
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json)
Hash identifier: Q/EJ76FSusTlUmCiB4sHQZRJ+lo+yCV/N200BDr0KT0=
Subject key identifier: 0E:43:2E:C2:FA:DF:B3:08:06:C5:0B:90:97:4A:1E:C9:FD:C9:C3:C7
Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
Manifest number: 5B
Signing time: Tue 03 Mar 2026 07:44:11 +0000
Manifest this update: Tue 03 Mar 2026 07:44:11 +0000
Manifest next update: Tue 10 Mar 2026 07:44:11 +0000
Files and hashes: 1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: b17Fw6yKxF05MnTFgbDYuuFKC1GmN59XqlDV293k7M0=)
2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: dtOyJXL7fADe0DAPUWAD6cAvQxtHj2xT44MMlwLS1gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl
rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Validity
Not Before: Mar 3 07:44:11 2026 GMT
Not After : Mar 10 07:44:11 2026 GMT
Subject: CN=69a6914b-9453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:6b:2b:d2:7a:bb:d0:ee:2c:63:38:5e:cf:
9b:8d:42:06:40:7d:d6:30:f5:6c:01:ae:94:ba:80:
df:26:80:40:48:32:72:fc:de:11:a7:9c:a8:5c:8f:
05:49:ca:39:d8:b2:04:35:2f:ad:96:59:d4:fe:f4:
26:be:bd:af:9c:f1:ae:af:d1:48:10:e6:16:bf:0c:
7a:4a:36:b8:85:13:00:07:67:0a:39:bd:1e:8a:a9:
b4:44:f9:cf:f9:66:bc:c9:ff:93:d5:8e:ed:02:10:
e8:83:2f:86:0b:73:49:09:de:6a:5f:24:b2:18:7f:
83:dc:6c:fe:34:e2:a6:fb:b7:75:e5:35:af:89:0d:
ef:a7:06:c1:cc:32:4c:69:a0:bb:53:95:62:7a:03:
8e:93:6f:b1:66:81:54:3e:59:37:ab:ae:a3:33:51:
82:e3:01:a0:81:f5:11:8f:59:31:c0:00:dc:56:4f:
95:7b:c0:2b:62:e5:1d:f5:c6:cd:49:83:3e:93:22:
e1:1f:b4:78:74:d3:ee:99:38:d8:44:75:5b:bd:5c:
ec:02:f9:a4:18:1b:15:7a:5b:c9:ac:6e:d4:d0:5e:
58:23:96:3f:49:13:0e:d5:84:99:03:6f:06:ae:1d:
aa:60:f4:55:eb:61:b6:94:34:3b:42:e4:f3:6e:65:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:2E:C2:FA:DF:B3:08:06:C5:0B:90:97:4A:1E:C9:FD:C9:C3:C7
X509v3 Authority Key Identifier:
keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:54:81:a7:b4:b6:93:b2:0d:2c:53:67:77:a2:d2:d7:36:fb:
d7:d3:c3:1e:1c:be:88:a1:39:c1:50:07:6d:b5:76:42:7b:45:
38:af:09:b3:71:b4:f3:29:62:be:22:89:b4:f5:5f:e7:64:39:
74:32:a0:64:d7:9a:b6:db:2e:18:d8:c7:a6:95:90:81:a0:94:
18:73:f5:24:89:33:87:74:5a:04:e7:66:e2:94:84:d4:17:90:
6d:98:a4:c9:30:89:a6:a2:8f:f4:08:ff:95:34:83:bf:52:6d:
90:8f:46:ba:39:a8:cc:22:42:fd:01:db:92:47:40:4e:21:32:
c1:ab:83:e8:5b:df:01:f7:c4:4c:27:61:ac:96:bf:38:36:1f:
90:51:59:b0:5d:cc:8a:55:82:c1:d7:47:d3:6f:be:52:a0:8a:
51:dc:ee:d7:cb:5c:a9:92:84:a4:e6:82:b2:99:63:54:4e:0e:
a1:b5:d5:18:9f:c6:a3:ee:d8:f6:3e:29:e3:3d:4c:9a:35:d2:
c6:83:1f:cc:fe:da:8d:b0:4c:e7:91:17:2e:d0:91:4d:15:62:
97:b7:ca:64:ef:27:4a:79:91:36:42:e0:80:d9:76:56:7a:8c:
29:ce:26:35:72:16:ec:0f:8c:1d:e1:a5:8f:bc:b7:16:30:a7:
3f:77:eb:76
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTJFNTExMC8GA1UEBRMoMjdBMEEyRERGMzVDMTk3RDRGQzI2MjkwQzI5NTdENDk2
OENGMTU4RjAeFw0yNjAzMDMwNzQ0MTFaFw0yNjAzMTAwNzQ0MTFaMBgxFjAUBgNV
BAMTDTY5YTY5MTRiLTk0NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaYGsr0nq70O4sYzhez5uNQgZAfdYw9WwBrpS6gN8mgEBIMnL83hGnnKhcjwVJ
yjnYsgQ1L62WWdT+9Ca+va+c8a6v0UgQ5ha/DHpKNriFEwAHZwo5vR6KqbRE+c/5
ZrzJ/5PVju0CEOiDL4YLc0kJ3mpfJLIYf4PcbP404qb7t3XlNa+JDe+nBsHMMkxp
oLtTlWJ6A46Tb7FmgVQ+WTerrqMzUYLjAaCB9RGPWTHAANxWT5V7wCti5R31xs1J
gz6TIuEftHh00+6ZONhEdVu9XOwC+aQYGxV6W8msbtTQXlgjlj9JEw7VhJkDbwau
Hapg9FXrYbaUNDtC5PNuZW1/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDkMuwvrf
swgGxQuQl0oeyf3Jw8cwHwYDVR0jBBgwFoAUJ6Ci3fNcGX1PwmKQwpV9SWjPFY8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0E2QzU0MEY2OEM5
NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gxUHdtS1F3cFY5U1dqUEZZ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSjZDaTNmTmNHWDFQd21LUXdwVjlTV2pQRlk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB
MkU1L0E2QzU0MEY2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gx
UHdtS1F3cFY5U1dqUEZZOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBjVIGntLaTsg0sU2d3otLXNvvX08MeHL6IoTnBUAdttXZCe0U4rwmzcbTzKWK+
Iom09V/nZDl0MqBk15q22y4Y2MemlZCBoJQYc/UkiTOHdFoE52bilITUF5BtmKTJ
MImmoo/0CP+VNIO/Um2Qj0a6OajMIkL9AduSR0BOITLBq4PoW98B98RMJ2Gslr84
Nh+QUVmwXcyKVYLB10fTb75SoIpR3O7Xy1ypkoSk5oKymWNUTg6htdUYn8aj7tj2
PinjPUyaNdLGgx/M/tqNsEznkRcu0JFNFWKXt8pk7ydKeZE2QuCA2XZWeowpziY1
chbsD4wd4aWPvLcWMKc/d+t2
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:24 2026 by rpki-client