
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json)
Hash identifier: aFCOMYlx0u528NUH3y5mOIN+75hl/ahquDk8JxSs8yA=
Subject key identifier: 3A:02:DF:A0:54:C5:8C:7D:61:FC:17:8E:3D:DC:3F:69:D7:E6:74:59
Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Certificate serial: 031B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
Manifest number: 0511
Signing time: Sun 05 Apr 2026 00:58:44 +0000
Manifest this update: Sun 05 Apr 2026 00:58:44 +0000
Manifest next update: Sun 12 Apr 2026 00:58:44 +0000
Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: RR8s2BqZ3FwHqj/A3D7mx/dr7Rxa73X/r7+QtB5yPEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Validity
Not Before: Apr 5 00:58:44 2026 GMT
Not After : Apr 12 00:58:44 2026 GMT
Subject: CN=69d1b3c4-3152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:95:a9:f0:42:f2:e9:3a:53:51:6c:bd:99:
82:cf:af:ce:9d:cb:a8:dd:54:01:46:7b:52:e9:7e:
8c:26:b0:eb:c4:c6:15:81:90:c1:7c:7b:86:82:fa:
cc:c3:68:3b:c5:a1:7f:04:21:01:73:32:9a:1d:0e:
9c:c3:9d:76:1d:17:a8:70:67:06:cf:f3:3e:9d:44:
00:e2:6f:53:b1:c0:74:ff:3b:4a:41:e5:aa:c3:64:
6d:3b:94:ac:79:e8:1c:2e:0f:8f:80:96:b1:a4:2d:
0e:7b:51:a6:81:3a:06:01:2f:5f:42:31:96:a0:2b:
0c:ac:40:34:a3:a5:27:8b:a5:de:f4:f4:ed:bb:3a:
5b:0a:1c:b9:eb:9e:1c:a6:42:1c:c3:54:a6:23:9b:
6f:c5:85:9c:1b:5d:60:33:ab:73:ec:3d:f5:01:64:
23:44:86:0c:e0:16:1b:bd:71:82:64:ea:53:e1:39:
f0:c0:20:ac:54:74:fa:2d:07:c2:eb:fa:43:70:be:
a5:2e:d7:70:30:04:ba:ed:8b:80:eb:57:26:9c:c3:
e4:87:b1:91:a6:0b:6e:17:f5:86:ca:23:e6:65:2b:
e5:ab:7d:22:16:05:f6:69:cc:f1:92:f2:34:69:41:
85:46:12:55:38:80:35:e6:18:7a:45:0b:5c:35:d6:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:02:DF:A0:54:C5:8C:7D:61:FC:17:8E:3D:DC:3F:69:D7:E6:74:59
X509v3 Authority Key Identifier:
keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c8:c6:d6:07:af:fb:d7:70:cb:83:2c:4c:77:04:f1:42:4f:
19:ad:3f:f0:15:83:09:6f:86:a1:36:74:4f:a8:40:4f:57:a6:
e8:94:09:2c:e8:4b:7d:07:39:03:cc:67:60:6d:b1:36:b4:6c:
e3:95:f1:c2:1d:f7:c9:dc:19:ce:62:87:78:47:c2:30:75:df:
06:87:e9:41:2f:e9:80:30:46:e1:d8:c3:e9:33:8c:75:11:b1:
38:28:3d:f8:9e:aa:8a:48:25:b5:60:01:33:0d:ea:e8:0b:e1:
bf:2c:43:f7:f3:75:b0:a5:5f:e5:e2:d0:34:f9:04:24:47:06:
68:e7:26:b9:e0:5f:29:4d:09:32:8d:8e:b5:69:e8:5b:66:78:
e0:d2:d9:c0:69:8c:94:9f:d0:9b:d5:11:4c:f5:93:70:ee:ac:
26:73:1c:9f:7e:9f:eb:49:d4:44:e0:3b:f2:c9:ae:66:80:1d:
d5:1e:d4:dd:1a:5b:95:9c:85:d4:a1:0b:d7:29:c2:e0:d9:3a:
17:56:bb:74:99:f5:2e:02:98:20:89:39:85:1e:47:93:a0:f7:
1e:5c:22:66:26:e1:80:4a:9f:66:88:09:71:d1:78:dd:80:af:
53:23:2e:e8:b7:09:8a:83:d8:77:7e:95:ac:ce:76:47:95:5c:
6c:01:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:21 2026 by rpki-client