
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json)
Hash identifier: le3cMuuqzABmFAcLU+NhwzOvc/1VeLDp4A9th5PsNxc=
Subject key identifier: 2B:9E:3B:1F:83:07:D5:1C:B4:16:18:4D:00:F0:83:02:24:46:EA:5E
Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8
Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
Manifest number: 01CD
Signing time: Thu 21 May 2026 03:43:42 +0000
Manifest this update: Thu 21 May 2026 03:43:42 +0000
Manifest next update: Thu 28 May 2026 03:43:42 +0000
Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: 0SMnFBQfyaOPdVZfFuiKw0ainpOpKIIfqHLcICegK1c=)
2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: GnVfU1KqQLS+VBxAiVzN8zaxN7MEl32b3mp04P6RPD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl
rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
Validity
Not Before: May 21 03:43:42 2026 GMT
Not After : May 28 03:43:42 2026 GMT
Subject: CN=6a0e7f6e-5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:6d:65:fe:4a:9c:55:61:25:3c:56:1d:ec:
62:d4:da:a8:38:b8:78:29:b4:52:d9:08:36:46:6e:
01:54:bf:26:ff:16:8c:52:ed:f0:da:2a:8b:9f:41:
d5:c1:f6:3e:27:83:41:b5:ac:dd:a9:c1:29:41:af:
f3:eb:bd:bb:13:1c:f5:33:dc:12:da:e3:dc:24:9c:
9f:e1:2a:6c:78:07:e1:8e:a9:0e:49:5a:67:4b:72:
74:1e:24:5e:c4:ec:9e:b2:8d:47:fc:cd:43:f6:65:
65:9b:76:50:1b:e6:3f:9d:60:6c:6e:c1:75:9f:6c:
73:9f:f2:58:68:c6:2a:f0:19:fa:74:44:d3:45:22:
06:c3:b7:a4:a8:d0:64:64:a5:38:f1:e6:14:58:3d:
f2:26:77:41:f3:06:c1:68:37:ea:1e:32:f0:21:df:
dd:f4:63:cd:85:6d:e0:91:71:97:86:e3:e3:46:47:
53:ec:22:5b:18:9d:17:77:21:ab:54:a6:1d:87:6a:
ba:11:31:94:2a:a6:a7:61:a0:e8:83:a1:a6:aa:5e:
19:5c:16:77:2a:03:c8:05:eb:b8:dc:ed:32:6f:52:
ff:48:16:67:60:d0:dd:42:9a:6f:b3:5f:79:d2:66:
29:83:8f:7a:6a:ef:df:f3:c7:49:57:9c:bc:ef:24:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:3B:1F:83:07:D5:1C:B4:16:18:4D:00:F0:83:02:24:46:EA:5E
X509v3 Authority Key Identifier:
keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:04:e3:15:de:ce:58:f2:66:78:c3:b2:63:7a:3d:fb:19:
8d:56:24:96:bc:1c:79:52:9d:5f:7f:1a:36:75:a2:17:07:1b:
90:33:a4:c8:2e:b2:2b:9c:23:b8:9b:39:8a:4d:fd:8d:df:48:
cf:e1:e0:74:40:05:ad:65:d2:ca:aa:ac:b1:3f:6a:a7:9e:bb:
eb:70:51:fd:95:a4:df:d1:f5:0d:e3:a7:4c:78:7c:89:d0:47:
ff:84:e5:32:27:65:0d:8b:a5:e8:f5:c3:73:9e:e7:53:ff:c5:
49:26:2a:8c:cd:8a:ca:f2:3d:b2:1a:9e:04:a4:84:d7:56:14:
ad:72:2e:f8:9e:51:8d:f9:cd:2c:c0:02:b5:f0:dd:30:b6:b0:
93:5e:06:cc:d2:23:fb:28:7a:30:9a:72:04:d3:ec:41:a8:3c:
d0:a8:32:b2:f3:2c:1b:c2:b0:a2:4d:bd:3b:93:df:b8:57:f4:
55:1b:2a:28:be:ee:3d:5e:d5:f0:d6:55:a5:8a:67:2b:c1:99:
fd:d5:d1:5f:33:42:dc:7e:43:6f:07:65:61:75:bd:6f:03:47:
2e:4a:c0:71:d8:e9:6f:7a:9b:b9:d7:b2:f0:34:40:22:6c:93:
2f:74:33:7f:db:21:8b:ff:35:39:9d:8d:0b:77:02:7f:a6:1e:
71:17:bc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:10 2026 by rpki-client