
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
File: 6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json)
Hash identifier: ojyeNsF4MyXfZCqK6JZRbQDOdmS8XBFenfbKBmgixk4=
Subject key identifier: 7D:A4:DB:BD:7A:99:44:BF:2C:E7:FC:32:C1:B2:92:94:E9:78:6C:AB
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Certificate issuer: /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial: 0349
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
Manifest number: 0340
Signing time: Fri 27 Mar 2026 00:45:57 +0000
Manifest this update: Fri 27 Mar 2026 00:45:57 +0000
Manifest next update: Fri 03 Apr 2026 00:45:57 +0000
Files and hashes: 1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: d/k5V5GoKOFmbLDTlqitFSJ7araaDvDOIP4Qph3+Ok4=)
2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: PffbtU+FZwbW+w3qc8kvpp67chydu8DmmwmLQG4kYZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Validity
Not Before: Mar 27 00:45:57 2026 GMT
Not After : Apr 3 00:45:57 2026 GMT
Subject: CN=69c5d345-b40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:8a:b9:56:f3:ca:c2:90:c3:3c:ac:fa:bb:
a6:19:10:4d:b4:ea:be:f3:96:bf:ac:a7:ab:52:3e:
56:08:51:12:2e:51:98:9b:cc:01:68:b0:be:a2:fe:
40:c1:34:e8:d9:6b:8a:d1:6d:ed:1f:3f:03:12:49:
f8:bd:83:53:06:a9:fb:7d:f0:d1:ec:21:37:22:68:
a3:09:7c:44:a8:c9:2a:48:67:27:df:f1:0d:88:a0:
6d:52:29:32:20:ae:e2:c0:c6:56:6d:33:73:61:26:
2d:5f:6b:ed:aa:89:f5:fa:87:aa:5e:26:b6:9a:1d:
4f:16:cf:aa:b1:3f:80:b0:57:c9:ab:ea:08:d2:dc:
be:19:c1:ea:f4:f9:7a:87:be:c0:04:b3:a7:59:bf:
81:1e:d4:fd:8a:6a:4d:64:14:17:57:b3:e2:09:b1:
62:c6:bd:68:b2:07:41:2b:1a:0b:b8:72:4d:84:aa:
0d:4f:e8:5b:90:8f:fc:84:5f:92:84:4c:7b:d7:48:
25:64:ea:1f:eb:09:b0:b6:d1:1f:02:39:4e:eb:8e:
c5:42:ba:7f:26:d3:ae:59:96:0d:48:0b:e1:7f:71:
29:cc:88:cf:f1:fb:90:c1:c6:44:f2:1b:44:73:7f:
e7:ae:ff:71:71:ab:54:40:1b:80:88:13:0a:0d:6d:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:DB:BD:7A:99:44:BF:2C:E7:FC:32:C1:B2:92:94:E9:78:6C:AB
X509v3 Authority Key Identifier:
keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:83:10:0d:2a:89:f6:d5:0c:db:e5:2e:d4:cb:0d:2e:9e:
9a:77:f1:fc:1d:1a:44:31:c8:d3:f0:43:16:d0:b2:bc:9d:ba:
df:06:75:2d:05:04:f9:5b:50:aa:b0:85:7a:7c:81:c3:82:0d:
3e:b3:48:2d:c3:cf:4c:53:fb:f9:8d:94:37:6a:13:ae:85:a2:
63:bd:89:1d:a4:7b:28:cb:72:80:1e:c1:63:95:76:17:e1:a3:
b6:a6:c6:e5:99:a2:15:4d:d6:e0:68:61:70:eb:c1:44:a0:4b:
7d:dc:02:b6:ce:71:45:f0:e1:55:48:23:5b:25:b5:b3:fc:f5:
98:6b:d8:ee:54:d5:bf:ef:9f:f5:7f:66:2e:50:2c:8c:92:fb:
45:a5:ce:c8:58:e8:d4:89:d6:d3:04:81:a5:a6:d5:43:fd:fb:
83:f5:98:59:aa:1b:6b:15:0d:b1:64:cb:17:e8:b1:46:92:a6:
7c:fb:03:0e:fc:80:68:59:e0:1e:78:fc:ae:79:7d:d0:8a:04:
48:74:f5:3c:fa:db:4a:f3:ef:7b:4f:fd:64:f1:c5:d9:4b:ca:
66:c2:bb:d8:9b:39:05:44:7e:0a:8b:74:95:86:f5:2f:e9:cb:
3b:df:c6:0d:a8:4c:b1:ad:9c:e2:a9:a8:71:ab:0d:34:a1:82:
7c:b5:8d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:52 2026 by rpki-client