
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json)
Hash identifier: Oc82/pq8W9CqAg8qwNbNCrMeC5JRHjsznFj3WQIxmu8=
Subject key identifier: 9F:60:75:42:B3:A9:4A:F4:1C:AF:CC:19:7B:FF:1C:A2:C3:8F:8D:01
Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Certificate serial: 3566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
Manifest number: 353F
Signing time: Sat 04 Apr 2026 14:39:02 +0000
Manifest this update: Sat 04 Apr 2026 14:39:01 +0000
Manifest next update: Sat 11 Apr 2026 14:39:01 +0000
Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: l2mLdUHbSoIG3aFLMAW67ES1bp6SxYo286JiftESNWM=)
2: 036356DC573611F08FD0E718C4F9AE02.roa (hash: DJhnBtV4qr/FDZCjaH9Lkrqqu0NQBCA+NO7bEbg3nAY=)
3: 6F58AA34687C11F08C69EA64C4F9AE02.roa (hash: jT0iwnJSbV0YR+MzmmXMrjj6/WTWUaZ59vn5VYrScqY=)
4: A2A2D1B6573411F09F6B9016C4F9AE02.roa (hash: Y2OnWMjoTFm2dR06cOeGVj5ENWmNfgjGgnyMm9eVZJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Validity
Not Before: Apr 4 14:39:01 2026 GMT
Not After : Apr 11 14:39:01 2026 GMT
Subject: CN=69d12285-4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:de:84:40:04:17:80:fe:56:f9:cf:92:f3:
bd:3f:ec:1e:5c:e8:f5:4c:6f:8d:ca:86:50:ee:fa:
4d:5e:85:bf:08:68:bc:83:a6:b6:9c:17:79:fe:1e:
03:e0:12:ef:25:38:f0:02:e4:d3:61:28:2f:56:bd:
4a:fe:5e:70:34:e8:16:be:22:81:4c:a8:a2:72:59:
fe:87:40:28:74:fa:d3:04:40:7f:ca:4a:43:cd:21:
41:22:98:1c:c0:ce:7a:3d:2b:96:94:72:78:2a:d1:
f8:66:64:76:2b:18:22:80:51:97:aa:6f:65:42:95:
cb:cd:1e:40:85:94:5b:8f:89:f8:d6:32:1f:24:47:
3f:2d:f7:23:aa:03:47:ed:e5:dc:7b:74:99:af:0b:
45:b2:a7:22:bc:fe:65:aa:12:a3:5d:de:77:ae:9f:
92:06:ac:fb:19:e7:f0:52:fe:5b:76:8f:d0:2f:de:
80:84:c0:90:f7:95:d5:f1:18:08:e9:4f:b4:d1:e4:
9b:78:48:c3:6f:c8:27:42:62:e3:62:85:2f:81:8e:
45:4e:15:fc:50:80:4f:02:2b:0c:25:82:49:ae:39:
53:4b:55:32:fc:9b:8f:6b:1a:fb:a3:a5:4b:f3:ec:
a1:f2:35:19:be:c1:5d:1b:55:1d:e8:99:65:a5:03:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:75:42:B3:A9:4A:F4:1C:AF:CC:19:7B:FF:1C:A2:C3:8F:8D:01
X509v3 Authority Key Identifier:
keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:2e:84:26:d9:8f:81:9b:e7:0b:a5:e8:b6:34:02:dd:bd:
de:12:92:c4:c5:7b:c6:b6:92:d9:3c:68:8a:00:66:c0:2b:09:
01:bb:cd:91:9b:17:43:a5:9d:e3:e8:7d:74:52:60:65:0c:a7:
52:ef:e8:1e:bd:16:ae:ca:69:89:ed:a9:e0:44:7f:b1:20:2e:
2b:68:39:18:3d:79:be:c1:52:c6:1d:52:a1:af:02:d5:b0:0a:
e0:eb:b4:ea:34:b1:12:d1:74:0b:47:61:eb:a8:f1:5b:35:ef:
51:21:f3:4b:b2:0d:23:47:38:9d:8b:32:55:b5:49:8f:8b:2c:
1b:dc:32:a4:80:fa:7b:2d:f7:d8:2d:29:90:35:23:9d:69:22:
92:54:82:55:4f:ae:85:af:4f:22:29:c4:73:25:f7:66:c0:55:
9a:45:99:47:0c:47:bf:10:f5:a4:bf:11:97:e3:3a:c2:a5:f3:
78:e1:e5:14:7f:ab:8a:7c:9f:5a:c6:13:48:7d:aa:8c:f8:ef:
03:57:6c:9a:40:72:8b:38:61:35:65:c0:01:12:39:8c:9a:f0:
eb:a7:c6:1e:43:e2:ff:02:33:bc:c8:51:eb:df:16:7d:be:b5:
f2:fa:7a:73:2f:ad:35:eb:da:7d:7b:28:56:3d:75:4f:b5:4a:
80:5d:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:49 2026 by rpki-client