
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier: Z0bi2Uj5B2vLs8GRG/WmdnzLJzA+v4NHIg4OgY4l00g=
Subject key identifier: 51:FE:FB:DF:88:95:3C:6D:C7:90:2D:A8:72:5D:B4:8B:A8:7C:10:FF
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number: 02DB
Signing time: Thu 17 Sep 2026 01:27:36 +0000
Manifest this update: Thu 17 Sep 2026 01:27:36 +0000
Manifest next update: Thu 24 Sep 2026 01:27:36 +0000
Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: nwGaNAHk1p7F0nEDdhpjqnyx65jU4Gm5C+8RXnG4pwk=)
2: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 3O6BvMokBPQb3h3RA+cEG9OncfKf9sHCk/LbeGG4QfA=)
3: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: Wpi2JAjBrkvZuNJTiIpyUxWGu04n+1j7IVuyCXVldS0=)
4: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: BkxKV7IhdZCefMM8QPhYXEEYW9dJOyUUvjsBlVaijE8=)
5: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: 0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=)
6: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: 8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=)
7: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: u18PyOf6WCGxWY2aATMIM9qv2GW3Pt67w7d5BWo1AFo=)
8: 84EE99E868A911F1B1EBC4147A47A888.roa (hash: z/+T5dr4icEG46i7t+MZU5zchUhuJVVudXp4434069I=)
9: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: sHSb0pTIf8ICWzfHaOSo11pRZiOv88WhOhvv7Mz8Vos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 01:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Sep 17 01:27:36 2026 GMT
Not After : Sep 24 01:27:36 2026 GMT
Subject: CN=6aab4208-fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:4a:06:a7:72:10:b8:f6:81:c0:b2:b1:09:
6e:2e:ee:a9:d9:f4:9f:c5:61:6e:c5:c4:c8:6d:88:
a2:1d:56:8b:de:f0:f9:a4:5b:71:fa:f4:f5:65:e7:
c6:92:5e:fc:30:e9:78:79:78:24:33:88:b2:ec:92:
5e:3f:c7:2e:83:8c:7b:92:db:1c:12:db:3a:51:e3:
87:10:a6:29:f2:25:c2:7a:33:eb:f9:3d:df:58:84:
b9:77:cf:1a:1d:00:78:c3:4c:6c:0d:ce:b3:3c:13:
26:70:93:0c:26:3a:13:6e:9b:f9:60:74:4a:23:9f:
24:c2:7c:11:90:12:b0:4b:a6:4c:9e:b7:88:d7:26:
66:82:c8:78:ac:e9:e9:17:d4:0a:a6:44:c0:33:ac:
78:e1:8d:2c:62:7e:1e:5c:1b:20:dc:c4:51:88:3d:
b5:78:db:f2:e3:11:14:3d:e4:50:53:67:04:aa:de:
44:ac:16:b3:1a:b2:88:92:b0:90:83:c3:da:b5:bc:
38:f6:86:13:9f:c1:8d:da:ed:3c:e2:4b:27:46:86:
25:65:ab:7c:2c:31:73:9a:9b:00:cc:62:8b:17:2b:
8d:2e:f3:8e:20:d4:38:a4:5f:c0:ab:eb:98:0c:a7:
20:c6:b6:ca:9f:ea:15:71:6e:e6:37:27:99:7e:da:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:FB:DF:88:95:3C:6D:C7:90:2D:A8:72:5D:B4:8B:A8:7C:10:FF
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5d:c2:7b:c8:35:87:fd:a5:25:74:f0:75:ad:dc:2d:20:db:
42:f2:92:15:db:25:bc:b7:52:5f:c0:25:c8:6a:c9:9b:56:45:
73:5f:0d:e0:38:7d:20:14:b7:7b:0b:e0:36:33:27:55:75:71:
4b:45:1b:e7:48:dc:f6:d1:15:18:18:95:c3:1a:90:b7:90:34:
ea:4e:c5:15:1f:13:5a:5b:64:08:6e:57:92:91:93:77:19:8a:
dd:c9:1b:8b:d4:55:15:fc:e8:3f:7f:a3:f8:bd:12:38:0f:a3:
8f:ad:8b:b2:3e:be:28:d4:9d:5d:b0:41:61:d5:69:78:eb:98:
f0:4e:b3:5a:15:e6:8a:a5:af:5a:22:db:99:c2:8f:1c:db:b4:
1e:99:e2:82:0a:a0:24:af:c3:0a:82:1e:07:48:bc:5f:31:a8:
42:45:6c:84:a1:40:15:4d:84:0c:6c:01:ea:09:d9:da:21:4d:
69:b2:0c:84:13:65:45:63:dd:6a:7b:6b:76:0e:9f:50:f8:d9:
fa:ff:23:4d:ec:c5:07:27:15:cf:b0:4b:95:6d:0e:ff:a9:58:
c7:93:bf:50:99:59:f9:4f:eb:b4:43:1e:92:fa:64:c6:b0:1d:
70:19:b5:d9:19:07:1c:73:05:ca:ea:f1:0a:bc:86:1e:61:6f:
74:2e:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:29 2026 by rpki-client