
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier: 9raDZezAOHoE8esLwcVAThh+sUYj6TNqx8ejCzWOexA=
Subject key identifier: D4:09:ED:B1:0A:02:94:F8:F3:EE:E0:F1:F8:25:D6:D3:A1:06:CD:45
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number: 027F
Signing time: Wed 25 Mar 2026 01:28:51 +0000
Manifest this update: Wed 25 Mar 2026 01:28:51 +0000
Manifest next update: Wed 01 Apr 2026 01:28:51 +0000
Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: RDDtoa+8OU3a5lSZcJG0enKZzBWRCr1pVoa1X5/7FJo=)
2: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: s6Qyv+Kjm6U8zsIA5gW9AT3/QCQSXrLitcN0Qq9EJLg=)
3: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: JqaPwoYkZsoCryG868iVTZ8zY+76Lni/250smlWRpm8=)
4: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: GhhSaA0xTyH5baipIEusOVelE8AEomQ82Qzg02jGkGw=)
5: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: azXfIFcWznJdcfz2Tut0Wi0gwmcY2B86Fw4E7iLjlm0=)
6: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: nqKMSVlSyxa7QHrLlm6Y84qBJxYwcSQ64B4xVxT4RjA=)
7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: WYnjZsNu5jiuRKrMLvrdkCklYsmIm0eNnQ6iCSiMY3Q=)
8: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: h2uMCBwNTFg6piL71Xpw5aeMHSrOsn6mAYZOypLUc88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Mar 25 01:28:51 2026 GMT
Not After : Apr 1 01:28:51 2026 GMT
Subject: CN=69c33a53-ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:95:7b:0a:66:b0:f8:64:cd:a3:5a:b7:bd:
a8:bc:a4:01:1e:64:a4:64:e4:ad:29:39:03:0f:4d:
8a:91:1a:e6:93:ed:ad:e6:05:e1:39:8c:cf:4c:b4:
8c:cd:c3:ac:22:b4:3f:c3:a3:e3:00:fe:60:df:3d:
31:3e:cb:6c:83:37:7f:8f:68:b5:91:6d:da:b3:a4:
e1:b5:16:28:18:3d:80:4b:ca:3a:63:7c:5f:3b:89:
7b:52:8f:a2:8b:1f:2e:68:f0:45:c6:7b:87:4c:19:
21:f1:bc:b9:9a:6e:80:a7:4a:48:dd:be:22:f2:b5:
3b:3c:37:ba:87:c2:35:df:bc:3a:cd:17:a5:ab:3e:
4d:f7:d6:25:84:0c:0e:a3:09:2c:00:b0:d8:e1:49:
15:74:81:46:ef:89:f6:76:53:00:5b:0b:26:50:d0:
41:70:8d:a9:aa:e6:cf:64:ed:78:c4:59:03:aa:9d:
8f:ff:49:22:06:2f:6b:5d:ba:68:a0:22:44:03:6a:
0d:f9:87:8c:14:ad:f4:de:c0:a9:97:65:98:e7:af:
90:05:0a:e8:f6:68:02:43:66:c2:55:db:d8:69:bc:
a7:ba:71:d2:57:31:59:00:0e:0a:a6:8f:b5:cb:4a:
c0:15:a9:3c:57:dc:ff:e3:21:39:47:11:4e:9c:92:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:09:ED:B1:0A:02:94:F8:F3:EE:E0:F1:F8:25:D6:D3:A1:06:CD:45
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:10:dc:fb:c6:87:2c:0f:20:54:19:37:02:ac:ba:27:b2:32:
99:5d:ef:e6:19:59:25:79:f8:4f:32:26:6a:0a:22:08:91:90:
b2:b9:24:22:c0:72:16:58:49:2e:f3:1b:c6:d5:7c:e8:b1:71:
2d:05:32:d7:99:32:9c:e0:21:f2:2f:c0:9b:94:17:fc:eb:e5:
52:84:0b:65:0b:15:e6:24:56:56:c9:5c:f5:cf:e6:b8:aa:80:
54:f0:c7:23:26:68:64:41:b9:01:50:49:27:db:26:d5:08:21:
76:08:c7:1f:f8:da:ce:7f:71:6e:e3:4e:a8:26:b6:39:83:4e:
a9:0e:15:2c:d3:e8:95:1b:bc:7d:96:74:73:97:2c:28:77:a9:
15:b3:fd:eb:8e:e2:9a:f8:01:67:61:ad:a0:bc:e8:cc:bb:fb:
68:5e:bd:40:2e:11:bb:f4:ca:2b:53:cf:c5:55:52:d5:4a:42:
34:50:91:71:9c:7b:0b:40:36:be:a6:bd:8f:2e:04:e1:c2:9e:
05:00:8b:5f:31:8a:4f:f2:38:95:80:ee:96:27:9a:ee:ca:b1:
b0:22:b1:fa:e2:23:ae:c3:90:dd:0f:bc:18:df:4d:36:0f:0f:
46:c5:d3:79:48:0b:a3:88:38:f6:80:e3:07:e1:31:0c:a5:4b:
3f:2f:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:32 2026 by rpki-client