
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier: Khb0yV2Aszrp/OBe2nj/4KGTdu18lrK4u5WwP6ryy6k=
Subject key identifier: 52:1F:E4:EA:29:0E:A9:AD:51:86:4A:EF:49:C6:AD:82:02:75:7D:50
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number: 027A
Signing time: Sun 05 Apr 2026 01:30:52 +0000
Manifest this update: Sun 05 Apr 2026 01:30:51 +0000
Manifest next update: Sun 12 Apr 2026 01:30:51 +0000
Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: To/tsG2+hWcwSiSr7/HGkeFNkQsaz5TqRyx5e6M1upg=)
2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: 2V1RNdcikOtSa6XJr4FTxq5Y+/ocM1dKeWBzdjvqhEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Validity
Not Before: Apr 5 01:30:51 2026 GMT
Not After : Apr 12 01:30:51 2026 GMT
Subject: CN=69d1bb4c-306e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:38:16:bd:35:77:ff:0d:b4:fe:8c:32:a2:
03:bf:2c:c9:9b:57:55:80:a7:fa:b1:80:aa:5c:0d:
74:79:61:14:1b:70:1c:48:09:1d:ca:e0:82:89:1a:
a3:97:0f:15:10:75:cb:dd:d9:ea:05:87:cc:7e:c8:
6e:13:a8:84:0d:25:09:56:a7:c1:f7:d6:31:f0:7f:
19:2c:e8:ba:7e:1c:17:2c:ae:53:10:a3:40:14:2d:
80:41:22:c3:11:e3:7e:15:4b:77:ad:7d:6e:11:8b:
6f:81:c5:6a:67:36:bf:ed:8f:23:5d:79:b2:84:ff:
48:6e:35:2b:cd:f0:15:65:77:76:38:19:b4:61:a9:
ce:f5:61:04:d2:21:a6:17:c8:d7:a1:f5:59:6b:39:
d3:d0:08:21:c8:e0:84:0c:f0:96:fe:ec:0c:53:b7:
bf:4d:c4:f9:ce:f8:45:49:08:f1:0b:38:4b:60:08:
d4:9e:84:ba:b5:bb:71:6c:24:e1:67:9b:51:81:39:
e5:7c:17:57:c7:66:6c:b2:3e:1b:ff:4b:21:63:2a:
33:bd:d7:88:7d:5e:b0:c3:f7:47:a0:23:07:2b:ed:
e8:b9:b8:b5:73:5c:a7:9f:cf:5c:48:7b:c6:7c:2b:
3e:0a:56:09:cf:28:57:ce:ad:ba:34:bb:92:d7:20:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:E4:EA:29:0E:A9:AD:51:86:4A:EF:49:C6:AD:82:02:75:7D:50
X509v3 Authority Key Identifier:
keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ab:d2:41:9e:c1:b4:70:0c:11:85:31:b6:de:80:2f:91:79:
2f:f7:f6:c0:32:8c:7c:03:1f:f1:3d:d9:3d:c6:57:4e:bd:52:
e5:f7:99:53:0b:50:60:db:0c:b6:17:11:c0:50:a4:c5:a5:78:
20:42:c9:04:a5:04:d0:13:ae:b3:15:b6:4f:34:97:4f:78:87:
78:21:74:c5:c0:b4:a1:64:af:2e:7a:44:b9:57:c0:02:68:1d:
71:6a:d2:2d:6e:50:45:8d:94:70:36:cb:f2:11:5c:af:06:25:
b5:1d:30:c6:f0:c7:08:92:09:57:07:70:bd:45:33:d3:81:f1:
af:e8:09:70:f3:bc:94:d0:f1:b5:cd:7f:e4:fd:1a:c0:32:73:
da:5f:3c:a0:6b:71:d6:32:3b:27:67:86:d4:0a:20:64:8d:15:
22:bb:5d:69:13:30:20:b4:97:a1:72:80:f8:fe:99:8f:f1:c7:
84:22:2a:eb:20:df:42:6e:cd:31:ca:48:cc:60:d5:9b:3a:f9:
75:70:42:8f:f3:74:7a:92:6f:77:23:0d:e1:7c:04:df:d8:70:
f6:e3:3b:2a:13:62:c1:48:40:de:2e:a7:c9:e9:64:15:bf:55:
74:fe:88:fb:22:8d:2c:8d:be:44:7e:fe:b7:d6:b5:ef:a3:81:
01:bd:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:46 2026 by rpki-client