
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier: P26foBBI5I06U68GijuxJKKmpW+RwkH2wi6lVs1H4rQ=
Subject key identifier: 2D:15:D0:81:71:CF:69:26:00:D6:37:8B:55:82:89:41:5D:33:4D:7E
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial: 0D91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number: 0D85
Signing time: Mon 02 Mar 2026 17:56:06 +0000
Manifest this update: Mon 02 Mar 2026 17:56:06 +0000
Manifest next update: Mon 09 Mar 2026 17:56:06 +0000
Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: v55MlggSPHycdd9bm7LYP7jnyWkLN+ebnlShG+QG5GQ=)
2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: mEi1yyBBjQB47AmUbRYgPuxNDt10SIZ3Uh51JCDgmJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 17:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Validity
Not Before: Mar 2 17:56:06 2026 GMT
Not After : Mar 9 17:56:06 2026 GMT
Subject: CN=69a5cf36-9b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:7f:9a:80:61:e0:f3:8d:90:0d:1c:cc:46:
0e:db:5e:a7:e3:be:e4:45:7b:c9:c7:ed:45:bb:62:
b4:74:7f:be:27:3a:df:62:28:f0:d0:cd:f1:78:90:
03:c1:53:fd:3c:7e:dd:92:49:87:42:ac:7b:a8:13:
be:be:a5:63:4a:ec:91:45:b0:5b:19:f8:23:11:34:
dd:4e:3c:cd:77:92:66:14:8a:82:3e:e0:e5:d1:09:
cb:2e:c1:8e:6b:35:c9:0c:73:57:d0:b1:1a:38:74:
94:b5:77:21:f3:93:61:af:19:af:21:35:97:dd:a6:
1c:60:b6:d4:f3:98:8f:6e:88:94:da:3f:64:66:d2:
f6:0a:81:c2:3c:40:db:78:de:82:24:5a:34:96:65:
d4:7d:ce:0d:33:c2:e0:1d:c3:85:ba:49:8d:ba:f0:
db:ff:1a:3e:d0:54:d6:17:0b:59:01:af:e0:2c:64:
43:28:72:80:ff:b8:bd:5d:4a:1c:52:6c:8d:55:f1:
73:e2:c7:1f:12:c8:47:43:c5:bd:2b:3d:10:e8:a9:
89:e3:cc:b0:26:85:25:dc:14:5b:7b:a4:09:4d:a6:
55:c3:f2:4f:12:eb:f2:38:72:90:0a:96:90:4f:2e:
61:03:8e:ce:09:cc:74:9f:33:ea:f2:87:39:c6:26:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:15:D0:81:71:CF:69:26:00:D6:37:8B:55:82:89:41:5D:33:4D:7E
X509v3 Authority Key Identifier:
keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1f:6a:2a:c6:82:79:1c:05:00:bf:f6:b4:59:3c:04:54:6a:
78:78:3e:ed:c5:0f:3a:cf:3b:85:b6:ea:57:bb:e4:35:54:6d:
43:1a:11:2d:60:88:8e:23:f1:98:c1:56:91:a7:9e:d7:1e:3f:
29:b1:e2:e1:1d:78:13:46:86:07:62:47:23:e4:6c:61:39:7a:
b2:bf:cb:62:d1:09:22:8d:15:b6:0d:79:7f:f5:36:95:c4:08:
5c:de:fd:41:31:2e:bd:f9:a4:f7:25:76:2c:82:5d:c0:b3:49:
1f:cb:28:a5:4a:c7:40:02:2d:47:d4:c9:93:1b:ff:5f:c2:1f:
65:29:19:b2:79:72:d5:3a:e7:5d:87:05:9e:c5:ad:d2:0f:19:
f7:7b:97:e5:8c:5d:ac:3c:72:87:a1:f6:a3:8f:a3:c1:21:2f:
da:96:ba:cc:cc:7c:ea:11:9d:8b:ac:4d:18:9f:6a:f0:a8:ef:
21:99:0f:0d:41:f0:8b:f3:49:bd:7c:c5:ea:2d:bf:ef:32:76:
09:a4:36:32:29:60:22:0d:c0:80:d9:39:3d:02:b8:fc:be:34:
e9:1d:8c:f6:73:f4:aa:57:d4:3c:14:c2:eb:dc:a9:3e:e8:7f:
a0:44:a6:9b:58:5e:06:9b:5d:a6:f4:65:a3:a7:a7:b0:d9:b6:
6f:24:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:32:25 2026 by rpki-client