
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier: t7cYzEIC/0cJQRR4QNXs9SzTLAdk1z8+o7HipMytL1A=
Subject key identifier: 73:00:D5:FF:F0:FE:29:16:E9:DD:E3:A8:D3:99:6A:56:B8:86:08:F6
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number: 01A9
Signing time: Sun 05 Apr 2026 03:41:08 +0000
Manifest this update: Sun 05 Apr 2026 03:41:08 +0000
Manifest next update: Sun 12 Apr 2026 03:41:08 +0000
Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: LQ7xEuo2koK3OkyI+aQc+IuR1E867SjyQQcBl8Fjd0Y=)
2: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: ENHhkrk8BCTpwWr4aooyXoOdIvkQ+fMj1H+Xu4jYjcE=)
3: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: GFImaBIJDxKMIRAiFX2CXsx2x2WQvz0QE3N7btck8OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Validity
Not Before: Apr 5 03:41:08 2026 GMT
Not After : Apr 12 03:41:08 2026 GMT
Subject: CN=69d1d9d4-afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:a4:1c:d5:4e:4a:20:91:3b:76:1b:69:4b:
29:24:6d:b6:ba:43:29:d4:8a:a7:c3:a1:6a:1c:30:
dd:1f:4a:78:ae:b3:94:24:fb:ac:3d:e2:83:8c:22:
62:77:ec:c4:fb:69:02:5a:31:96:a3:8f:07:f2:48:
64:ce:6e:a5:18:20:31:e8:6c:b8:d0:d3:70:3c:a6:
cf:7c:cb:11:6a:0b:df:64:e4:47:80:48:ff:65:18:
a8:fb:c4:91:f9:1f:f0:7a:02:d5:cf:ab:1f:02:c3:
aa:97:cc:68:a1:ce:ad:4f:9e:70:08:55:dc:d0:39:
d5:f7:3b:ef:9d:6d:64:48:0e:1f:7c:a7:42:33:f8:
d9:e6:52:9d:51:8c:4d:25:f3:2d:72:da:b9:31:e1:
8a:a5:cf:23:e2:50:31:99:71:51:b2:09:c2:7a:6a:
4a:a2:89:bb:ae:71:af:0d:84:33:4f:77:a8:b1:8d:
52:2a:65:af:d3:52:8c:e2:01:b9:15:83:ad:cc:78:
01:98:5b:c9:6d:dc:99:c9:52:fd:27:78:a8:84:2a:
8f:8e:dd:94:93:b2:41:6f:0e:f6:cc:94:60:dd:46:
43:b2:0d:86:df:8c:f4:b9:bf:a5:41:4f:0e:e8:6d:
2a:ac:99:19:93:06:66:c5:12:d8:b3:ba:8d:3a:e4:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:D5:FF:F0:FE:29:16:E9:DD:E3:A8:D3:99:6A:56:B8:86:08:F6
X509v3 Authority Key Identifier:
keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:73:23:0b:d6:57:3c:19:1c:45:7e:2b:90:cf:ba:78:74:a8:
dd:7d:46:a4:68:c8:89:88:99:8e:e0:c9:c6:10:a1:7e:37:59:
9f:21:a6:21:52:a4:5c:33:a9:37:b6:cf:d9:37:ce:e9:6a:53:
11:72:85:da:f1:0a:a5:4d:a8:cf:72:31:d5:19:c2:22:69:06:
c3:be:89:59:7d:ff:b7:a9:f5:6c:de:ff:21:67:27:30:15:a2:
12:d9:44:fb:42:79:a0:91:ad:e8:c2:3e:5f:48:88:bc:7f:9e:
88:a3:f6:dc:7b:c1:c0:ed:74:6a:ec:12:c9:1d:19:ba:9b:d2:
94:0f:9f:79:76:92:ff:70:48:76:d3:dc:e8:a8:eb:90:c0:14:
c0:01:17:0d:d4:b8:59:31:bc:b0:14:40:e2:a5:b8:b8:ce:b1:
e3:af:dd:62:0c:28:2f:73:8a:dd:72:09:fd:7c:d4:d1:83:2b:
57:83:bb:5b:09:7c:a1:98:13:fb:77:f7:84:5c:34:c9:a0:04:
a9:74:6c:09:90:f6:a1:90:fa:6d:19:d4:96:29:5f:21:d8:37:
c1:c1:f7:5e:07:9c:26:52:3e:61:b2:ed:53:c3:c3:aa:35:6b:
c7:00:6e:55:45:d0:6b:d9:19:69:28:1c:eb:6b:a3:f1:2b:7f:
cb:f4:3c:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5
QUQwMDFCQkQwHhcNMjYwNDA1MDM0MTA4WhcNMjYwNDEyMDM0MTA4WjAYMRYwFAYD
VQQDEw02OWQxZDlkNC1hZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucykHNVOSiCRO3YbaUspJG22ukMp1Iqnw6FqHDDdH0p4rrOUJPusPeKDjCJi
d+zE+2kCWjGWo48H8khkzm6lGCAx6Gy40NNwPKbPfMsRagvfZORHgEj/ZRio+8SR
+R/wegLVz6sfAsOql8xooc6tT55wCFXc0DnV9zvvnW1kSA4ffKdCM/jZ5lKdUYxN
JfMtctq5MeGKpc8j4lAxmXFRsgnCempKoom7rnGvDYQzT3eosY1SKmWv01KM4gG5
FYOtzHgBmFvJbdyZyVL9J3iohCqPjt2Uk7JBbw72zJRg3UZDsg2G34z0ub+lQU8O
6G0qrJkZkwZmxRLYs7qNOuTOmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMA1f/w
/ikW6d3jqNOZala4hgj2MB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4
M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B
Sm5xQnRZLXBua2lhMEFHNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA3MjC9ZXPBkcRX4rkM+6eHSo3X1GpGjIiYiZjuDJxhChfjdZnyGmIVKkXDOp
N7bP2TfO6WpTEXKF2vEKpU2oz3Ix1RnCImkGw76JWX3/t6n1bN7/IWcnMBWiEtlE
+0J5oJGt6MI+X0iIvH+eiKP23HvBwO10auwSyR0ZupvSlA+feXaS/3BIdtPc6Kjr
kMAUwAEXDdS4WTG8sBRA4qW4uM6x46/dYgwoL3OK3XIJ/XzU0YMrV4O7Wwl8oZgT
+3f3hFw0yaAEqXRsCZD2oZD6bRnUlilfIdg3wcH3XgecJlI+YbLtU8PDqjVrxwBu
VUXQa9kZaSgc62uj8St/y/Q8VQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:57 2026 by rpki-client