
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
File: _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json)
Hash identifier: NfpwM6JW/sWzrWEoQqOGC8LJgh7wIyf9DxhiV8c81e0=
Subject key identifier: 4C:CA:10:E0:93:DC:56:2E:96:DF:4B:C8:3A:8E:55:64:7E:20:4A:CE
Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Certificate serial: 21BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
Manifest number: 219A
Signing time: Tue 02 Jun 2026 15:54:46 +0000
Manifest this update: Tue 02 Jun 2026 15:54:46 +0000
Manifest next update: Tue 09 Jun 2026 15:54:46 +0000
Files and hashes: 1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: NS/aXD0hVPRdIBSvYrGC7L6mbO3FihN8Zgy4jY+VTQQ=)
2: 173CA1AABCA011ED914D176DC4F9AE02.roa (hash: Vr+OkUJiOpOJbbcgen6Edgd3bJ5gBqJRbgUPVMaT334=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl
rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8635 (0x21bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Validity
Not Before: Jun 2 15:54:46 2026 GMT
Not After : Jun 9 15:54:46 2026 GMT
Subject: CN=6a1efcc6-8624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b7:83:ff:4a:38:c8:93:05:a5:eb:f9:c4:15:
f7:a6:29:cf:ca:a6:a4:3d:ee:e4:35:d1:18:04:22:
c7:8a:0e:ad:e8:8b:92:33:fb:1b:f7:bb:3d:60:df:
2a:47:35:10:d8:bc:ad:85:8b:a0:c6:1a:85:30:9f:
d4:85:10:09:12:64:4d:14:3f:22:bf:5d:df:e5:fe:
dc:ec:2f:eb:ee:01:70:09:8d:56:7d:fc:18:f9:d0:
04:81:6f:b0:5f:df:31:59:43:0f:15:34:df:85:40:
3f:5c:84:c1:6e:21:b5:7e:b2:38:59:00:c7:62:8b:
d8:ce:42:7d:12:ce:cd:58:93:c9:ee:54:f6:33:ff:
73:c1:4e:97:42:d5:77:2d:3e:dc:f8:f5:ae:dd:4f:
c7:f6:a8:8c:72:5d:cb:5c:a8:e6:db:3f:1f:00:f5:
cc:80:a3:d1:d1:37:d1:8b:d9:d2:76:5c:8f:85:6a:
50:f1:75:e1:a3:1e:86:26:0f:ad:80:5f:3a:3e:15:
dc:b3:3f:06:d8:53:9d:7c:0d:19:7e:11:df:00:37:
93:ae:d0:68:6a:12:a4:9e:db:5c:21:ac:fe:4e:f6:
4c:30:71:96:eb:ee:7e:7b:e8:97:64:68:00:06:79:
c6:52:5d:85:ae:90:58:fa:94:0a:28:db:3b:fd:90:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:10:E0:93:DC:56:2E:96:DF:4B:C8:3A:8E:55:64:7E:20:4A:CE
X509v3 Authority Key Identifier:
keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:c4:19:fb:a1:24:a0:2e:e4:8b:12:3e:a8:9c:69:b6:b9:
25:e1:3d:64:0f:3f:aa:ab:9e:2c:98:30:06:61:4b:4e:14:ba:
81:32:f7:7e:e6:8c:ce:8e:c5:f2:f7:3b:43:e0:53:60:e7:ea:
85:38:8e:67:76:98:c0:85:20:b8:c3:f9:ed:8d:79:a1:22:fc:
51:68:04:4e:43:40:56:e2:8d:c9:01:77:79:bd:c6:e1:2a:79:
4d:17:85:d9:66:d9:29:9e:66:2b:b6:f9:97:66:e7:8a:4a:48:
ba:f9:88:c2:d5:22:c7:15:40:d1:9f:02:0d:c2:61:ac:14:cb:
f9:18:69:40:7f:58:2f:b1:22:3d:7f:a3:14:eb:6d:98:b7:b3:
5b:bd:b3:08:d9:75:47:3d:6e:16:a9:6b:d1:38:d5:ab:ac:34:
15:24:f6:b2:29:2f:d4:6a:77:b1:f2:04:88:bc:78:76:c8:a1:
5b:62:51:c6:4b:61:c5:83:34:35:f9:d8:01:59:e2:ed:41:a9:
91:38:35:af:09:f8:41:44:3f:ca:fd:f7:50:fb:18:80:6f:21:
a0:74:c7:8a:61:20:13:a6:9f:fc:aa:ec:7d:43:a6:26:04:80:
e0:7c:8a:68:f7:de:38:50:44:87:5a:50:62:14:4e:5a:ff:c6:
ad:8c:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:14 2026 by rpki-client