
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: kIIHoAwWX10FoPKhYrFSbCz4a33NvHbgzvlSvcxlTak=
Subject key identifier: A0:8B:3B:3F:8B:D6:D5:B5:76:AF:5C:84:09:63:49:B4:41:8F:04:C8
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E02
Signing time: Sat 28 Mar 2026 16:02:29 +0000
Manifest this update: Sat 28 Mar 2026 16:02:28 +0000
Manifest next update: Sat 04 Apr 2026 16:02:28 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: OGZl+ris0PsQULOp56N4hCmT7ZgpFoKThMvPrkMidTU=)
2: B842F0DEDB8A11F09F03163163D3641D.roa (hash: ks313B+YVez30ZvOkXppIDe7jBhr+JL2wzA7+C6C6as=)
3: B7BA9860DB8A11F09F03163163D3641D.roa (hash: O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=)
4: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 16:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7704 (0x1e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: Mar 28 16:02:28 2026 GMT
Not After : Apr 4 16:02:28 2026 GMT
Subject: CN=69c7fb94-8e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:e3:de:e0:23:6e:1c:4b:11:73:3e:6a:ec:
5b:8a:4c:a6:df:25:42:49:a8:71:57:a1:21:64:bc:
ee:e6:c7:44:12:e9:8b:92:95:a0:39:d5:45:d6:ac:
52:f6:5d:5b:c3:fe:4c:74:07:32:07:16:c1:0f:08:
c1:03:8f:68:9b:4f:26:84:66:00:97:c0:50:a1:11:
33:58:97:73:51:16:7c:aa:ce:72:4e:70:da:5c:09:
27:86:14:f1:26:59:c6:78:da:f4:1f:d3:1b:10:f9:
52:9c:e2:32:16:f5:4d:86:29:2f:bd:e4:a5:30:3f:
99:c7:15:47:d3:4a:41:16:f6:2a:7c:84:a8:b9:9c:
5c:0f:fb:db:27:03:43:03:c2:8d:a7:e1:97:3b:f3:
8f:d2:94:12:14:7f:79:c2:9c:76:b6:0f:19:0b:e8:
31:bc:58:26:69:ee:59:5a:03:03:a5:82:97:de:20:
b8:7d:95:93:c6:cb:ca:8c:45:74:85:43:b1:ae:37:
92:99:28:f4:3c:c1:c0:78:c1:b5:a4:18:17:e2:0c:
e8:af:2b:a8:ff:8e:95:57:7c:ad:27:44:25:56:7d:
3d:c6:74:ca:fc:8e:e5:0f:73:7c:4e:c6:4f:b8:1f:
55:00:cb:20:c0:08:aa:1f:2d:68:24:c6:c7:d9:a6:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:3B:3F:8B:D6:D5:B5:76:AF:5C:84:09:63:49:B4:41:8F:04:C8
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b2:3c:54:03:ca:aa:c3:69:26:7a:18:93:f2:4d:b5:79:87:
47:72:d6:64:9f:d6:cc:67:61:9c:64:6e:fb:ad:d0:be:bb:4f:
22:75:4f:0a:ba:01:e5:4f:c2:a5:27:ed:52:b7:84:f9:ba:a9:
20:c9:9e:96:dc:dc:b2:13:97:d0:28:7d:4e:06:25:c5:6f:f0:
e1:d3:03:7d:61:e8:a9:80:c5:f0:6a:b8:a9:8f:e6:8f:d7:bf:
dd:f8:b5:6a:28:71:49:a6:54:ee:0c:31:86:8f:81:5b:6e:41:
76:6d:95:11:82:96:6e:7b:b4:a3:c9:bc:9b:8c:ea:6b:07:4e:
84:e7:cf:73:98:08:8e:2d:34:f5:42:94:c5:be:22:cc:f1:35:
2d:92:a3:26:0f:f3:07:3a:41:1a:81:1b:69:72:dc:cb:c1:9c:
73:01:91:3b:60:b2:20:6f:45:f0:cd:65:b6:bf:f8:d0:7c:1c:
72:e0:72:dd:6f:d8:44:0b:02:7c:bc:07:e1:13:33:61:ac:16:
d0:09:8b:84:39:94:e1:ee:e4:d4:42:f6:25:8b:dd:6f:56:fa:
e7:55:d6:9c:d4:c5:e5:d1:98:a6:58:d8:b5:80:d8:f5:e0:75:
d5:50:31:16:13:bd:54:ec:39:80:34:27:87:d3:d4:18:a8:6e:
0f:bb:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:31 2026 by rpki-client