
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File: 6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier: drn9kD58kdm/7c+TXLfqBXJkWRafeBCPatg0Y5vr1pI=
Subject key identifier: 7B:8A:19:20:2C:8D:21:2F:4C:28:EC:26:C4:E7:97:49:69:90:30:16
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer: /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial: 07DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number: 07C3
Signing time: Tue 24 Mar 2026 21:09:50 +0000
Manifest this update: Tue 24 Mar 2026 21:09:50 +0000
Manifest next update: Tue 31 Mar 2026 21:09:50 +0000
Files and hashes: 1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: vR1HoWHsptW6lEGPygDVlzYBRlhvHu7C1ijn9WD6aOM=)
2: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: kOf83aQjaaKqko4elWofBx+7KSgYudc2m1r/KiOBcQg=)
3: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: tLDRGiCU+utA/X5xQvDZh46rYLAKb95Q/7U8Ll+hkxs=)
4: BB684734816B11EFA4D23930C4F9AE02.roa (hash: ZFPkmcqDjoKsQQuKRApVSD7ZZsh8Yv27krJA8gBgBE8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Validity
Not Before: Mar 24 21:09:50 2026 GMT
Not After : Mar 31 21:09:50 2026 GMT
Subject: CN=69c2fd9e-7fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:20:47:18:0d:1a:38:c9:f6:40:e1:72:2d:
f0:87:cb:7f:34:d9:d4:d9:0a:c2:20:29:60:6f:67:
de:71:92:28:bf:9b:20:11:02:6e:12:74:64:e3:df:
45:61:ec:36:5e:1e:27:72:5e:14:c2:28:06:90:de:
8a:f4:b1:4b:fe:78:65:c2:5f:9e:68:51:6d:86:3f:
b6:50:91:7f:aa:0a:c2:cb:f6:0b:b5:f5:8e:6f:c0:
46:eb:a1:34:ea:3b:5a:b6:8c:c0:98:4c:dc:bd:b7:
0f:bd:7e:df:32:76:c4:b4:c1:f2:9e:6d:85:05:0a:
80:d2:07:dd:76:11:10:69:9c:5d:da:d9:30:e5:20:
50:45:7a:6a:0d:98:a6:bf:f0:b9:a3:c3:df:24:d0:
1c:b0:e3:2f:93:bc:4c:3c:ac:70:c3:91:9f:42:a5:
76:6a:e1:58:74:ad:31:9f:45:8e:90:1f:37:2e:34:
6a:a5:6d:bd:84:b3:d3:dd:8c:51:1e:2d:8e:63:ab:
61:31:4e:a0:cd:5c:9f:23:42:e1:3f:a5:0a:bd:f8:
6c:ad:0e:07:15:b7:b7:a6:12:98:b2:0b:e2:b0:6d:
87:00:78:82:07:1d:09:d2:84:ec:d9:ea:ef:4b:cb:
b6:21:65:0c:5f:ac:e3:67:5f:9a:9c:de:b3:3c:2a:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:19:20:2C:8D:21:2F:4C:28:EC:26:C4:E7:97:49:69:90:30:16
X509v3 Authority Key Identifier:
keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:46:89:7f:b3:69:65:1a:e5:08:73:d4:05:bc:cb:04:e8:
14:a6:51:61:71:6e:9a:34:ef:6d:47:6a:ad:c3:d3:43:89:38:
26:ab:bd:11:4c:0d:ae:d2:10:46:d4:11:9f:ee:46:38:e0:f5:
47:5f:5a:e3:7c:db:db:3e:92:d6:46:b4:0a:02:9a:9e:39:1f:
b4:0e:01:ff:44:8f:8e:2a:83:ca:21:cb:f4:52:a2:0f:3a:9d:
d3:d4:04:03:3f:3e:12:2c:0b:e6:82:1f:9f:78:a2:2b:e3:1a:
8a:00:88:08:a7:7e:36:47:a8:30:77:9f:d5:a2:33:68:c1:ee:
5d:69:a4:52:36:6f:94:16:f2:7c:a0:4c:83:02:4a:22:b3:7a:
21:7a:77:82:ac:d6:9d:c2:a3:d0:06:d1:48:e0:8a:9c:75:4b:
ef:5f:2d:54:79:68:87:8c:ab:61:2e:8e:29:4a:db:ab:49:54:
2b:e9:3d:06:fa:6f:be:0b:e8:76:34:63:bf:1e:58:8d:ab:71:
39:2c:b9:22:e6:54:55:2c:a5:b1:f6:43:90:6b:d3:a3:70:08:
38:89:1b:71:f2:ea:2f:bb:2c:f1:99:a5:43:87:d0:bb:9c:2c:
ab:c7:01:d0:a6:7f:f9:53:5c:08:82:ed:93:cd:5b:a7:5a:92:
6e:90:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:20 2026 by rpki-client