
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json)
Hash identifier: +xqgkFXSKX1k+CkCsYXUtyyaPs5J+klaOiw/xqjpDm8=
Subject key identifier: 25:D1:7B:DB:BE:C5:68:C6:27:37:0C:9F:5E:55:DE:21:AB:5A:43:2A
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
Manifest number: 98
Signing time: Sat 11 Apr 2026 07:17:23 +0000
Manifest this update: Sat 11 Apr 2026 07:17:22 +0000
Manifest next update: Sat 18 Apr 2026 07:17:22 +0000
Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: iQpoQt2wy9qwlftJBAWhEo7oEj2joXzEB0MFwkSrjLQ=)
2: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: F2pAqsVBbXvE/fTU/fWvYs8rLIMjtDFHXYIoNWC9T/8=)
3: 554EE88487D911F08B837C49C4F9AE02.roa (hash: KnUN81UlQodoF87eK+aMyyLj9TmAgnUYNMTKbDpsY9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Validity
Not Before: Apr 11 07:17:22 2026 GMT
Not After : Apr 18 07:17:22 2026 GMT
Subject: CN=69d9f583-6dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:ef:18:cc:cd:f8:81:0f:70:dc:f7:bc:db:
5d:e7:94:46:d9:ae:04:de:39:ec:1b:7b:c5:7a:b8:
c8:d4:06:23:b2:96:62:24:8f:5b:51:40:16:9c:24:
dd:52:d8:3e:c4:9e:55:4a:c9:6a:0e:ee:6f:20:95:
87:05:a4:1a:25:b5:81:3b:8a:ee:89:35:04:4f:3d:
40:40:5b:38:fc:0f:12:78:10:6f:ef:1b:bc:ce:d9:
59:6c:e3:26:7f:de:ff:26:19:b3:40:f0:f4:04:98:
a1:cf:bc:72:a9:ea:8f:41:99:73:06:5f:44:6d:7a:
6f:59:e0:b9:47:bd:6e:4c:5a:49:d8:26:0d:0a:15:
8b:b4:19:d1:bc:9f:24:53:bf:03:dd:10:b0:0f:e7:
e9:0a:b6:4c:c6:b2:85:35:b8:32:19:aa:97:d9:07:
39:d9:e7:a4:d3:54:3e:9f:a9:b9:1f:97:92:52:c0:
e6:59:f4:2a:10:95:20:09:7e:f2:12:13:0b:f3:e4:
ec:13:f5:f6:8b:53:50:18:24:80:95:f2:f8:b0:00:
d8:cf:5b:a8:92:9b:58:84:93:84:25:00:1a:23:c0:
31:4b:b0:1d:ad:42:9a:45:96:b3:3c:04:ff:53:6d:
f7:0e:dd:c3:90:f6:ae:a7:8f:39:b6:38:cd:2a:10:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:7B:DB:BE:C5:68:C6:27:37:0C:9F:5E:55:DE:21:AB:5A:43:2A
X509v3 Authority Key Identifier:
keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:1c:b1:58:b7:18:a4:68:9c:4f:a4:88:a7:26:32:7d:7b:
41:1c:c8:28:f6:ff:06:25:7a:36:84:cf:31:a1:72:a5:c0:b9:
12:51:7c:b4:dc:7e:f1:d0:4d:4f:81:fe:29:40:a6:1f:9e:cb:
18:aa:96:76:75:28:55:a0:c6:56:6c:ae:e7:88:44:51:c9:e2:
42:1e:b7:6f:d1:b9:05:b4:e0:e4:ff:a1:fd:06:2a:a8:79:3c:
a7:a1:fa:47:2e:04:1a:a2:8b:02:0e:75:3c:70:f2:dd:21:aa:
33:7d:b6:60:69:17:6d:da:f7:1c:45:54:81:d9:2a:d9:0b:a2:
27:48:6c:40:75:9a:cf:14:3e:54:f1:dd:32:c2:17:15:ab:68:
b9:6f:38:fc:14:ac:4d:db:c3:29:af:f8:97:df:fe:91:71:96:
9f:81:fb:b7:35:74:e8:75:fd:f2:ae:84:83:3f:9f:c2:78:e8:
e4:b2:af:d9:4e:b9:58:28:17:38:28:02:1c:17:8b:df:ca:2e:
2d:b8:c9:14:85:d8:e6:db:fe:59:cf:87:57:37:c1:cb:72:db:
46:ed:e2:53:97:88:68:7a:ce:c2:8a:49:85:e8:64:1a:d2:02:
4d:6f:fd:80:ac:ba:dd:c1:b4:ed:a4:9b:f2:a3:a9:16:cc:02:
e0:bf:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 12:38:04 2026 by rpki-client