
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
File: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft (raw, json)
Hash identifier: RFxJi56+tI83EXHTlPp8XCY7JonFFlp5uDHMm5Dk8Qc=
Subject key identifier: 4C:EB:B2:1A:F9:14:CD:51:5C:EA:D6:87:60:C4:A0:22:AF:17:DE:D8
Authority key identifier: E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09
Certificate issuer: /CN=A91BF2DB/serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
Manifest number: 4B
Signing time: Sun 05 Apr 2026 07:37:33 +0000
Manifest this update: Sun 05 Apr 2026 07:37:33 +0000
Manifest next update: Sun 12 Apr 2026 07:37:33 +0000
Files and hashes: 1: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl (hash: /vhMasMiWhQydjDIYm+JhWKPFexmAfL9uB7+qZu9ERQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl
rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2DB, serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509
Validity
Not Before: Apr 5 07:37:33 2026 GMT
Not After : Apr 12 07:37:33 2026 GMT
Subject: CN=69d2113d-4112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:44:8e:78:1f:f3:6e:ab:8e:ab:b1:d3:14:
d3:eb:dc:dc:b2:52:5c:00:be:4e:8d:3b:eb:e3:01:
79:42:37:08:15:51:1e:0a:7f:3d:93:95:93:76:4f:
88:b7:98:c4:bf:b4:ae:b9:d5:79:a7:ac:9a:a1:8e:
94:1e:82:73:6d:51:15:c8:a2:e0:ca:92:e5:56:1f:
b6:02:5c:39:29:6a:2f:b7:40:1b:d4:f4:37:5f:24:
e0:a2:d4:1d:a9:32:ec:26:fc:61:bb:fc:f9:6c:47:
79:99:dd:1a:07:86:c0:d7:90:9e:47:52:8e:a5:7a:
7c:fd:da:75:3b:77:c0:2d:55:6f:b2:58:c5:a0:19:
4c:71:a8:d2:b4:7c:05:14:12:90:91:a2:58:8f:c9:
d1:f0:15:a5:9b:82:e6:32:f5:ea:47:ca:d6:c4:c1:
93:2b:40:78:08:7f:69:68:65:30:5c:ff:14:88:b5:
19:9f:dd:a6:00:1c:e0:e9:c3:3d:ce:7d:b3:21:69:
70:cf:c8:71:e6:6d:aa:3a:07:ea:e5:a6:bf:ed:2a:
f7:a7:46:c2:41:d2:53:de:94:21:1b:b5:0c:47:3d:
55:04:01:46:3e:04:2b:b0:06:3a:08:e0:37:21:e5:
fa:75:b3:93:f1:24:e2:61:df:69:1d:d4:c3:99:95:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EB:B2:1A:F9:14:CD:51:5C:EA:D6:87:60:C4:A0:22:AF:17:DE:D8
X509v3 Authority Key Identifier:
keyid:E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:60:ac:8c:53:fc:d1:e4:54:b6:0c:b5:e0:82:4c:69:7b:85:
e2:32:70:3c:46:c3:d8:30:27:dd:9a:7b:f1:5d:d0:5e:d6:e7:
4f:b0:95:ea:10:34:49:13:ef:50:dd:52:0d:4e:ec:b5:32:ca:
a9:19:b7:cb:b4:e0:38:8c:4a:73:e9:ea:26:09:d8:98:69:69:
cb:32:17:61:0a:16:f8:c8:2c:46:73:a9:88:aa:a1:76:c3:3e:
d2:8c:31:aa:6f:9a:e3:ed:68:38:fb:06:0c:5e:68:b9:e5:75:
26:28:11:74:7f:f7:23:87:3a:85:45:52:87:78:85:d2:37:c9:
88:d4:9e:78:7e:71:ed:ec:88:70:ee:5d:5e:4f:cd:a1:4c:c9:
7d:79:b2:66:e9:51:1d:b6:94:9b:19:88:d1:c0:31:1b:35:27:
01:70:b1:17:45:3e:b6:42:a3:b3:bf:de:ef:21:05:ed:d9:4e:
28:b5:19:c8:5a:01:7a:2b:e6:4f:da:2a:35:08:6d:21:cd:d7:
b3:7b:6f:81:2d:8a:90:f2:51:c1:f6:b4:da:02:54:c1:dd:14:
5c:26:a7:03:69:e6:9b:27:0d:48:2a:52:ac:32:1d:aa:b6:34:
81:25:f4:51:44:e9:69:a8:f3:9d:2f:06:8d:99:87:aa:0a:31:
49:dd:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:18:51 2026 by rpki-client