
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier: bdyevzBiqNEY31ylk3jeOTuN8nypL4KziZwRy+nyxxg=
Subject key identifier: 1C:57:9B:03:83:C7:2A:F8:55:45:D4:57:C0:58:DE:54:28:BB:36:88
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number: 027D
Signing time: Sat 21 Mar 2026 01:18:27 +0000
Manifest this update: Sat 21 Mar 2026 01:18:26 +0000
Manifest next update: Sat 28 Mar 2026 01:18:26 +0000
Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: ohjNg6SHArr3PnBGTUQPY2Jj1Kc07OlYCvF8f/uUKiA=)
2: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: nqKMSVlSyxa7QHrLlm6Y84qBJxYwcSQ64B4xVxT4RjA=)
3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: h2uMCBwNTFg6piL71Xpw5aeMHSrOsn6mAYZOypLUc88=)
4: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: JqaPwoYkZsoCryG868iVTZ8zY+76Lni/250smlWRpm8=)
5: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: GhhSaA0xTyH5baipIEusOVelE8AEomQ82Qzg02jGkGw=)
6: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: WYnjZsNu5jiuRKrMLvrdkCklYsmIm0eNnQ6iCSiMY3Q=)
7: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: s6Qyv+Kjm6U8zsIA5gW9AT3/QCQSXrLitcN0Qq9EJLg=)
8: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: azXfIFcWznJdcfz2Tut0Wi0gwmcY2B86Fw4E7iLjlm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Mar 21 01:18:26 2026 GMT
Not After : Mar 28 01:18:26 2026 GMT
Subject: CN=69bdf1e2-0257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d4:c5:32:c1:ee:45:f1:0a:e3:39:d7:4b:70:
07:3a:04:7a:c5:5e:0d:d0:93:51:04:d7:c7:d2:7f:
3d:ca:89:eb:4c:14:51:59:71:04:de:9e:27:85:8e:
1b:e1:a5:d3:09:40:04:32:b8:9d:dd:e6:c5:d8:9a:
e8:5e:74:bf:6c:85:4f:57:88:bc:ec:99:9d:f2:c6:
c6:01:5b:3a:80:a0:e0:6f:35:a1:d3:17:70:db:7a:
12:4a:12:e8:28:9e:87:22:3b:c9:cf:01:4a:a5:b8:
ab:d6:05:b3:1d:34:70:5a:49:ab:18:f7:b8:34:bb:
9d:a6:dd:f4:52:6d:70:79:78:c3:f3:f4:77:51:4f:
34:40:cf:05:a5:43:23:ec:30:0a:95:d0:2f:05:19:
63:c4:8d:08:53:ed:87:06:2e:a3:83:a1:12:a4:39:
2c:6b:27:70:a5:fc:fd:66:a6:f0:0e:a2:f7:19:61:
51:cc:f7:e1:2a:c0:f1:52:c4:fe:34:0a:88:77:6f:
61:f9:59:6e:56:1c:7d:ec:be:3a:e5:6b:0c:2b:9d:
ee:1e:86:df:87:d1:5b:dc:91:2e:d4:d5:ad:44:a2:
ea:a9:5b:c8:b5:18:3f:78:63:e9:5d:80:45:e6:75:
b3:18:38:72:00:2f:c9:cf:43:ff:0f:0c:f6:2c:31:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:57:9B:03:83:C7:2A:F8:55:45:D4:57:C0:58:DE:54:28:BB:36:88
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:de:30:42:57:c7:31:14:4f:1f:10:fa:64:10:1c:5a:67:3e:
4f:5d:44:44:cf:b4:57:80:ef:79:36:8b:31:d0:03:a4:e0:78:
dd:3d:c8:f2:c8:e6:75:0a:5c:aa:e7:74:30:ef:83:9d:f8:4c:
cc:eb:5c:ee:a6:42:d6:8d:c2:de:b4:ec:8a:6e:a8:b9:46:f8:
c8:67:fe:f7:c8:9c:2e:9e:15:5a:71:d5:47:51:90:6c:31:de:
4d:c3:6a:88:73:44:77:f5:45:54:52:72:f4:68:c6:66:f6:52:
89:3d:36:81:e4:a1:82:e3:5c:c4:66:cc:e2:72:44:27:33:06:
71:87:f0:fb:34:46:c7:f8:27:32:5a:17:23:ef:65:e9:0a:c3:
24:d7:a8:4f:02:a6:11:3c:44:21:cb:0e:aa:33:46:3d:60:7c:
d7:4c:63:0d:6b:06:cf:3a:00:aa:1f:1c:c6:2f:de:65:34:e0:
23:69:11:e5:cf:c2:06:b2:c8:d2:e5:dc:95:be:87:8a:64:b5:
c2:c6:7d:68:a2:00:a1:49:7d:13:65:98:a3:96:a9:88:74:87:
e4:7b:23:a7:5f:85:ae:7b:4a:9c:ef:df:da:f7:c8:d7:69:24:
66:af:d9:65:b1:9a:98:39:b7:0f:54:23:8e:58:18:41:59:91:
3b:b6:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:12:20 2026 by rpki-client