
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
File: 6tKydVDbcXQNXPh2q1QLuGtfKjg.mft (raw, json)
Hash identifier: bWNcRL4UMfx3Mc/7BAMX/nVvHufkuzFUogkA9jQHK84=
Subject key identifier: AF:C6:2F:B4:C8:DC:C7:07:EE:3D:A3:0F:B5:50:78:B8:81:E9:E9:B8
Authority key identifier: EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
Certificate issuer: /CN=A913CFCF/serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
Manifest number: 4B
Signing time: Tue 23 Jun 2026 08:39:12 +0000
Manifest this update: Tue 23 Jun 2026 08:39:12 +0000
Manifest next update: Tue 30 Jun 2026 08:39:12 +0000
Files and hashes: 1: 6tKydVDbcXQNXPh2q1QLuGtfKjg.crl (hash: IJbtjRC/8QY3z50JO2OeVQkj86biWd3TSh2FvaSGzxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl
rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CFCF, serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
Validity
Not Before: Jun 23 08:39:12 2026 GMT
Not After : Jun 30 08:39:12 2026 GMT
Subject: CN=6a3a4630-d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:27:22:84:93:e6:c8:d3:08:28:d7:25:f6:
65:6b:11:bc:06:47:3c:13:6c:81:d1:7b:b9:d8:18:
20:ed:1e:93:cb:8e:ef:b2:f4:4d:1b:4e:eb:9a:ac:
84:cf:20:f6:a3:6b:9a:1f:4c:1c:58:76:05:bf:4e:
e5:34:ca:d6:1e:d4:75:7a:39:fb:1a:41:e5:d3:d8:
d1:e7:a3:9a:cc:62:a3:b1:2d:1d:e0:5a:b4:3f:c7:
25:a9:ff:48:df:2d:e8:67:63:bc:40:1a:1b:3c:e0:
8f:e7:9d:d1:85:41:47:37:ea:04:16:86:74:c0:18:
16:44:d0:4e:46:7d:ab:df:b1:50:6a:34:d2:ed:86:
e6:ff:b3:02:b9:be:83:53:1b:33:26:45:ca:95:5f:
46:55:f6:0b:13:87:86:b0:be:91:a8:00:21:0b:20:
f7:4c:83:3c:8d:e0:dd:14:d4:83:7e:1d:9a:22:b8:
b0:2d:c2:69:24:27:e0:30:24:c0:cc:bf:dd:85:91:
50:fb:aa:de:38:b3:72:8f:5e:a6:59:64:5b:85:56:
2f:9a:07:61:07:fc:dc:3c:7d:d2:70:e4:b5:68:55:
8e:c9:d6:86:50:6b:ab:6e:49:34:f3:a0:e2:c8:04:
66:9b:1f:09:e6:66:78:d8:1d:de:65:88:bf:7d:dd:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C6:2F:B4:C8:DC:C7:07:EE:3D:A3:0F:B5:50:78:B8:81:E9:E9:B8
X509v3 Authority Key Identifier:
keyid:EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:32:78:14:65:37:2a:5e:f7:ee:5a:b6:30:13:a9:89:d4:9b:
91:50:2c:78:11:26:e4:33:1d:0f:0a:bd:28:66:91:93:b2:bd:
c6:d8:7c:bb:0f:3d:76:31:52:65:4b:25:4c:16:9b:fb:a8:9c:
27:56:44:cb:5f:e1:4e:57:39:7c:dd:34:38:8d:1f:9a:8d:16:
3f:ad:01:a5:b5:6a:78:b7:fa:74:67:84:09:ac:8d:c3:bf:21:
64:77:9e:2c:66:f2:c3:b4:c4:f1:91:29:68:d7:5f:1a:05:9d:
40:ad:e9:c6:35:74:79:6b:10:22:5f:1c:78:bd:7f:67:75:4f:
5c:32:e4:b0:25:24:ae:bd:e9:73:60:56:c7:8a:43:42:1f:35:
e7:45:f7:e0:a4:40:ee:65:79:14:18:e7:43:43:f0:91:7f:9e:
fc:51:f7:a2:71:43:9f:c8:1d:1b:8b:dd:9a:b9:9d:41:28:4d:
87:57:36:b4:a5:7a:7a:3c:bd:e1:f3:4f:76:b6:71:3a:5d:ad:
2b:88:9a:55:84:ad:b1:e8:c1:9d:0b:53:6a:85:fe:0e:8c:38:
8e:5f:9a:c8:b4:cd:f6:d1:2d:9b:69:b0:8f:09:e7:0d:0a:9e:
a4:1c:32:1c:7b:fe:80:b2:2b:f1:ae:b5:f0:c8:b4:4e:7c:30:
52:9c:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:05 2026 by rpki-client