
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier: e3bxI6r/FlKfj7gLxTFfAxhiMutwysyjTPPl8rXsP5U=
Subject key identifier: EB:E0:8E:D2:E6:B9:0C:E9:0E:7A:AB:D9:D7:BC:3B:D8:9A:F5:4E:AD
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number: 02AD
Signing time: Fri 19 Jun 2026 01:46:08 +0000
Manifest this update: Fri 19 Jun 2026 01:46:07 +0000
Manifest next update: Fri 26 Jun 2026 01:46:07 +0000
Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: iRJJGxycgBWYWiQauqmn6l20ELGxtzqVzQEKQonTbNk=)
2: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: Wpi2JAjBrkvZuNJTiIpyUxWGu04n+1j7IVuyCXVldS0=)
3: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: BkxKV7IhdZCefMM8QPhYXEEYW9dJOyUUvjsBlVaijE8=)
4: 84EE99E868A911F1B1EBC4147A47A888.roa (hash: z/+T5dr4icEG46i7t+MZU5zchUhuJVVudXp4434069I=)
5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 3O6BvMokBPQb3h3RA+cEG9OncfKf9sHCk/LbeGG4QfA=)
6: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: u18PyOf6WCGxWY2aATMIM9qv2GW3Pt67w7d5BWo1AFo=)
7: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: sHSb0pTIf8ICWzfHaOSo11pRZiOv88WhOhvv7Mz8Vos=)
8: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: 8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=)
9: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: 0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 01:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Jun 19 01:46:07 2026 GMT
Not After : Jun 26 01:46:07 2026 GMT
Subject: CN=6a349f60-177a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:2b:f7:83:b9:99:ae:af:53:bd:62:b3:8f:
f6:e9:8b:bd:c4:69:ce:15:d4:0b:a9:bb:f9:c8:ff:
a7:fc:cc:08:1f:7d:d5:7a:20:88:cf:05:c2:6b:87:
ac:ee:64:3e:86:17:f7:03:e5:83:8d:2d:a9:ec:a0:
af:41:05:e3:22:f6:ee:2e:b4:5c:82:21:0a:50:00:
7a:2d:dc:0f:18:d6:ed:20:91:88:53:80:46:28:44:
9d:78:38:ed:d8:ad:d7:6a:4d:f1:5b:73:ce:c7:84:
f5:fd:0a:9f:29:5d:c3:81:be:ab:87:7b:81:fa:a0:
dd:4b:bb:71:c5:43:f8:f6:06:79:0b:d7:77:8f:0f:
30:34:85:16:62:43:dc:81:97:9b:8a:06:ec:9a:99:
37:ec:86:83:63:fb:27:06:9b:ae:8d:11:54:55:48:
2b:9d:b3:8d:7d:fc:d1:cc:87:d6:0d:21:73:62:80:
fb:8f:3b:cf:6b:97:fb:46:8a:66:73:b4:b5:9e:38:
8b:d8:ce:71:33:0c:6a:f7:5f:c1:ba:ef:6b:48:5a:
5e:e0:05:b9:a0:9d:f2:46:8f:7e:52:b3:a7:c2:d2:
ee:32:6a:af:a3:8d:8c:ea:5f:6d:ff:59:a9:7c:aa:
8c:42:a1:e9:88:03:ba:b9:8d:7c:31:98:d2:79:08:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:8E:D2:E6:B9:0C:E9:0E:7A:AB:D9:D7:BC:3B:D8:9A:F5:4E:AD
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c0:d6:13:1d:ed:15:eb:b6:c8:91:bd:2b:fa:fc:50:a7:e6:
ad:5c:2d:6f:78:ab:1d:c1:7f:1d:ea:a7:7c:f5:5d:2a:02:a7:
31:c4:19:d0:3c:f3:1a:8a:1c:17:e4:d0:5c:1a:d0:3b:6e:87:
ad:31:57:ca:c0:07:43:dc:fb:db:12:c1:12:7d:5b:75:dc:a8:
cc:a3:bf:1c:bf:d7:b5:a4:a1:42:f5:74:bf:6e:7c:de:43:58:
1f:fe:4f:d5:56:83:25:2e:fd:fb:47:cd:67:17:b6:63:4b:04:
f7:5b:93:e5:c3:29:22:af:0d:f0:14:7d:0a:10:2d:6a:36:44:
be:fe:01:a7:af:65:aa:bc:90:d1:a6:00:8d:6b:e3:1c:fa:a9:
3b:20:9c:48:f8:5c:ce:6f:6c:21:d2:cc:b9:e6:35:bb:ca:76:
c3:1e:f5:41:df:ce:76:02:5d:b5:e8:d8:c2:d9:4d:45:73:97:
9e:79:e9:38:f2:c5:2c:0f:10:9d:57:82:6c:ba:e4:65:d1:b0:
2c:60:ee:ec:d2:bf:da:bd:1e:34:ae:50:a0:a8:5c:4f:46:bd:
77:a6:53:5f:aa:dc:eb:3a:7d:3d:3d:1e:70:c0:c1:93:c8:be:
ca:44:3c:55:3f:c1:2a:8d:e7:76:a8:5f:dd:d6:63:16:c0:02:
df:d1:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:57 2026 by rpki-client