
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json)
Hash identifier: gC5KwI81l52Yfm4cIXziwxRUGD9B0z2gSN0zzFXiM8k=
Subject key identifier: CE:EF:CE:01:DF:59:34:35:D1:B4:B7:EA:7F:84:B6:DD:BE:AC:BF:99
Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Certificate serial: 2AB6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
Manifest number: 2AA1
Signing time: Sat 18 Apr 2026 14:20:12 +0000
Manifest this update: Sat 18 Apr 2026 14:20:12 +0000
Manifest next update: Sat 25 Apr 2026 14:20:12 +0000
Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: pCBMQzO9bA95sZROA9bMYr0SGKy9hZgdVd5ZfQacFVo=)
2: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: isBreiDKr6NXcCp7n3XCZQnUQzfzqpGrvgRaOTGfsLA=)
3: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: RbHJbXxXrULxZSrxCeKFvKTasWruATr+3w5vTVZ+CDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10934 (0x2ab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Validity
Not Before: Apr 18 14:20:12 2026 GMT
Not After : Apr 25 14:20:12 2026 GMT
Subject: CN=69e3931c-4036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:b0:6a:03:bd:46:e4:76:28:74:71:b8:a8:
42:37:70:db:e3:6a:f0:cc:8b:ba:12:11:81:d9:17:
7f:f7:3d:30:12:e2:ab:72:32:fc:78:e3:62:44:92:
b5:cf:11:f8:4c:35:c7:4d:de:a8:d0:00:4a:1e:b3:
5f:2d:a1:99:7c:22:23:fe:ab:73:0a:e8:90:7a:6b:
23:bd:9f:f7:ea:5f:1c:bd:92:82:32:ba:70:71:2a:
a1:f6:d2:a4:6e:29:00:7f:57:d1:4a:05:97:39:37:
35:7d:67:ac:be:9f:6c:7f:7c:60:f9:9f:a5:3d:54:
dd:cb:04:6b:d6:bb:dc:a0:98:f2:8e:ee:e1:01:7c:
16:05:a8:8f:84:2c:b4:2a:84:b2:29:58:91:37:73:
1e:d8:44:52:5b:af:86:08:d3:c2:80:ff:aa:16:a8:
4e:b7:51:70:5a:08:72:66:d7:52:a6:ca:94:42:5c:
29:8f:d4:e5:22:64:32:d4:c1:ec:31:99:c6:14:a0:
6d:12:0c:64:52:3c:01:a9:0f:2a:27:59:6e:b8:15:
9b:8a:0f:ea:44:26:bf:de:0a:da:3c:c8:2a:ee:29:
8d:3f:fd:6a:b9:ae:51:41:58:f4:16:48:0b:1e:ce:
e5:03:3c:14:64:bc:e7:07:fa:fd:63:c0:0e:c1:ae:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EF:CE:01:DF:59:34:35:D1:B4:B7:EA:7F:84:B6:DD:BE:AC:BF:99
X509v3 Authority Key Identifier:
keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a6:ea:e8:43:f4:5b:8b:64:a3:a2:b2:5e:cf:e1:55:c4:55:
2d:f1:c2:64:36:fd:f0:4f:e9:be:d7:6e:52:5f:23:2f:08:51:
06:4b:89:91:1d:24:51:74:f7:26:6e:68:bf:f9:75:b6:fc:0c:
23:76:41:9a:4b:61:70:74:36:0c:f4:c1:4c:a4:cf:9d:ed:0d:
74:ff:c4:52:0d:a1:a5:b2:e8:81:7d:32:74:32:78:e8:7a:5b:
af:d5:12:e8:ed:7c:95:7e:e5:88:5c:f7:25:f0:9f:c5:8d:85:
05:c0:d5:1d:04:79:40:d0:ba:56:58:bb:58:ca:35:f3:95:09:
d7:e9:8b:5e:22:bc:4a:8e:46:25:81:b8:13:7b:fb:4a:31:da:
5c:97:ac:d0:aa:d0:86:6e:82:2c:11:2e:47:66:ab:83:99:16:
d4:40:68:de:81:a8:58:65:66:dd:97:1a:11:73:0d:69:af:96:
9f:d3:33:c5:91:3e:e7:58:c5:cf:ee:4a:fb:9c:43:61:5f:1f:
07:df:59:82:fd:d3:06:55:fc:2a:7b:64:46:ac:07:5c:2e:53:
2a:d3:b5:76:c5:4f:35:da:eb:fd:df:92:d8:0c:33:67:26:fb:
13:0a:39:55:f1:77:d1:fe:04:b8:60:7a:8d:43:93:15:ff:bf:
d8:18:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:24 2026 by rpki-client