
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json)
Hash identifier: m/3IcN4PMLhrbjP9qEpIjPexXjNbcW6S9cSYukf9VWY=
Subject key identifier: 74:80:C6:85:7F:46:FF:A5:83:02:48:AC:56:32:EA:7A:74:50:AE:9E
Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
Manifest number: 02E5
Signing time: Sun 05 Apr 2026 02:00:07 +0000
Manifest this update: Sun 05 Apr 2026 02:00:06 +0000
Manifest next update: Sun 12 Apr 2026 02:00:06 +0000
Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: dzDN1JaPY9NRRfYEilK+n5QWd0mjsC4QfeXCP1DtsEc=)
2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: TFmcQAcfne/kujXnOSIqvHGLVj2LAWcXYB93wCfwF/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Validity
Not Before: Apr 5 02:00:06 2026 GMT
Not After : Apr 12 02:00:06 2026 GMT
Subject: CN=69d1c227-702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:94:67:3b:ae:dc:ec:9b:be:b1:c8:9e:e3:
71:c1:ca:ac:f8:82:96:f2:66:b1:44:2c:2b:8c:44:
9a:ac:15:ed:1a:4f:e0:72:54:95:8c:50:47:0b:af:
3d:a1:c0:e1:43:93:e4:4d:46:9a:a2:57:af:d7:c6:
19:55:ee:cd:18:77:6e:7f:f1:67:f3:fc:bb:a4:af:
9a:79:d7:b4:3c:79:53:84:a7:a6:8e:f4:3d:04:3e:
18:8b:34:e5:17:e1:ed:7c:34:b3:20:6b:69:ce:01:
02:d7:9a:ea:39:20:37:61:c0:d7:28:7e:5d:f4:56:
7e:a3:e0:41:1a:3b:63:8a:d2:5c:49:eb:d3:0e:7a:
48:e2:2e:5a:36:34:b2:6e:2e:b8:fa:7b:77:86:9f:
88:d6:74:d6:ca:31:71:0e:55:42:0e:c8:46:11:63:
cc:f5:95:5b:df:dd:b0:35:c9:52:aa:3c:3d:dd:2d:
24:ca:7d:a2:b0:49:a4:fb:cb:b9:2c:7a:20:de:a0:
09:52:ef:39:0d:2e:d5:bf:da:3b:da:ac:85:6b:11:
c9:6b:c2:68:68:59:ef:2e:4b:b9:1e:86:c4:d2:b8:
69:8e:41:4d:58:ab:1a:93:3a:03:05:c5:e1:7e:a8:
fe:04:f2:d6:c6:fa:24:79:dd:0d:30:3f:8a:45:4c:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:C6:85:7F:46:FF:A5:83:02:48:AC:56:32:EA:7A:74:50:AE:9E
X509v3 Authority Key Identifier:
keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a3:7f:5d:8a:bb:f5:32:f6:e5:03:e2:72:84:52:ea:07:04:
22:b6:e3:7b:2d:14:62:38:0d:ce:a1:b8:99:63:9b:86:ed:38:
61:05:52:4b:3f:4b:05:10:44:e4:f5:df:3b:c9:8d:61:32:19:
ef:94:b5:a4:a1:79:59:32:60:b2:a6:d9:9c:57:ff:ff:83:f4:
18:26:6e:b9:a0:52:ca:7e:5c:f6:fe:c5:16:fb:94:29:eb:b7:
1a:aa:39:80:8d:9f:e4:0d:fd:7a:1d:08:09:7d:ae:91:46:70:
5d:4a:37:70:d2:9e:7c:58:29:90:e0:83:ea:f7:53:0a:b2:f0:
eb:a7:95:dd:17:f0:c2:88:05:13:af:9c:6f:2b:5f:55:c1:90:
d8:82:d7:be:ca:db:fc:24:a4:72:97:9e:7c:00:00:9b:7f:58:
62:3a:27:05:86:84:e0:d5:0e:52:b9:d7:ef:f7:f8:7b:c4:fa:
3f:e5:dd:f1:15:c4:c3:2f:fa:ff:8e:b1:6b:72:d3:f2:33:13:
6b:5e:b8:c8:07:85:f0:03:54:6d:ee:25:f7:1e:31:8c:c0:a0:
82:ad:14:c7:7c:e4:92:df:15:41:13:63:da:cb:dd:ac:fc:b6:
24:65:c8:62:ee:83:06:c4:a3:c9:08:75:a2:cd:a0:e8:57:33:
27:94:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:24:44 2026 by rpki-client