e:d5:aa:4a:57:70:33:9b:7a:
be:ba:a0:9e:40:a4:65:81:d3:04:b7:31:4d:05:65:
91:6d:9d:dd:f2:e5:63:45:8a:92:f5:6e:7a:c8:5e:
01:e6:25:23:90:73:bf:e5:af:c4:26:3e:ea:65:34:
8f:d8:d9:fc:78:de:2c:16:38:a8:24:37:b1:a6:c7:
93:1a:60:d5:3d:26:59:e7:df:18:bb:da:71:dd:41:
0e:0f:59:ea:d0:69:4f:cf:da:f3:e8:0b:af:4c:ee:
76:6c:c3:62:47:9d:9b:d6:e3:5a:41:c2:55:56:f5:
f9:53:7a:75:29:3c:dc:a9:9d:6b:83:e9:f8:e3:95:
01:59:bf:9f:1a:91:20:06:b4:be:1d:00:37:89:16:
4a:46:7e:b9:92:a5:63:9a:04:d9:dd:c3:e3:d3:cb:
55:a2:fe:b3:5b:70:55:9c:07:40:57:cf:92:17:22:
be:b2:3f:23:5f:49:08:aa:f5:fe:be:09:d8:50:a0:
a9:1d:a0:19:ce:3e:d0:f2:5d:03:20:4f:b1:ef:66:
60:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:DA:BD:02:BB:E8:91:D8:AC:4F:E7:A1:D9:A7:FF:06:8A:13:2D
X509v3 Authority Key Identifier:
keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:8d:07:55:58:65:51:08:ec:92:a4:76:d9:5d:d6:a4:40:
5a:b0:23:b7:57:cb:26:1a:3d:68:70:2b:87:9b:9f:04:de:0d:
9f:dc:2a:7c:9d:4b:5a:5d:aa:20:f6:83:11:c4:c8:83:b7:fb:
b9:80:b4:90:2b:fa:9f:69:c6:9b:94:10:82:f4:c3:4d:fd:72:
e7:ee:0e:61:e8:dd:fe:cf:3c:be:09:15:2e:0a:6b:24:66:01:
54:10:4d:ce:00:bd:90:fa:53:2a:0d:f9:7d:36:1b:d7:7c:07:
81:41:ee:77:87:76:db:93:36:99:4c:1c:5b:f3:d7:eb:37:94:
74:4a:65:8a:bf:24:da:be:54:4e:2b:2a:e3:01:5f:a5:94:20:
2c:ca:5b:5d:b8:4f:16:7f:0a:55:63:c9:01:97:88:32:f7:62:
37:f2:1e:a7:83:81:2c:03:03:d7:a7:92:b7:4c:4f:c8:f3:36:
49:1d:2c:a6:dd:2c:28:72:e5:41:13:5b:46:fa:a0:85:8a:d9:
b4:e6:8d:23:86:c8:f9:44:0c:f2:3c:3f:13:af:26:35:b3:64:
d3:6d:a6:af:55:a6:e8:93:61:d2:b2:f7:f8:b8:3a:06:a1:1d:
03:bd:8c:4c:a6:00:11:c3:09:d0:c2:2b:d5:10:09:8f:7f:b1:
3a:c4:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:19 2026 by rpki-client