
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier: Gw0NhU1SxjRXcoeC2VKJe7ZOojB+tak5LNfVerOSMYc=
Subject key identifier: 51:F4:44:CE:00:A7:45:65:0C:97:3F:AC:E2:BB:B0:08:B2:0D:95:47
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial: 042B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number: 041D
Signing time: Wed 25 Mar 2026 00:03:25 +0000
Manifest this update: Wed 25 Mar 2026 00:03:24 +0000
Manifest next update: Wed 01 Apr 2026 00:03:24 +0000
Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: r7JLScUZVNFKBdjoJG3r9MLQIbriSKozY5l0JHVV2bs=)
2: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: iuWH4XsJsz0loBqcOc0cY5MFt/NYR3pQCRGo6mfAtWM=)
3: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: azSQvrLGixSL3oYOq7/u81UYo4j8paDDRGJYii7YcF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Validity
Not Before: Mar 25 00:03:24 2026 GMT
Not After : Apr 1 00:03:24 2026 GMT
Subject: CN=69c3264c-0fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:ad:6e:da:df:67:c8:ce:ba:e9:ee:86:90:
04:c0:a6:bc:01:ab:d2:55:0d:ae:31:64:f8:08:cd:
56:d9:03:eb:4e:12:11:54:b0:1e:cb:27:50:55:74:
4a:6a:9e:3e:1d:4e:3f:26:a3:c3:81:21:ec:3c:1a:
63:06:47:b4:e8:68:65:f1:0c:9e:29:a7:e6:cc:f6:
59:f3:0a:ef:79:4d:69:f4:4e:f7:dd:c5:ae:9f:c7:
43:d0:0c:32:92:b1:d0:0b:ab:74:f5:de:ec:5b:54:
ee:a5:b3:34:91:eb:47:9c:4e:72:0a:c8:5b:e0:b3:
7e:94:2a:21:65:09:72:a0:1e:7c:32:71:a3:13:d7:
3c:2c:be:c0:23:09:c2:5f:1f:0c:4c:2e:4f:af:50:
fd:7d:84:f3:c3:a9:c1:dc:68:fe:34:06:bd:ad:44:
fa:3e:de:fc:01:bd:3b:01:0d:b6:d2:13:51:da:7e:
dd:d2:b4:6b:65:c3:b5:a5:64:0c:b6:45:a2:ee:90:
ec:7c:20:a4:ad:c0:0e:6d:34:b6:c3:a2:e2:f6:b9:
a2:6f:bb:2a:43:28:15:0e:45:42:2b:57:38:f9:f1:
3d:10:b7:4a:1f:b8:58:13:51:da:61:dc:5b:ce:b8:
d5:ae:4f:34:b5:b5:09:13:2d:2b:b1:12:73:d7:e5:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:44:CE:00:A7:45:65:0C:97:3F:AC:E2:BB:B0:08:B2:0D:95:47
X509v3 Authority Key Identifier:
keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:0f:c9:38:13:33:9f:f8:ce:0a:3b:c8:0f:dc:4d:53:f4:2b:
6b:86:da:f6:77:b6:98:c5:83:08:ea:3b:82:82:87:3f:11:dd:
46:2e:1c:20:dc:95:cd:5a:cb:59:7f:00:6c:ff:c0:a7:81:c0:
06:5e:70:65:5e:9f:6c:75:39:d5:a6:23:93:73:d3:ce:61:55:
a5:30:af:0c:8a:7a:bd:72:58:41:fc:2e:fa:02:fc:b2:c7:4b:
f5:dd:31:b3:26:a5:52:c2:31:f0:dc:2e:22:62:72:e6:b4:19:
c9:1d:b7:0a:ab:d1:12:03:12:0d:96:87:4b:95:a4:fa:54:5e:
c8:48:62:28:0c:b9:c7:60:57:14:2a:90:95:a2:14:05:d3:4d:
1f:f6:c0:34:5d:98:ab:bd:c3:58:e4:77:ec:bb:6c:f2:cd:bc:
6c:9c:ec:e3:54:1f:3f:91:8b:27:e5:a0:36:48:e8:f8:bc:a3:
9d:dd:25:d3:14:df:48:c0:5a:4e:a0:29:91:48:54:d7:79:26:
87:3c:b2:27:02:d2:72:62:eb:d8:7a:bb:4d:7a:aa:ec:3b:e9:
aa:c2:3f:e3:57:32:85:35:fe:bd:03:a1:94:d3:b4:80:52:e4:
1b:42:7a:7e:fd:3a:28:00:83:f0:94:f0:c0:ef:09:d4:3f:dd:
0b:60:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:30 2026 by rpki-client