
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier: fQ2c3dMVYMOzKg3xuNTSmm5D6ZBsK3+LMweI67F+Iwo=
Subject key identifier: BF:1F:4C:DE:C0:61:79:10:F4:C3:D1:FC:CF:5D:AF:F1:07:D2:1F:A8
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial: 0D2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number: 0D00
Signing time: Tue 24 Mar 2026 18:01:20 +0000
Manifest this update: Tue 24 Mar 2026 18:01:19 +0000
Manifest next update: Tue 31 Mar 2026 18:01:19 +0000
Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: +6Ff5lUdr/BjMTpUqGpZZO6K2Wr489G3M7w/oeKUFxU=)
2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: rFeU6+VRmAkqArzk8m/u7RZ8+bahOhmzZ3Bcpw03nLw=)
3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: bxdAOGEj/+Udp1jV0BPkX+3yhlPb74LiIfGot0pNRBw=)
4: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: KIcJRDk3S7+rRmk7CaiKtvN5123l+l7hzY10/IQxIQ8=)
5: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: WI26tucy3cSYO4sE9GmP72fSFg+gB2AzQ5GmMyowLBY=)
6: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: wE1GPx9wnoFcfEYGMUAJqz9RuXU5yBbJIWxjAwW0zyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Validity
Not Before: Mar 24 18:01:19 2026 GMT
Not After : Mar 31 18:01:19 2026 GMT
Subject: CN=69c2d170-3525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:0d:f2:aa:ff:12:44:4f:69:02:19:35:31:
28:2b:ae:99:50:ac:fa:3c:27:29:56:06:22:54:ed:
cd:a3:3e:66:ce:d9:11:60:f5:6b:f8:e8:03:b2:4f:
62:04:45:77:54:7e:56:6a:5b:78:6e:c7:85:3d:b4:
b0:29:d1:8e:a2:17:d3:4b:63:86:e8:fe:9f:ca:a4:
a0:b8:b3:e0:bf:8f:40:88:1f:55:99:19:3c:99:f7:
e4:7a:75:04:70:eb:3b:c2:67:e3:27:8e:90:2d:e9:
9b:c1:b8:3d:b0:d4:5c:43:a5:dd:2a:e8:ca:90:65:
57:7d:c9:71:d9:b8:99:37:87:49:08:0c:4b:b2:31:
cb:8f:e4:83:2e:00:0d:ff:68:7b:69:f6:fb:2c:c9:
e8:3f:66:5c:93:24:0d:48:a5:8b:5b:86:8b:0e:86:
ce:ef:5c:d1:d6:4b:da:34:c6:67:5f:93:ac:6b:d6:
0a:e2:37:93:80:e5:2f:c4:c1:a4:76:ec:1b:b4:e4:
3f:77:90:54:a1:26:3e:27:04:2d:75:eb:21:5e:73:
08:48:4d:2d:23:2a:d1:2d:3d:ed:f9:22:c4:c2:fc:
c3:91:db:46:3a:9f:f3:c4:0b:8f:6b:00:95:d9:0e:
4f:85:b1:76:18:af:53:ee:44:2e:31:b6:10:0b:0c:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1F:4C:DE:C0:61:79:10:F4:C3:D1:FC:CF:5D:AF:F1:07:D2:1F:A8
X509v3 Authority Key Identifier:
keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:80:d8:4d:4f:ff:0d:3d:d7:1b:e0:7f:a0:1f:2c:c3:30:0a:
b8:c5:fe:5f:0f:4d:de:86:63:36:45:f8:a7:98:74:f2:73:e3:
fe:bd:f6:1a:69:ef:3b:c7:06:e1:da:5b:43:44:89:a7:cf:26:
00:b6:39:d9:c2:35:f1:90:4d:b7:46:a9:75:7b:82:ae:15:5a:
18:cd:75:72:9f:d8:c7:05:57:2a:6b:a9:be:68:18:ff:a5:22:
f9:23:0d:1a:f6:12:90:d1:94:80:ff:39:e1:23:6b:87:0b:b1:
58:85:5c:95:aa:75:d6:70:d6:14:14:78:4f:9e:80:94:ff:28:
80:74:30:a1:47:ca:c4:17:e0:32:da:3d:79:93:f8:29:0d:4e:
82:f4:6e:6b:a5:17:02:74:91:cf:58:64:54:a9:d3:b3:0c:ab:
8b:ac:68:43:29:92:1c:9b:bc:ab:b6:90:1c:25:4d:9a:39:b4:
4f:e5:a6:38:16:8a:6c:64:ae:8b:97:66:1a:92:86:79:ba:c7:
bf:64:71:78:3b:ae:ab:80:98:17:d2:f3:34:06:dd:f4:f8:64:
c2:17:f4:76:0f:66:2b:f8:e0:bd:30:73:e3:07:ec:95:f8:d8:
0a:0f:1a:d0:29:61:1e:e9:78:ad:92:07:8f:5e:ea:6c:db:74:
6b:d9:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:49:47 2026 by rpki-client