
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier: 8b48Vs6a5syVGlIwedn4GOeS0AxYvubL9DMCSSBWkE4=
Subject key identifier: 6E:F5:F5:1B:9F:97:47:8E:09:82:7C:C9:74:E7:38:70:39:93:75:57
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number: 0296
Signing time: Tue 05 May 2026 01:51:08 +0000
Manifest this update: Tue 05 May 2026 01:51:07 +0000
Manifest next update: Tue 12 May 2026 01:51:07 +0000
Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: acOsS8NT5vqHc9EUdn8jcc6+P2N2uvhW+zPu5ISNieI=)
2: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: Wpi2JAjBrkvZuNJTiIpyUxWGu04n+1j7IVuyCXVldS0=)
3: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: 0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=)
4: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 3O6BvMokBPQb3h3RA+cEG9OncfKf9sHCk/LbeGG4QfA=)
5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: u18PyOf6WCGxWY2aATMIM9qv2GW3Pt67w7d5BWo1AFo=)
6: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: 8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=)
7: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: BkxKV7IhdZCefMM8QPhYXEEYW9dJOyUUvjsBlVaijE8=)
8: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: sHSb0pTIf8ICWzfHaOSo11pRZiOv88WhOhvv7Mz8Vos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: May 5 01:51:07 2026 GMT
Not After : May 12 01:51:07 2026 GMT
Subject: CN=69f94d0c-1a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:8b:6b:df:21:54:7f:d0:67:1b:47:36:7a:
fd:b0:51:b1:a7:0b:64:79:d5:31:78:34:5d:9b:0c:
1d:a7:53:84:d1:53:6e:cd:c8:0b:f1:24:47:c7:7f:
09:84:8f:2b:a9:8b:6f:fa:14:df:08:21:f1:5b:63:
f9:df:fa:51:92:08:5c:09:79:44:e9:21:b9:ff:af:
b6:f7:7d:6c:61:2e:ee:c3:f8:46:6d:96:c1:1e:e2:
20:4b:41:3d:7b:c1:7d:a7:d4:41:f5:fa:2a:60:31:
bc:74:a3:70:06:18:88:d6:f7:72:f9:95:b2:33:20:
2c:aa:14:08:6b:a5:7b:40:03:8e:fe:dc:a7:92:5c:
7b:9d:4b:75:05:94:eb:7a:7b:e5:8c:19:e0:b3:20:
a0:4a:2f:5a:4e:bd:89:08:0c:f0:d1:2d:0f:5a:6e:
2a:b0:42:c3:e2:ac:fa:0c:bb:73:94:94:e4:9c:19:
76:63:cf:5b:1c:fe:72:0e:8c:4a:21:0b:b0:df:13:
ac:df:70:6c:62:f9:d6:ca:4c:23:6e:79:e5:fa:27:
d4:00:4f:92:2a:59:ca:74:63:cf:21:b6:24:ff:be:
9c:1d:38:41:e5:29:4f:e1:d1:19:bb:de:6a:5e:8f:
a0:be:4a:3f:b2:c2:33:75:1f:ac:aa:fc:c4:29:59:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F5:F5:1B:9F:97:47:8E:09:82:7C:C9:74:E7:38:70:39:93:75:57
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:76:82:e6:f0:f2:3c:78:e0:5a:ff:ae:33:fc:17:c4:ea:25:
a1:5e:4a:73:f5:9b:b1:14:34:9b:8f:f5:af:8b:d1:7c:9a:b8:
a2:1e:87:48:33:a9:ad:1a:8b:71:e4:e8:07:ba:1f:e3:7a:f2:
fb:8b:54:e9:1b:6f:70:75:53:f7:df:3b:9e:7f:23:90:e0:7a:
0c:fc:23:23:57:b9:6c:ba:e8:73:89:c7:5c:8d:06:6b:5e:e2:
a4:5a:3a:b2:ff:f3:d4:c3:56:fb:6d:f1:df:78:8f:7a:32:fb:
09:4d:ff:ec:88:f3:78:5f:58:79:27:da:cf:06:aa:de:5f:42:
cd:97:08:5d:31:5b:af:d8:f9:a5:04:a6:0d:5f:14:9a:be:3c:
12:df:24:a3:af:86:4f:be:57:6f:91:6c:f4:d2:4f:03:ab:2f:
5b:ce:c9:24:0f:15:76:25:53:3e:fe:f1:0a:ab:f6:cf:42:2b:
1e:3d:db:46:1f:50:00:a3:c2:e1:3a:77:fa:29:c1:cf:99:30:
69:79:39:d0:5c:fe:97:a4:a7:ec:90:24:ce:07:c1:15:ea:ca:
ab:53:af:2f:55:e8:c4:56:9d:b3:5b:d2:3c:66:db:08:77:b6:
b6:46:56:14:10:56:3d:5b:8a:ac:e4:2f:93:86:7a:e7:26:74:
fe:8c:d7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:06 2026 by rpki-client