
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json)
Hash identifier: 3hyQAI6b2EizNIMKJ+i5K9MzhGuN8xtAvkymMqo9dRY=
Subject key identifier: A3:15:7B:23:F2:B2:D9:A9:6A:9E:F0:76:E2:DE:50:7D:E2:CC:E8:54
Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
Manifest number: D6
Signing time: Sun 05 Apr 2026 06:06:47 +0000
Manifest this update: Sun 05 Apr 2026 06:06:47 +0000
Manifest next update: Sun 12 Apr 2026 06:06:47 +0000
Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: lxqG1jeDwDn27XiR20XRgEev1FZNGVzc9MSA/eD39c4=)
2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: 5JQkOuFH+q+ovXNdOnUHiPBxNL2Wd2PzyB1f8SwCRM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Validity
Not Before: Apr 5 06:06:47 2026 GMT
Not After : Apr 12 06:06:47 2026 GMT
Subject: CN=69d1fbf7-9d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:cc:c9:a5:ea:35:a0:3e:57:ba:dd:18:bf:
5a:48:a9:63:9e:a6:cf:74:00:75:6f:c4:52:b9:67:
6e:4a:6b:63:be:27:52:0a:a1:55:4a:74:6d:98:69:
2a:52:d6:51:61:de:33:5c:58:59:09:2d:c7:d9:9c:
47:48:ca:f5:68:f9:3a:85:3d:61:e8:34:24:66:f3:
7d:98:4a:a0:0b:11:65:67:16:fd:91:a5:dc:8a:9e:
e5:a8:bd:65:1f:62:73:83:b6:18:73:28:f9:b2:de:
43:31:3a:f3:89:38:22:a6:7e:8e:ac:d1:03:46:6e:
fc:32:d2:52:85:54:5b:b0:ce:75:39:a2:18:8b:4a:
d4:9f:c5:3b:70:15:1c:fc:7b:04:3b:c7:6a:8b:1d:
83:67:9d:ec:b9:ed:69:3e:3f:28:06:9e:0c:20:ff:
59:c1:70:24:63:a3:b6:f2:1b:e3:d1:c7:1e:f3:e5:
5e:0c:51:db:e7:9c:18:cb:fc:a9:65:2b:7f:17:d0:
67:61:4e:0f:2c:d6:72:d9:8e:d0:de:5e:7c:75:73:
da:53:b9:20:c2:0b:24:5c:ab:6b:32:ef:2c:87:63:
f3:6e:5d:0b:4c:83:13:06:10:04:de:21:ac:40:ac:
9a:1a:bc:5f:a6:89:77:23:45:b0:de:8c:0e:49:78:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:7B:23:F2:B2:D9:A9:6A:9E:F0:76:E2:DE:50:7D:E2:CC:E8:54
X509v3 Authority Key Identifier:
keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:a1:0c:45:1d:cf:58:f5:91:56:a5:11:6c:f4:70:8b:5e:da:
01:53:c5:09:09:b8:b7:5f:97:b7:a5:66:dc:30:0c:c0:92:ad:
4b:a0:1f:2e:51:48:9d:86:c1:43:90:08:74:9f:ff:30:a6:fa:
44:3e:c2:b9:c3:59:a7:80:a0:c0:ce:54:90:3b:90:11:e1:d4:
39:ae:e6:cc:d0:26:e1:f0:f4:0e:ef:fa:ad:72:9b:43:55:27:
d5:2d:2c:9d:89:d6:73:30:ae:b3:de:b8:cb:1d:ba:f8:ae:46:
4f:ad:d7:de:d6:76:a7:86:f2:a2:56:aa:b8:ab:3f:00:c6:6b:
cc:90:ff:32:65:56:2d:d3:83:02:ff:44:19:dc:c5:61:28:b8:
cb:fa:b3:9c:66:ee:72:4b:0f:67:38:cf:6b:d9:f1:ef:9c:5f:
67:58:53:86:d1:c0:cd:0c:6b:c4:5b:13:30:69:d7:59:ee:f8:
79:2c:47:dd:21:f4:86:9e:3b:45:38:f5:4a:2b:6a:a4:0e:4c:
bb:75:e8:9c:22:d3:ac:9f:a1:de:2e:1b:ca:05:5a:24:90:e3:
2c:d3:f8:db:30:12:2f:e2:bc:71:da:db:e5:32:94:3d:42:dd:
5c:c7:29:ab:9a:12:54:6a:d9:e6:c8:22:32:0e:d2:c8:40:3f:
39:50:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:47 2026 by rpki-client