
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier: 2uzxNT5FOjTc3JCJJzK8r+r5EOghwFO41NXOKUxI+X8=
Subject key identifier: A2:9B:E3:26:6C:00:BB:35:DB:2F:8C:D8:45:8F:C4:11:77:A2:F5:8E
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial: 0DFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number: 0DF3
Signing time: Wed 20 May 2026 17:52:42 +0000
Manifest this update: Wed 20 May 2026 17:52:41 +0000
Manifest next update: Wed 27 May 2026 17:52:41 +0000
Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: RachQCy6oBBXfTtoYnH8I396G9msyu43faIyWSG1HTY=)
2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: MCiCoDcn9iWsMnw+W4ic1bgrDj5hNzV2NifUiMBx2Ro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3583 (0xdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Validity
Not Before: May 20 17:52:41 2026 GMT
Not After : May 27 17:52:41 2026 GMT
Subject: CN=6a0df4e9-0215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:94:28:65:d5:bd:4d:99:8c:b6:82:c1:7c:
0b:4a:01:97:d6:6a:bb:0d:f2:88:2a:ef:bf:fe:7e:
77:15:cc:28:51:d3:62:74:ee:7f:f4:26:ca:2d:9b:
44:be:d7:ef:3f:f3:bc:6e:c6:d8:74:b5:50:47:c4:
de:50:49:ad:e8:26:1b:62:90:82:34:ec:2c:ee:f5:
15:bf:e5:43:38:1e:90:a0:e2:4f:88:c3:01:ed:da:
46:be:31:e1:50:92:5f:86:c3:01:04:e8:a7:13:fc:
31:99:6c:7c:73:f7:ed:6d:3b:88:f7:2d:af:19:38:
53:3e:8b:61:c7:56:18:b2:c9:6f:58:24:8f:8a:9e:
43:00:24:a6:82:eb:84:af:6b:72:35:98:21:00:87:
dd:25:ac:6d:61:14:0a:9b:02:3b:9a:5e:f8:4b:84:
95:2a:61:48:75:44:68:b5:b5:b6:b8:35:e5:f7:56:
f7:10:54:a0:7b:47:5b:ea:a0:af:6b:95:7f:39:bd:
c5:10:4c:cb:8d:89:d7:eb:7e:92:37:2e:3f:eb:42:
3b:59:80:c0:52:89:2f:9f:8e:13:84:6b:b3:72:bc:
99:18:b8:2d:19:ce:0a:c5:f1:ec:2c:77:5c:dc:89:
69:5e:04:bb:c6:f6:08:3b:98:bf:b4:5d:f6:9c:11:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:E3:26:6C:00:BB:35:DB:2F:8C:D8:45:8F:C4:11:77:A2:F5:8E
X509v3 Authority Key Identifier:
keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:f2:e7:70:ef:b6:6e:e8:08:f6:c1:bf:de:12:f2:a7:75:20:
7c:75:f6:16:18:9e:fa:04:62:6d:70:5e:ca:b6:26:1c:f6:34:
d7:54:5d:00:de:90:fd:03:52:5f:8b:38:5d:29:55:8b:d4:a5:
a0:89:b5:a0:50:1d:f7:49:1c:cf:10:ff:7a:d4:4a:19:b2:bf:
33:f1:44:64:88:69:92:1e:4c:2e:55:89:86:86:a3:4c:4e:8b:
8a:08:d1:f2:45:3e:eb:50:c1:ea:a0:27:6c:e4:d5:7b:47:ae:
82:e0:7a:e5:1a:56:c8:82:3c:af:22:e5:bc:52:21:6a:e2:8e:
97:a7:6d:6f:a1:0f:92:95:e8:5a:08:38:f3:1e:0d:e7:e6:67:
f8:fb:18:11:98:a6:c4:84:98:41:62:36:0e:3a:ba:77:81:00:
bd:13:66:a9:8d:a7:1e:d3:46:27:56:1f:03:24:00:d2:4a:f0:
6f:af:d4:55:5c:2d:d3:4a:32:dd:a6:15:a8:27:b2:e7:bb:92:
ed:a9:8d:18:f3:62:0d:3f:89:d5:87:29:a5:4a:89:e4:44:4e:
22:07:e8:9d:3c:d0:f7:5e:4a:4a:45:74:ac:4f:9e:62:d1:bf:
37:ef:7e:10:67:02:a7:ba:76:98:4f:10:42:70:c2:7b:f6:da:
fe:2d:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:39 2026 by rpki-client