
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
File: g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft (raw, json)
Hash identifier: SZc74iQXQkFY8L20nDiont2sUZogWo0nQ8uE2FwVeEY=
Subject key identifier: BF:E0:84:81:2A:1E:21:EC:97:62:4C:39:9C:D8:70:0F:0A:9C:99:99
Authority key identifier: 83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
Certificate issuer: /CN=A91AC6B1/serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
Manifest number: 27
Signing time: Tue 21 Apr 2026 08:36:00 +0000
Manifest this update: Tue 21 Apr 2026 08:36:00 +0000
Manifest next update: Tue 28 Apr 2026 08:36:00 +0000
Files and hashes: 1: g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl (hash: QSXn4crQuCZzE8NpKe3juVt6tpAQV9QU4E2tm/jqltQ=)
2: 9292728E0E0611F1A3BA1443083D8C67.roa (hash: 7N3JvEFeMmGStZnau/w/mYkUGk3JI2SPm48oBXm5aTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl
rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 08:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC6B1, serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
Validity
Not Before: Apr 21 08:36:00 2026 GMT
Not After : Apr 28 08:36:00 2026 GMT
Subject: CN=69e736f0-abf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:05:2e:73:98:0e:a9:d2:5a:8d:19:cc:5d:
ac:3f:75:8f:eb:c8:8f:50:d9:c0:a3:1d:e7:fc:47:
c1:cf:50:4e:24:00:68:2d:5d:ef:e3:0e:2b:3c:ec:
40:c7:fe:d3:f5:28:7d:ba:e2:c4:1e:c6:5c:60:53:
61:05:24:3f:65:16:d3:8d:31:a4:ee:48:90:14:9a:
3d:ae:1d:2c:5a:d2:57:11:c7:fb:0b:e4:99:13:72:
7b:f0:7a:8f:25:fb:f9:07:fa:85:8e:95:18:9b:57:
78:b6:ff:3e:eb:e6:a4:6c:2d:88:ae:f3:0a:2f:8e:
f1:76:4b:60:e9:06:50:d6:08:72:9d:7b:ee:78:59:
f4:17:2e:3d:6b:46:ac:60:14:79:0b:76:9a:f8:58:
77:17:b4:1d:54:3b:b1:64:1b:ec:37:4e:cb:fb:fb:
66:0a:b1:53:69:56:b9:ae:81:d6:32:6a:2a:2c:56:
c8:db:6d:21:68:30:0c:63:5b:cc:d6:0d:95:55:a1:
bf:e9:ed:c2:06:d2:f5:f3:03:16:ad:8f:7b:d8:01:
e3:de:24:3c:1e:f7:22:81:4b:8a:1d:c1:73:43:21:
96:d0:28:e2:94:ce:07:54:35:d8:08:25:f7:14:12:
e4:d7:23:75:6c:8e:2e:83:b0:87:fd:1a:7f:0f:f6:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:84:81:2A:1E:21:EC:97:62:4C:39:9C:D8:70:0F:0A:9C:99:99
X509v3 Authority Key Identifier:
keyid:83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:a6:bc:36:78:93:0c:5d:6d:10:5d:bb:fc:de:e8:71:f8:
59:75:a8:8c:18:45:c5:6a:23:26:ea:4a:86:50:fb:0a:d5:96:
34:0c:89:72:55:ba:8b:96:84:6c:73:ec:92:0e:56:7c:8c:e8:
4a:49:02:72:ec:79:e0:bb:32:6f:66:ac:c0:a7:ff:b4:23:1c:
bc:f6:26:9f:f9:90:16:2e:11:b5:85:19:d8:c9:8d:1c:46:8d:
29:ed:b6:fb:63:20:ee:f8:11:7f:f9:19:77:b4:e4:e3:92:93:
ac:6d:6b:57:07:79:be:fe:1b:20:a9:35:96:41:da:b2:92:75:
6d:82:97:fe:4b:24:bc:c0:3e:ee:57:84:62:3c:72:94:33:a8:
1a:b7:39:79:04:d4:4d:2e:67:e0:9c:cf:49:f9:72:b2:23:f0:
36:73:0a:41:7b:6a:8b:2d:37:30:25:0f:26:ba:ee:b5:8b:4c:
f4:3d:b1:ac:49:79:45:f4:83:41:09:fb:e5:a7:6e:b0:c6:36:
aa:f5:36:1d:ad:ab:43:a1:be:5b:67:f9:ae:8e:57:19:e6:a8:
57:7a:7d:d5:0d:35:54:4b:90:47:e5:fc:1b:01:74:9a:08:10:
c9:f1:71:f3:fb:d0:55:35:80:d2:22:de:47:a0:83:db:42:ab:
86:90:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:06:55 2026 by rpki-client